Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: 3bxrqlEbCcuJ0CsgjciF2OdwN1+ZaI84042h0TkUeKA=
Subject key identifier: 94:01:28:B9:FB:73:29:F7:C2:ED:F9:D8:38:A7:1C:A1:D2:59:EC:32
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 01A0D5DD89E67A687D4C3449F6FE390FC51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 00:01:00 +0000
Manifest this update: Fri 25 Sep 2026 00:01:00 +0000
Manifest next update: Sat 26 Sep 2026 00:01:00 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: A7QnnMXJiCpd1JPQbSVpyYit+0IYVV7t4Y1hd7sXQLk=)
2: i7JFrF70bzBo-gwwIdRO8VszDSY.roa (hash: tGNZRPLTTkwJbCKJRv1gdNJVG7D13l/23dduFfdxkF8=)
3: j-RqQ-Jv6xwxZVAttzs0WSOfmLc.roa (hash: 8oVyr5bD2ep8rJ+/mCDqgEEEeQzSBWCENnyJGHUEE6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:89:e6:7a:68:7d:4c:34:49:f6:fe:39:0f:c5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Sep 25 00:01:00 2026 GMT
Not After : Sep 26 00:01:00 2026 GMT
Subject: CN=940128b9fb7329f7c2edf9d838a71ca1d259ec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:95:24:8f:89:99:34:58:a4:f5:00:62:43:
3a:f4:e2:af:26:d4:b3:3f:0f:12:dc:2f:f2:2a:61:
0d:05:ae:d3:c4:ac:b9:c1:76:9c:25:7a:bf:34:f8:
d3:c8:03:4c:31:51:15:47:e0:0b:af:fc:24:46:c8:
77:ea:c0:36:4e:ef:a2:77:2e:e8:58:4c:53:ae:07:
01:47:c4:37:9d:bc:4a:f7:c5:46:6a:be:08:75:41:
c9:29:3b:a3:72:ea:3b:55:ae:4d:5c:86:14:68:5c:
40:19:a1:07:08:69:c6:dd:7c:47:c2:79:93:c0:e4:
fe:cc:02:de:5c:2c:47:80:c8:26:ea:80:ca:90:f7:
d1:13:67:8a:0f:83:8c:ae:28:ec:7b:37:75:13:04:
b5:9c:38:dd:cf:3e:fe:25:63:51:81:fd:f1:14:11:
c0:92:9b:8e:6f:ca:95:84:41:54:f3:c0:ab:ab:89:
b6:17:1f:fe:41:e5:8a:8c:ef:da:fe:cb:a5:83:c2:
0a:fa:bd:af:56:f7:8d:70:24:75:fc:69:f0:0f:90:
6e:cd:ad:3d:b4:2a:d4:b3:23:af:90:6b:8c:8c:5b:
30:9d:c6:1c:01:13:3e:0e:9e:93:dd:4e:75:55:4d:
7d:4d:a4:32:a5:8e:bc:a2:97:cd:99:4b:0a:83:3d:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:01:28:B9:FB:73:29:F7:C2:ED:F9:D8:38:A7:1C:A1:D2:59:EC:32
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bf:7f:20:fb:81:30:a0:6a:b9:4a:19:19:31:ab:e8:80:4f:
a4:fe:08:de:e9:39:80:9d:fd:32:bc:c2:52:16:19:07:bc:f5:
63:89:c8:c3:c5:5b:59:1f:77:fd:1c:05:21:c3:54:cd:44:48:
20:9c:44:af:3a:e9:9b:33:f3:3d:3f:07:0d:b0:31:32:53:2d:
b4:d8:87:16:07:c9:51:49:65:0e:f2:eb:24:2a:07:70:2d:84:
f3:86:17:81:19:00:65:83:c5:5d:5f:a7:d6:bd:7b:59:a9:c2:
28:c2:3b:4d:f7:64:35:23:62:2a:d2:f5:56:41:f6:ed:d5:4b:
6a:63:14:e2:f8:3b:ac:db:ec:d6:2d:8a:25:ce:9b:d5:19:dd:
fe:83:80:3b:15:39:9d:14:73:77:9f:d8:ad:fb:ce:01:10:7b:
6b:9c:18:0a:3a:88:42:02:23:fb:a6:b7:47:ac:0d:2d:dc:b8:
e3:31:4a:c1:39:07:74:38:4f:c1:ee:69:99:cf:c2:02:6f:1d:
98:71:aa:11:34:88:41:99:a4:da:e3:ab:ef:b0:03:22:99:4d:
23:70:86:fc:04:d1:27:9a:b3:4a:93:52:53:7e:4b:e9:98:19:
fd:45:53:ce:d9:8c:27:75:9b:16:ed:9f:c8:4d:f8:ab:d9:fd:
e2:7c:62:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:33:13 2026 by rpki-client