Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File: 0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier: JOCfaR0qAd198lsc45HfVuMvf62dEoHbmZ+HbiePMTw=
Subject key identifier: CC:10:39:16:BD:11:97:F4:1C:74:4A:B1:9B:DC:7D:D5:73:34:14:3A
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial: 01A0CD11143A6047B84FFEB9C2847DE44F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number: 1944
Signing time: Wed 23 Sep 2026 07:00:43 +0000
Manifest this update: Wed 23 Sep 2026 07:00:43 +0000
Manifest next update: Thu 24 Sep 2026 07:00:43 +0000
Files and hashes: 1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: x0ySADyYx5hhA1NxU5Grabtu3evhl9bRTBqYEEZoohs=)
2: PzBJvCvuKoLcfTByzdz7KrKT9g0.roa (hash: 3oZ6E/qyPFCkNxJX9IOFDQ5m/aqdqH2CkJ/hq3ptHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:14:3a:60:47:b8:4f:fe:b9:c2:84:7d:e4:4f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Validity
Not Before: Sep 23 07:00:43 2026 GMT
Not After : Sep 24 07:00:43 2026 GMT
Subject: CN=cc103916bd1197f41c744ab19bdc7dd57334143a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:e3:7b:6c:13:fd:6c:44:53:6a:fe:c4:82:
a9:34:25:e5:0a:a0:c0:ae:48:61:d5:d9:47:de:04:
0b:1d:6a:b9:aa:81:a7:35:36:16:7d:ad:11:9c:28:
0a:b7:05:81:e7:1e:78:cd:3c:bb:ac:73:ff:77:26:
2e:43:54:99:b0:04:11:ce:c5:0b:0a:0e:c1:a6:25:
e4:ad:59:5f:18:63:de:f4:3f:b6:8a:85:ce:6c:65:
e5:54:48:4e:c0:89:27:25:62:d5:53:22:b6:a3:e1:
0c:60:02:e1:fc:3a:2e:31:f2:51:fd:32:cf:25:3b:
e1:f9:43:ce:e1:c4:4e:42:27:db:69:41:00:aa:1b:
29:61:28:4d:56:ac:10:4e:0b:12:93:5f:f9:a9:7a:
3d:57:ff:69:0e:b1:42:09:37:2a:53:20:59:8c:c7:
91:52:0d:af:8f:b3:1e:39:77:e7:b1:e0:d9:da:69:
4a:a2:d7:d5:6d:fc:5a:1f:d2:26:fd:7c:8a:c6:45:
0e:61:61:7c:f4:89:9e:ac:de:c8:82:ce:a8:bc:10:
2e:cb:2c:54:c8:be:d6:3e:2d:99:70:1b:6b:39:29:
59:ac:d0:89:43:d5:3b:80:4c:d5:4c:a0:fe:a9:66:
f7:25:49:51:ba:63:47:d9:e1:8a:3f:db:79:c4:8e:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:10:39:16:BD:11:97:F4:1C:74:4A:B1:9B:DC:7D:D5:73:34:14:3A
X509v3 Authority Key Identifier:
keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7e:35:89:07:ff:a6:98:d1:5c:40:4a:96:46:94:e2:2f:0f:
b4:30:02:e1:51:54:10:39:f0:af:60:4b:f3:85:34:d6:cc:ac:
68:21:3b:fc:ee:15:53:2e:88:63:cd:81:26:ac:17:fa:92:63:
3b:0d:ca:dc:3d:2e:f3:32:70:db:59:ef:e8:3d:0c:e7:34:23:
3d:26:ce:71:6d:7e:4e:a1:a8:50:cf:f0:b4:35:17:bd:fb:ee:
7d:a9:28:2b:88:56:9c:31:b4:83:2c:44:cd:e7:fb:0f:a7:c6:
26:c7:e6:9e:db:66:83:6d:ea:01:d7:9a:bb:d2:ca:4e:8a:df:
1c:7a:0f:d0:7b:fa:c2:3a:f3:ab:c6:c2:bd:3b:c8:a0:66:8f:
19:0c:03:86:94:83:08:9a:32:65:97:cf:f0:b5:10:6c:70:97:
43:5f:24:0b:ff:d9:8f:88:51:64:fe:3f:bb:65:09:9a:9a:0f:
f9:32:b8:65:fd:28:39:37:90:95:37:7e:7a:c7:c1:59:33:6c:
9a:82:19:07:8f:8d:39:c9:83:37:ca:a5:e6:ea:bc:57:32:29:
85:c3:2b:8a:67:2c:18:be:fa:dd:8b:88:cd:6f:b9:b7:36:55:
fe:cd:e3:9c:a7:3f:dd:9e:42:17:e2:9e:6e:08:85:20:02:1f:
d5:79:c3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:18:16 2026 by rpki-client