Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier: PofAL92n7kObgx4zz5jeqHRXedg7zBxhVsMW1qZqcFs=
Subject key identifier: 86:CB:6D:D6:F7:22:E9:E7:B1:0B:B5:83:33:B7:DB:19:F5:86:A2:FA
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 01A0C2FB6B6424271DEC4BBE0E4C063690C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number: 1964
Signing time: Mon 21 Sep 2026 08:00:51 +0000
Manifest this update: Mon 21 Sep 2026 08:00:51 +0000
Manifest next update: Tue 22 Sep 2026 08:00:51 +0000
Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: FaeiPRhGPNifhms5Uv+UPOEqoAdLy/UT9Ki3G5UkOI0=)
2: cjgT7b7LYeNp4gJNcn-t-JKsvkw.roa (hash: 8t1u0wHQqLOP5QRswUwGb0F26EqFaE1jpZ2Y496m/4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:6b:64:24:27:1d:ec:4b:be:0e:4c:06:36:90:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Sep 21 08:00:51 2026 GMT
Not After : Sep 22 08:00:51 2026 GMT
Subject: CN=86cb6dd6f722e9e7b10bb58333b7db19f586a2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bb:ce:65:6a:71:28:b8:f3:ba:06:df:a9:63:
23:03:f3:84:ae:86:62:99:36:53:32:9c:c0:60:c8:
60:4c:82:fb:1f:52:eb:92:4a:65:b6:dc:90:06:0a:
7d:f8:df:6c:a1:10:52:ce:8c:0d:3e:66:2b:4e:77:
41:c4:d2:3d:2c:14:36:aa:30:f1:05:4b:0e:78:b8:
5b:41:fb:21:76:4b:f3:7e:44:a5:54:78:56:b2:f7:
d1:a2:0e:59:73:39:39:0f:ed:5d:48:87:eb:66:92:
c2:b1:aa:3e:11:1f:57:c4:bc:01:b8:83:74:46:d7:
88:95:84:5e:13:1b:13:59:76:62:27:2d:b3:92:cc:
3f:12:60:0a:93:af:b5:b8:e1:0b:24:4f:a2:82:ed:
cb:28:69:35:e6:c2:a9:9c:b2:42:84:4c:26:5f:3e:
cd:b5:41:0a:ea:a3:6c:fa:b0:f5:69:64:18:6b:84:
3b:40:5f:e8:a4:cf:05:13:b3:f2:6e:ff:71:7d:70:
9d:6d:d1:be:cd:75:37:ed:5e:fb:79:2e:be:2e:43:
3c:ea:cb:a5:17:ae:d6:41:fd:28:d4:7e:85:37:2d:
96:0a:3d:1e:1f:df:81:75:00:c2:7f:25:1b:cb:e8:
35:61:d2:ee:9a:8a:08:5d:25:44:27:33:14:27:37:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CB:6D:D6:F7:22:E9:E7:B1:0B:B5:83:33:B7:DB:19:F5:86:A2:FA
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:77:af:84:93:6a:78:73:9e:28:c2:3d:99:ae:98:2d:cc:ff:
a7:f7:91:e8:63:ab:0c:5d:c6:8b:0c:e2:37:70:6f:3d:15:21:
80:74:f7:e0:b1:c6:5f:3d:1e:e8:89:df:5d:4a:f2:1f:67:96:
0c:a1:ec:a9:0b:77:2e:a6:6b:2a:3f:7a:44:d2:d6:b4:aa:db:
00:89:00:b2:ad:f8:dd:c5:bf:ce:93:76:12:59:6b:4e:29:55:
98:01:20:42:fd:13:22:eb:f6:76:bd:ee:61:80:a4:03:25:79:
f1:c9:d4:4b:c2:73:71:ce:b2:3d:73:54:36:31:8b:f2:4c:57:
a5:e3:30:0d:26:4e:2f:f4:e8:11:de:43:01:1d:2b:99:0c:8a:
e6:c1:c2:2c:b9:87:8d:f2:e9:c0:6c:7c:25:b3:65:52:49:c1:
73:38:0c:52:7e:6c:8e:15:93:f6:a1:9b:ae:de:8c:27:c5:4d:
e0:45:df:29:01:78:9b:9c:3b:bc:a2:f0:ea:bd:5b:87:2a:e2:
6b:03:91:7e:f2:3b:cb:32:d4:d9:dd:58:0b:38:57:3e:d1:b6:
e8:db:2d:92:02:69:13:54:7b:1a:af:3e:23:06:8b:1e:aa:ad:
36:25:de:4a:8e:a2:24:7f:cc:65:61:a2:9f:af:93:d7:1e:76:
22:78:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:02:11 2026 by rpki-client