Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
File: 0PhWqIToYidB9eFo7Hqno95vK8M.mft (raw, json)
Hash identifier: V/WZGNuroAEp/xeTWBukDsNPQOUhbJVT7yyGg8j8OVY=
Subject key identifier: C5:A0:3C:78:DF:A2:3E:92:77:9C:37:2E:C3:77:2D:46:E0:54:DB:D1
Authority key identifier: D0:F8:56:A8:84:E8:62:27:41:F5:E1:68:EC:7A:A7:A3:DE:6F:2B:C3
Certificate issuer: /CN=d0f856a884e8622741f5e168ec7aa7a3de6f2bc3
Certificate serial: 01A1DF830A3A7234E55DDB14A2CA2489791A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
Manifest number: 01BA
Signing time: Sun 15 Nov 2026 14:01:09 +0000
Manifest this update: Sun 15 Nov 2026 14:01:09 +0000
Manifest next update: Mon 16 Nov 2026 14:01:09 +0000
Files and hashes: 1: 0PhWqIToYidB9eFo7Hqno95vK8M.crl (hash: ocqxo5nSXwzEhxi6JKNF/ssrQQ2x0VqSewJepZXBFpA=)
2: 5uwlb6VAMyxIYrxx11L4WCDtq5Q.roa (hash: zVxnrr7NCdH/hFMNNgmxYObL0zm+TgiecARXZu0CtnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:0a:3a:72:34:e5:5d:db:14:a2:ca:24:89:79:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f856a884e8622741f5e168ec7aa7a3de6f2bc3
Validity
Not Before: Nov 15 14:01:09 2026 GMT
Not After : Nov 16 14:01:09 2026 GMT
Subject: CN=c5a03c78dfa23e92779c372ec3772d46e054dbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:9c:aa:34:7c:3c:1b:12:74:bb:a0:86:6c:
59:0b:9a:e0:9e:2e:ed:16:5a:ba:de:d6:7e:65:4b:
8e:a5:6c:fd:44:51:bf:10:09:94:0c:ae:7d:44:ef:
ca:70:4d:6e:ec:e7:e8:8b:ae:3d:d3:d8:a6:54:e5:
40:79:97:f2:59:6c:45:d6:b3:b1:e9:aa:c7:cd:e2:
f5:5b:1e:be:3c:bb:fe:29:6d:70:fc:22:45:a7:fa:
ad:57:32:a6:c4:68:a5:06:98:39:1c:11:28:38:57:
9d:47:56:07:06:a8:8a:1d:39:fa:7a:55:a2:a3:1b:
2e:35:72:15:93:de:28:61:8b:e4:8b:53:f6:19:62:
80:fa:1d:01:9e:2c:74:93:f8:b5:62:c7:fd:b1:e0:
be:bf:9b:71:cb:35:6f:09:ec:0b:a1:27:15:78:35:
c5:32:23:da:1c:c4:7e:c7:7b:a7:7c:78:53:44:cd:
4f:b9:8b:e9:0d:42:c3:36:7d:72:00:a2:31:2e:99:
48:dd:4c:7a:ef:bc:a6:25:46:cb:77:b6:2a:4f:61:
53:92:c9:0f:b8:36:71:dd:4b:22:26:fa:7f:6f:b0:
f2:33:a9:2a:6e:a7:83:90:e2:a1:90:89:60:92:4b:
24:78:4a:02:f8:07:a3:83:93:5c:48:fc:dd:9e:d7:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A0:3C:78:DF:A2:3E:92:77:9C:37:2E:C3:77:2D:46:E0:54:DB:D1
X509v3 Authority Key Identifier:
keyid:D0:F8:56:A8:84:E8:62:27:41:F5:E1:68:EC:7A:A7:A3:DE:6F:2B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:35:7d:ca:10:7c:fd:01:68:75:25:a8:9f:76:e6:3c:c5:7a:
b4:01:07:1f:21:98:9b:4c:86:31:90:63:46:1e:0f:2c:3e:89:
92:df:f6:e5:f8:2c:73:bd:9b:bd:6a:f2:1d:35:8e:56:82:2a:
72:00:a0:30:49:9b:b5:1f:1c:84:e6:49:84:67:70:d5:49:43:
ee:38:84:0a:c6:b8:b5:e1:5e:cb:e5:1d:1b:e9:fc:fe:67:64:
d5:76:4a:11:5f:b3:72:74:8e:74:2b:a0:52:7b:6d:65:d2:8a:
a0:67:62:64:a2:c6:b5:fa:d5:ac:68:97:8c:e8:0f:22:63:10:
4c:1f:4e:eb:a4:1c:3f:f2:fa:4f:80:c0:a8:42:18:3c:f4:76:
15:92:a5:a5:46:94:ee:72:7e:b6:e6:a1:49:e4:c6:5e:4b:3f:
78:27:0e:c6:f8:de:fb:b8:4e:a5:72:f1:4f:34:4f:eb:a1:bb:
6d:5c:cc:3d:f2:4d:50:66:34:41:a5:6c:26:f6:56:e4:19:2c:
85:57:88:3e:98:88:e4:ab:09:dc:77:48:93:8c:57:7e:17:8d:
92:90:b9:4a:a8:5f:c5:75:4e:2d:f0:66:5f:4a:b1:ee:3e:f1:
6d:90:fe:a3:ce:b6:a9:9b:2d:91:23:9a:d5:44:7a:7a:ff:8b:
91:fd:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:59:48 2026 by rpki-client