Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier: tjoudeH1Z9gytnl6OD3ZjnZ4wcsF00J1UbqCWO8pk9E=
Subject key identifier: 0D:74:5C:98:D0:7F:FB:3C:C0:A5:ED:63:26:F4:ED:1F:DF:78:68:E9
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial: 01A0C2C414634F41113F652F6A3B65042F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number: 0896
Signing time: Mon 21 Sep 2026 07:00:25 +0000
Manifest this update: Mon 21 Sep 2026 07:00:25 +0000
Manifest next update: Tue 22 Sep 2026 07:00:25 +0000
Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: C53AgO5pymDSLy6sSVFax2EVgiZXn2tvR3qcCDphOUQ=)
2: snrfUjBn7hs_JXI-JDADVPqBfu0.roa (hash: chl5WtQulq1NJ8dnVwRq5DKzxSTQgdztVrgONAQmO1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:14:63:4f:41:11:3f:65:2f:6a:3b:65:04:2f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Validity
Not Before: Sep 21 07:00:25 2026 GMT
Not After : Sep 22 07:00:25 2026 GMT
Subject: CN=0d745c98d07ffb3cc0a5ed6326f4ed1fdf7868e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:0b:dd:4a:9e:55:26:d4:c7:82:10:da:89:
57:0c:c9:9a:4e:66:f9:a2:19:26:46:fc:35:05:b7:
e8:5d:8b:86:1e:4a:ad:2d:a0:a9:b4:17:97:01:d0:
ac:ac:cf:6b:bd:86:85:a2:a9:d0:e5:1c:b2:4f:ae:
8e:12:85:42:a6:b4:58:ed:8c:92:49:aa:a3:ce:d2:
74:8f:60:37:25:4b:af:70:64:91:47:e1:c7:ee:5f:
cb:07:2f:df:eb:d6:92:f1:49:dc:0c:95:fd:56:cd:
70:63:b5:13:23:36:d4:7e:e0:56:4a:69:b5:e5:08:
c8:c5:e1:af:77:f5:0c:04:af:96:45:aa:07:58:74:
09:3b:3a:a8:a9:4d:47:3a:37:24:5d:30:07:71:f9:
44:8f:40:03:fa:dd:71:08:13:99:25:4a:3a:51:83:
79:95:05:ee:64:8b:70:c8:0a:d3:7a:c0:af:e0:05:
1d:85:c0:58:0e:62:b2:5d:ba:cb:92:3d:4c:88:b3:
40:51:dd:c0:e0:cf:7c:c3:c2:11:1e:2c:d2:34:a7:
8b:2b:a7:b8:8b:6a:62:69:d4:95:33:9f:18:b4:87:
95:91:b2:97:ee:22:20:13:c7:46:40:f4:3a:f1:fa:
89:23:7b:bf:8f:dd:dd:42:e6:db:55:72:20:1e:4b:
7e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:74:5C:98:D0:7F:FB:3C:C0:A5:ED:63:26:F4:ED:1F:DF:78:68:E9
X509v3 Authority Key Identifier:
keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:54:8a:49:bf:90:f2:a4:8a:6d:39:6e:3e:33:8c:74:0f:aa:
7f:66:b3:df:c8:42:2b:51:c5:74:a8:68:f4:99:49:77:aa:0b:
ba:e8:d6:9c:ef:3c:43:07:01:47:7e:43:39:94:e7:21:db:99:
df:43:2f:52:6a:6b:9c:ba:8e:81:1e:26:4d:42:b0:f6:bd:49:
af:3f:48:97:62:81:32:c6:a4:e0:70:c7:e7:6a:e1:b7:8a:60:
43:f3:71:e9:43:8d:e8:d0:4e:0c:97:c2:ee:66:47:b3:3d:0d:
18:55:d1:74:db:f3:f4:3e:6a:65:c2:d2:90:7a:7a:79:55:c4:
c7:62:5a:76:f7:70:79:11:f0:2f:28:be:33:17:26:8f:be:6c:
6e:77:d0:ba:04:88:a6:a6:d9:d7:20:b9:9d:6e:2f:58:18:6e:
60:f9:8e:c3:31:15:2c:df:26:17:dc:16:77:0a:ea:05:ad:38:
fb:eb:d7:c2:d8:59:b2:6a:3e:49:25:e4:d7:51:9f:b3:24:db:
de:44:a7:a1:3a:11:22:87:7d:9e:81:34:5f:a5:88:7c:26:7f:
f8:6f:0e:32:31:a4:7d:af:a4:7d:43:ec:f9:56:31:47:d0:b0:
85:8b:41:1a:e4:e2:9b:c0:e1:2a:96:b1:c4:d9:0b:b9:ff:99:
27:c0:a4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:48:27 2026 by rpki-client