Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: 3NjZDFDgaT7OtFpB8cwrPaRT57NKlht1JXLxoTpsdLc=
Subject key identifier: 92:91:E2:2D:46:10:2C:B2:23:A6:2D:2F:95:78:98:C3:AF:79:DA:73
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 01A1C065BCC464ECD88DDDC51E77ACD38B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 1AEA
Signing time: Mon 09 Nov 2026 13:00:55 +0000
Manifest this update: Mon 09 Nov 2026 13:00:55 +0000
Manifest next update: Tue 10 Nov 2026 13:00:55 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: VeCbKAz/vOh8XxUpwTbFscgXku5xjlONFOesfKF7c7I=)
2: 0g907WBXD4qZBS5Lv--lVG4AGmY.roa (hash: ADx0uWHqRsIMIEM4zrRsIaFkNMUykkO7aZ3mKfDHgOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:65:bc:c4:64:ec:d8:8d:dd:c5:1e:77:ac:d3:8b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Nov 9 13:00:55 2026 GMT
Not After : Nov 10 13:00:55 2026 GMT
Subject: CN=9291e22d46102cb223a62d2f957898c3af79da73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:25:4f:41:0b:75:8e:b5:9a:56:08:78:8d:17:
b0:59:fd:8e:99:37:28:61:dc:77:42:ca:e7:30:1d:
c6:b9:e8:bd:8b:c1:ee:8d:dc:ce:ce:b6:86:5b:03:
b1:b2:70:6e:73:9c:eb:f9:b2:92:4d:3b:5a:ce:9a:
7b:83:72:8f:13:0e:99:88:05:ab:76:00:fd:7c:f8:
24:a7:33:52:3d:0c:f2:bf:ca:b9:cd:5b:49:64:2c:
7d:ce:93:b1:2a:16:ab:54:1c:0b:6b:65:60:c3:f3:
b6:30:c5:aa:f9:a2:d6:e4:c9:b1:2b:f3:11:af:9f:
59:2b:0c:61:f9:3e:5c:48:aa:9a:5a:96:4c:77:de:
78:da:ec:36:a3:3b:15:0a:36:06:a7:80:40:2e:05:
31:53:5a:db:07:80:6d:af:a8:90:f8:a6:6d:c5:af:
12:03:66:2f:41:2b:de:eb:11:3d:af:8f:90:82:f2:
f3:6c:e4:9f:0b:0a:75:f4:48:0b:f9:aa:02:f9:8c:
3b:29:07:0a:94:c9:30:f6:8d:2a:f1:9a:f2:89:e7:
7b:4b:70:90:fd:3f:86:69:48:41:61:75:77:72:71:
7e:cb:7a:1b:a8:2b:6f:13:2e:22:09:70:e7:61:53:
e6:92:20:81:f4:6b:45:99:23:bb:48:22:58:7b:04:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:91:E2:2D:46:10:2C:B2:23:A6:2D:2F:95:78:98:C3:AF:79:DA:73
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a2:75:ba:2d:f2:fa:47:3c:28:1b:0b:f7:6c:cc:8f:eb:29:
10:ad:78:01:73:86:31:e6:8f:eb:e5:51:41:92:23:bc:a9:0f:
55:89:18:4f:85:69:5a:40:67:87:c0:a4:fd:a2:8d:f9:ca:74:
06:e7:47:77:bf:2c:bf:ba:68:cc:4a:ac:29:0f:6a:36:7b:7e:
71:d5:05:e6:77:19:80:0b:48:0d:d2:83:46:7f:1b:2f:76:cb:
f2:86:ab:f5:f9:e3:0b:db:48:da:2f:ba:26:f1:c9:19:b1:37:
75:38:55:96:a3:40:85:e1:cb:79:1f:a9:29:3e:43:ea:29:23:
e5:60:ba:3f:83:c7:dc:e9:69:ba:53:f5:de:1e:e1:ae:c2:a7:
5b:17:55:07:e8:6f:aa:0b:e8:72:78:af:0d:7a:d8:52:7a:be:
00:fb:e3:f5:45:a4:69:99:3d:1d:24:ea:ec:a6:a9:a2:b0:d8:
1a:e0:45:67:c0:f8:04:9e:32:b4:2f:87:93:5d:c2:e6:06:90:
e3:ef:fc:5b:57:fd:2e:cd:d2:7f:e3:3e:d8:2a:06:b8:c4:74:
1e:65:3c:ab:bc:70:a4:1e:24:3a:0b:3a:73:56:41:45:f7:79:
3d:17:f1:f5:ae:68:cb:2e:2f:4d:7e:d7:ca:03:5e:1d:cd:9b:
97:31:f2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 20:17:24 2026 by rpki-client