Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: UCYv3a0sls14njMe+YkOu6nKepyvILOQxaMGLHU+pWg=
Subject key identifier: DB:82:25:04:C5:E0:34:FF:1C:A7:EC:EF:37:26:F2:BF:D9:91:52:0E
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 01A0CEFF5F5EC755C03F2F4FF2519B79A2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 16:00:37 +0000
Manifest this update: Wed 23 Sep 2026 16:00:37 +0000
Manifest next update: Thu 24 Sep 2026 16:00:37 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: BfIpXn2FNcNjbpJ485Pis4XFqhelqLmM4kyAoI5/9Dk=)
2: 0g907WBXD4qZBS5Lv--lVG4AGmY.roa (hash: ADx0uWHqRsIMIEM4zrRsIaFkNMUykkO7aZ3mKfDHgOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:5f:5e:c7:55:c0:3f:2f:4f:f2:51:9b:79:a2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Sep 23 16:00:37 2026 GMT
Not After : Sep 24 16:00:37 2026 GMT
Subject: CN=db822504c5e034ff1ca7ecef3726f2bfd991520e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:c7:6b:18:50:c9:e5:9a:26:59:9b:ce:40:
d2:c9:9d:26:fd:76:21:3b:68:91:c5:27:6a:97:b6:
a0:b6:30:42:46:35:ce:d3:c6:6b:83:24:61:22:e0:
de:d3:ad:39:04:2e:b5:0b:3a:b1:5b:85:ed:37:6d:
19:ec:db:29:10:1d:c8:71:9f:53:36:b3:f2:5a:77:
b5:82:c2:8a:4c:ad:74:3a:4b:58:af:bb:fc:1f:e5:
6d:6b:ea:c9:35:35:fe:53:5b:cf:37:db:d9:7a:cd:
a3:54:70:26:64:7f:e9:b2:ec:8e:51:c5:15:30:3e:
74:ba:c2:47:d0:b8:99:5a:f9:26:c3:4d:f9:e6:24:
fe:e8:48:7c:48:87:ef:8f:ea:15:35:1e:82:ab:f8:
95:7d:43:90:83:38:c9:8e:68:3f:bb:7d:e6:ce:24:
f4:dd:77:16:e8:b6:e6:61:7e:6f:9f:df:2b:25:d7:
6e:8b:23:1a:52:58:62:52:3d:71:ad:f7:51:4a:97:
9d:fe:95:3f:78:8d:18:34:ba:91:22:e5:82:01:0f:
9a:52:17:b0:07:bc:ed:03:4d:d7:13:33:77:f0:1f:
51:49:9c:db:1f:47:06:82:80:cf:b4:6a:e5:9a:9f:
11:1e:16:3f:51:40:5b:c8:12:f0:c1:16:fe:82:5a:
61:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:82:25:04:C5:E0:34:FF:1C:A7:EC:EF:37:26:F2:BF:D9:91:52:0E
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d5:78:bf:79:9d:74:8d:aa:7c:9f:2b:8b:5c:1d:e9:be:83:
ff:54:7a:52:53:5d:63:7c:5a:6c:38:73:ac:b2:37:a7:95:03:
ec:71:4c:26:60:de:ae:17:e9:6b:36:17:6f:c0:aa:6a:8a:a4:
5a:2c:84:88:ad:75:16:28:13:08:41:2b:95:38:9a:b3:c7:d3:
86:98:43:33:6f:8f:a1:cf:f8:75:f3:ff:92:8c:6f:c4:9d:54:
f5:bf:f5:db:a0:68:86:a0:3e:d3:cc:b6:be:c2:b6:30:3a:6a:
7c:d2:3a:dd:48:d7:0e:dd:c0:3d:7b:8b:02:30:aa:29:7b:56:
71:4b:96:4a:67:a8:f4:d6:f1:69:0c:9c:f8:ec:39:0b:e7:20:
1c:06:47:d4:90:18:22:71:7d:6d:4c:db:ab:db:08:66:ca:15:
51:e7:3b:3d:e1:94:99:80:dd:90:ba:d3:3a:02:19:1e:44:15:
11:df:62:21:1e:f6:07:50:0a:09:a8:6c:8f:51:46:49:96:d4:
d6:a5:a1:a2:ce:53:2e:0f:3e:0e:c5:9e:e7:65:31:db:77:d7:
84:aa:00:84:40:96:5a:9c:5d:5d:5c:a7:c8:37:6c:f1:72:59:
c1:59:72:03:16:c5:ef:ff:b4:2a:fb:21:18:a8:24:7b:5b:ad:
3a:4f:eb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:09:03 2026 by rpki-client