Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: tH+We4Axv4Ug7zhDrw55IGVPgDmqoNQGJJtYi3QkjbY=
Subject key identifier: FF:1E:0E:97:95:C7:AF:DD:91:AC:D0:BA:79:F6:11:60:F8:BD:DD:76
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 01A13F707AB755918413CBF666759880B38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 12:01:38 +0000
Manifest this update: Thu 15 Oct 2026 12:01:38 +0000
Manifest next update: Fri 16 Oct 2026 12:01:38 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: /59pUqVZZWSHQk5t37fb8YzTh3SLF41mq8uFkDXR8aE=)
2: Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa (hash: punip1kHRpKApQYHrsUHwLPlb8qszTQ5w8o2U1ESN+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:7a:b7:55:91:84:13:cb:f6:66:75:98:80:b3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Oct 15 12:01:38 2026 GMT
Not After : Oct 16 12:01:38 2026 GMT
Subject: CN=ff1e0e9795c7afdd91acd0ba79f61160f8bddd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:5c:b4:e7:1a:c6:c9:6a:38:ba:8f:e3:1e:
66:3d:17:df:1e:2c:58:41:fe:88:33:a0:cd:73:90:
a5:89:f4:cc:42:ca:c3:ca:3f:d3:93:ea:65:f9:d3:
fa:b8:5d:69:63:de:09:89:e4:c7:81:8d:9a:d7:10:
ab:c6:30:4b:b8:c8:26:40:1b:0f:8a:3e:1f:78:eb:
c1:f7:36:61:8d:48:7f:bb:b4:7e:9c:24:27:21:28:
59:57:d4:e1:05:08:2e:95:dc:bb:02:a1:d0:f4:91:
0c:b2:b3:a2:b5:89:d8:88:c9:20:a6:26:9c:f7:bf:
a7:73:bf:37:be:76:9f:7a:4f:06:0b:03:71:8d:88:
b3:ac:c6:e8:39:de:d6:77:aa:34:f0:29:2c:31:7c:
8c:83:85:9b:9c:fe:3e:d5:88:ee:0a:a7:e8:f7:75:
83:ff:26:cf:2e:96:f8:0f:e7:57:a8:b9:36:6f:d6:
f1:9d:78:f7:2e:09:83:b6:13:39:bf:22:51:74:67:
12:86:d9:68:aa:e3:bc:3d:1f:22:7c:5d:25:bc:00:
97:0b:8d:4d:e6:5a:48:da:f7:e8:d1:fc:1f:60:dd:
bb:bc:a1:79:49:a3:69:76:9c:90:67:d5:61:7c:8b:
6e:3c:c6:58:54:02:62:dc:8f:6d:d6:8f:0a:76:76:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1E:0E:97:95:C7:AF:DD:91:AC:D0:BA:79:F6:11:60:F8:BD:DD:76
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a3:5f:7d:5a:e4:af:9c:61:1e:ec:14:4a:3d:15:dc:0d:a7:
77:19:cc:43:89:0e:c7:27:d6:bf:aa:94:af:d1:13:0c:6d:ef:
8d:a9:42:05:08:97:ab:b3:d2:1f:2e:3b:12:1b:06:15:74:23:
64:b3:0e:a2:47:5f:97:da:34:f2:d0:a6:6c:a3:c7:f5:2b:dc:
26:04:a9:c6:61:f0:3b:c4:1a:c2:e6:51:78:ab:61:d3:95:75:
ab:f0:e7:3d:e9:7c:19:41:b9:ae:03:3d:6a:8c:fb:ac:f2:03:
da:af:44:c2:81:ce:9f:0e:48:72:1a:a1:f7:00:6c:79:bf:53:
97:24:3e:a4:2f:50:21:e1:13:16:fb:35:86:96:4f:29:a6:52:
95:89:28:5e:d5:b3:4c:47:db:e3:bc:cf:d0:e9:a7:e8:4a:76:
dc:34:9d:1a:8e:14:11:c7:98:e0:60:6e:5c:ba:30:d7:68:68:
9a:49:39:c5:ab:97:97:7c:69:f2:56:cd:64:a0:4f:b7:82:58:
b4:c0:ae:ee:98:3c:be:b2:3a:fa:b3:71:46:46:9c:00:af:1b:
20:66:23:9f:08:ff:85:5f:ac:1f:56:f3:e5:0d:db:0f:c7:37:
72:dc:34:a5:1b:b4:37:35:cf:1c:b4:48:05:00:fb:9f:e4:53:
dc:46:0d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:07:59 2026 by rpki-client