Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
File: 0aJ0TmbValnwtKDjDNEUqusVJzM.mft (raw, json)
Hash identifier: /yCsRd4LtvAeyy9EHAnKrvIvEFfve+GyQmcQLBYHLXc=
Subject key identifier: 3C:62:52:30:CA:65:80:65:07:22:2F:B9:A1:38:DF:92:05:57:22:C0
Authority key identifier: D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
Certificate issuer: /CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Certificate serial: 01A0D45E139CDCF6D0C1FBA014CB1379E532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
Manifest number: BD
Signing time: Thu 24 Sep 2026 17:02:10 +0000
Manifest this update: Thu 24 Sep 2026 17:02:10 +0000
Manifest next update: Fri 25 Sep 2026 17:02:10 +0000
Files and hashes: 1: 0aJ0TmbValnwtKDjDNEUqusVJzM.crl (hash: DVAK8RnNCjfVLfXORaLRUYF+Bs22Wh+GlqSqZCnz/4k=)
2: ceyUVnmYWQ_dIwIKpX64k6Y4OLY.roa (hash: ptX3G2iVrVq3xSTlraGgIQKayhp9ftrtJBYKoRwKsRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5e:13:9c:dc:f6:d0:c1:fb:a0:14:cb:13:79:e5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Validity
Not Before: Sep 24 17:02:10 2026 GMT
Not After : Sep 25 17:02:10 2026 GMT
Subject: CN=3c625230ca65806507222fb9a138df92055722c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:78:39:2d:ec:b5:57:94:37:f4:fb:cb:21:
19:3a:52:3e:91:fe:a8:00:c6:56:7f:ec:3f:3e:e8:
20:18:e8:04:9b:eb:49:9c:4e:02:2f:19:c6:16:0f:
14:e7:45:b7:9d:e9:ce:1a:5d:45:ba:58:b0:4f:9c:
f2:e7:11:93:3e:6a:8f:c3:29:09:e5:ac:bb:de:14:
e3:90:64:ff:ee:a0:a8:6a:5d:32:63:ff:bd:2d:e1:
dc:9b:e2:6b:ac:e6:20:d0:c1:f6:71:bc:e3:90:2c:
94:22:8c:49:25:ff:65:07:86:4b:cd:00:e5:4b:13:
0f:36:cb:bd:cd:00:f1:70:22:db:5d:9f:7e:c1:38:
d2:67:e9:b7:50:33:40:ea:d3:7e:66:f5:ed:dc:ad:
41:d9:17:ad:2f:f1:20:a9:80:08:3a:98:77:96:ed:
d2:75:10:eb:f8:6d:71:54:97:b8:29:b1:55:4d:07:
e8:fc:1e:62:40:6c:d4:35:16:77:cb:ed:7b:bd:28:
1f:2b:11:8b:72:0c:5b:6e:92:16:03:e4:25:75:dc:
da:64:73:ae:4c:41:69:e4:1e:95:4d:4b:38:21:2a:
a9:e3:4e:8e:3c:23:d2:e9:5c:8b:49:40:59:7b:f1:
b7:61:b1:92:4a:de:c9:3f:8f:bb:82:81:69:f9:18:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:62:52:30:CA:65:80:65:07:22:2F:B9:A1:38:DF:92:05:57:22:C0
X509v3 Authority Key Identifier:
keyid:D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4e:5d:8c:3e:d0:27:da:e4:13:b1:be:f6:48:7e:8d:f8:b1:
8d:e3:49:9e:82:dd:75:58:24:63:cb:67:31:d3:19:c5:66:0a:
50:6c:7f:f9:92:54:38:70:a9:00:fe:5b:cf:f4:c8:3b:e8:2a:
4d:56:8b:b2:86:7a:e1:32:26:53:59:41:08:7a:2c:4e:30:c8:
8a:a0:de:4d:09:b8:d0:e5:68:be:4d:ff:50:92:fc:9a:20:8e:
be:59:e6:01:28:c4:84:19:c0:b8:0c:85:a8:c4:de:96:34:3d:
1f:1b:a4:d0:10:bf:11:76:56:a0:a9:7c:51:2c:97:24:49:db:
05:f9:ba:fb:1e:e1:74:1b:16:32:b9:9d:88:7e:f0:63:c3:52:
7e:39:a1:bb:f8:d5:dd:46:40:ef:84:a8:3e:2e:79:1c:66:e2:
ab:2f:64:ae:8b:b3:95:9e:f7:c9:64:e5:35:21:a6:41:4f:72:
89:59:82:1b:32:79:b9:65:ca:68:6d:34:f5:b0:9f:6e:ed:1e:
a6:d7:e4:e5:d3:43:fe:49:c6:84:20:91:e6:70:04:01:23:0d:
c5:10:92:bd:41:6a:2d:81:52:a0:ff:6e:70:57:f3:ef:86:36:
fb:eb:bc:02:d7:97:66:e3:24:e0:b1:f2:4e:e3:89:09:24:0f:
a7:79:da:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:41:00 2026 by rpki-client