Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: 6DcxCFCkjw1guJRSEpUiQr0l7vtRsA4XxLkZdgQvTMk=
Subject key identifier: A0:1B:47:DD:8F:2B:B1:6F:C2:20:20:8F:45:4F:10:93:A6:32:F6:20
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 019FFDC97D89730F1024F8990E5B43D70620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 0658
Signing time: Fri 14 Aug 2026 01:01:08 +0000
Manifest this update: Fri 14 Aug 2026 01:01:08 +0000
Manifest next update: Sat 15 Aug 2026 01:01:08 +0000
Files and hashes: 1: oMb2k7Oz9unm3siEKObsvSGOu5s.roa (hash: pGiHyUdRro6M/TUFejm603qJXDKgL9TMHqLZBCWVjz4=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: OvhQ4z7ddyiMsY+VeZhIv2dwm+yKdcdlA0wMIoOffUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:c9:7d:89:73:0f:10:24:f8:99:0e:5b:43:d7:06:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Aug 14 01:01:08 2026 GMT
Not After : Aug 15 01:01:08 2026 GMT
Subject: CN=a01b47dd8f2bb16fc220208f454f1093a632f620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:7f:b0:48:1f:30:66:1d:5c:6a:69:dc:69:
32:a5:17:82:64:05:4b:f2:87:5a:5d:06:6e:cb:da:
16:b2:7d:81:b2:6a:83:77:f8:95:b3:24:21:f2:89:
58:ef:61:a0:76:3f:87:12:2a:77:84:9d:cb:01:27:
dc:b4:6b:9d:75:13:4e:2a:72:ce:c1:06:71:d1:da:
97:4c:57:a2:cb:85:97:bf:9f:ea:f9:ba:1c:13:90:
a7:7d:ab:cc:3a:11:a8:8f:bd:e8:79:46:eb:3d:65:
f1:1a:1d:35:5b:24:90:8e:c3:66:bc:7d:ab:09:0b:
a0:f5:11:95:ea:be:c3:3c:9d:85:51:04:8c:0c:2b:
86:ec:f7:2c:a7:18:03:71:88:ba:82:c1:7b:84:66:
b4:f4:ee:e3:e0:29:13:1a:36:34:6e:c0:f2:0c:eb:
7f:a7:9e:d8:92:a1:74:7d:49:42:99:d2:c8:e4:d7:
d2:11:c8:5b:31:16:39:b7:7c:9e:0b:d4:22:b0:f7:
b2:e3:75:9c:14:5b:9a:a2:59:55:5a:a9:ce:87:db:
8f:86:56:27:6a:6b:45:80:ba:f2:96:0f:f4:c5:34:
21:d3:5b:6b:6f:42:20:b7:ad:69:fa:f4:ce:5d:86:
d5:f4:3d:a5:ef:55:c1:35:8e:0a:60:0c:88:2f:af:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1B:47:DD:8F:2B:B1:6F:C2:20:20:8F:45:4F:10:93:A6:32:F6:20
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4c:a0:56:18:ec:05:ab:25:6c:02:47:48:e9:2b:bb:25:b7:
87:3f:58:1d:68:61:63:5c:c9:e3:91:7e:83:6a:30:cc:85:28:
dd:69:ed:57:f4:58:41:53:a9:4c:5a:51:b8:33:93:6d:93:9a:
12:d0:0b:9e:a0:24:06:fc:03:4a:4f:99:d5:97:a0:ea:f6:90:
87:ec:4a:aa:79:26:37:39:44:5c:ad:b4:e2:a3:d2:a7:f8:7d:
6f:0f:f4:c7:ad:23:65:76:0a:1a:e5:d4:87:ca:44:69:15:63:
e2:33:8e:f1:a8:fb:92:ef:94:88:70:a1:88:dd:e9:e4:d9:f3:
7e:5a:7d:08:c8:33:05:59:ae:e8:49:7a:fa:23:ab:c8:f0:c3:
43:c1:cc:c9:2c:79:03:ee:c5:af:35:38:5a:4b:62:01:bf:30:
55:8b:67:96:3c:4e:4f:76:71:28:43:af:de:37:0a:45:92:13:
15:3b:9d:29:81:43:5a:f4:9a:2e:1f:0d:48:e4:33:55:20:c2:
55:d7:e0:5d:d4:26:f6:9c:8f:b8:36:d8:b8:2d:0d:98:fc:a6:
de:a8:54:d0:1c:1e:1e:bb:2e:73:56:cb:33:ae:b2:36:16:e5:
31:73:38:4b:e3:ab:cf:c0:76:0d:f8:c0:26:19:8b:9f:2e:4e:
f6:52:2e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:38:18 2026 by rpki-client