Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: qB46MzGEtcC0GtWxjyAHmhwYUxInOqy6SWexnMh7v6Y=
Subject key identifier: 90:E1:D2:3D:7E:DF:58:45:03:F3:A4:BA:32:0F:14:18:B3:35:04:88
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 01A0C77CB9393CE1C3B8EC1F391963379413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 1462
Signing time: Tue 22 Sep 2026 05:00:34 +0000
Manifest this update: Tue 22 Sep 2026 05:00:34 +0000
Manifest next update: Wed 23 Sep 2026 05:00:34 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: lt5M4WVCkTD52GOMY4MqiiGEyJqOoc029mD0JCQfx+A=)
2: q5b2DuF1EAMOC22AlAeZQWFkxpU.roa (hash: 6KXA/tbOOb8+a5Q0zFi+dIBOh0aAYoOzdzGbwggmS5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:b9:39:3c:e1:c3:b8:ec:1f:39:19:63:37:94:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Sep 22 05:00:34 2026 GMT
Not After : Sep 23 05:00:34 2026 GMT
Subject: CN=90e1d23d7edf584503f3a4ba320f1418b3350488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:e5:03:dd:1d:64:e5:c5:0d:08:82:bd:c0:
f0:84:de:16:77:76:9b:c1:4f:cc:15:ee:56:c0:4f:
3f:3d:26:14:85:5a:84:e0:f1:e6:12:6e:96:37:9b:
7f:ae:64:9e:39:bb:9a:aa:11:4f:35:3a:d1:ac:be:
ca:db:d7:5f:79:63:62:b9:f9:b1:58:77:de:39:30:
5e:a6:61:ac:90:e3:75:cb:29:8f:5d:53:9c:67:ab:
c5:22:96:90:9c:b1:31:b6:05:bc:a7:c8:65:6c:37:
b3:c5:e9:98:e6:8c:29:d9:03:d3:71:8f:ad:15:bf:
3e:40:c4:ad:a4:c0:79:d1:44:2f:95:8d:7e:1a:f1:
2e:ec:bd:65:d0:61:ac:9e:8c:38:b2:4f:74:0b:2d:
21:f9:ae:57:cc:28:91:21:99:73:79:b1:ed:19:44:
0b:02:a8:4d:16:9d:f0:1c:55:90:30:c1:8f:39:2f:
d5:f5:e9:2b:19:75:95:05:85:e7:d2:89:a5:6f:1c:
62:82:da:10:5a:c7:f8:2a:ec:31:6a:cf:9a:b8:98:
c7:9d:90:2e:2c:6b:12:2c:4c:33:e3:0b:1b:1d:a9:
dd:65:6b:e4:65:75:d9:c8:08:08:9e:45:e9:cd:2f:
89:8b:a9:04:e8:52:d1:0c:54:51:c8:6d:2a:cf:a7:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E1:D2:3D:7E:DF:58:45:03:F3:A4:BA:32:0F:14:18:B3:35:04:88
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:70:42:e2:d7:b0:2c:31:26:bd:bd:93:d5:d6:1c:f6:9f:72:
04:4a:fc:87:38:7f:d3:46:df:6e:67:fb:13:6b:2e:f6:11:88:
4d:1c:e6:0a:dd:34:84:b2:f3:18:c5:c7:74:99:67:fc:02:56:
fb:bf:3e:f5:c7:96:53:9a:8d:d0:96:85:83:7c:c7:be:18:61:
e2:4f:3c:69:eb:c1:f6:7c:cb:df:0c:8f:db:2c:b4:80:c1:39:
2d:72:b8:a9:2b:5f:23:b7:64:0e:01:aa:6f:86:a6:a9:01:f3:
9f:56:3c:56:8f:ac:fb:28:68:3f:a8:40:42:99:bf:12:30:38:
ca:eb:c3:0d:5d:87:4e:b9:fd:47:f1:28:04:bc:b7:d6:aa:25:
57:8f:11:21:96:4e:f8:07:8a:97:2f:0e:29:1a:49:03:b6:ca:
69:b8:97:f8:24:a7:16:6c:25:21:08:cb:12:b3:20:d0:0a:51:
a9:d4:f0:39:2d:cf:e3:eb:58:96:0f:01:0c:45:b5:e8:3f:17:
0e:ab:60:33:74:f4:cd:d4:74:b1:8a:a4:b7:d0:46:22:00:87:
7f:04:0c:39:6a:e1:fd:9a:c5:6d:6c:85:b9:13:ff:5c:75:42:
ba:b0:74:ba:1d:a9:c8:85:23:56:d7:9b:a4:d7:8c:4f:16:8e:
6c:30:ac:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:18:28 2026 by rpki-client