Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: jdbH+N1o2cMEd6tQWfGs2S9To0XhQchaYe6vbEqgKTc=
Subject key identifier: AF:6D:ED:69:76:6E:2C:22:94:E9:E6:D4:DD:C8:2E:18:B2:81:BB:8F
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 01A000CA693C86065B1AB20AB113E75F84DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 15:01:00 +0000
Manifest this update: Fri 14 Aug 2026 15:01:00 +0000
Manifest next update: Sat 15 Aug 2026 15:01:00 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: lOok//6JOlz66M3DoWeDGPn/iXN5+9b1xB3aXNbBUWU=)
2: KJO5SafutHdx989Y4beR-MDi2-w.roa (hash: DcoFrISYVHpYfF3qhUpQz0nKOtSKRePG4GmzBfnkvzE=)
3: aoIheKr9cfwdkfPnA8io2rwnzUU.roa (hash: bd8EK0ErpEEUoneRY3CDUEglnwrfEtlsUHg/CzYtrqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:69:3c:86:06:5b:1a:b2:0a:b1:13:e7:5f:84:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Aug 14 15:01:00 2026 GMT
Not After : Aug 15 15:01:00 2026 GMT
Subject: CN=af6ded69766e2c2294e9e6d4ddc82e18b281bb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:f7:a6:38:07:ea:4a:14:08:89:47:87:5f:
a3:13:6c:da:c2:f2:00:09:4b:4e:6f:86:35:eb:67:
a4:50:e2:a3:ad:6c:76:a1:42:14:1a:23:f4:c3:eb:
e5:67:16:68:cf:c4:9f:b6:3b:11:99:22:14:aa:8b:
e7:3f:cb:7a:76:91:f8:53:aa:13:ef:b2:7f:04:3f:
86:8b:34:13:a8:7f:7f:f7:92:d8:ab:c7:87:cf:6b:
9b:5a:01:5f:19:1e:14:16:a6:c8:ad:f1:c9:55:cc:
19:f8:93:a5:28:0b:65:35:eb:59:2f:7f:63:d0:83:
41:4e:91:45:ce:a9:8c:7e:5b:c2:6e:1e:49:9c:c9:
34:b2:71:d0:45:06:f3:38:c7:4a:7c:31:44:2a:6a:
0f:39:cd:1e:b5:24:4d:c6:be:12:82:a6:62:5c:85:
80:87:5c:aa:a4:6d:bd:57:d4:96:08:6e:f9:2e:3f:
c2:48:90:18:01:4a:31:b4:ab:bb:fe:0d:af:57:6d:
d0:98:89:1d:95:2e:c1:9f:56:33:77:00:86:d5:b3:
85:99:04:2d:b2:1a:02:d0:06:3d:92:f9:9d:4f:d8:
5d:e8:0c:0a:a1:49:4f:9d:99:c4:98:1c:ca:31:e2:
83:f9:23:b8:4a:3d:12:04:43:48:fc:1f:0d:f8:84:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6D:ED:69:76:6E:2C:22:94:E9:E6:D4:DD:C8:2E:18:B2:81:BB:8F
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a4:36:a3:0e:32:3a:ce:c7:74:d7:88:9c:83:bb:dc:a7:a9:
6b:89:92:cc:d4:c7:3c:1a:25:7a:d4:b5:15:cf:84:fb:3c:2f:
c0:69:9f:d0:0d:2e:99:a3:27:69:f2:0a:0e:76:73:fa:27:65:
3d:1f:aa:39:e0:a3:27:3c:c3:c0:97:20:97:0c:04:64:e1:64:
f5:b2:86:87:b9:b7:00:4a:09:c8:a6:fe:1e:14:1e:8a:f2:0e:
1d:01:6e:53:f7:e8:6a:5b:d3:c1:61:27:e0:01:9c:ae:ba:05:
13:78:c3:42:47:74:fe:e0:1c:1b:c1:ae:87:ac:2d:99:0e:65:
d1:50:4d:5a:17:26:da:44:a5:e7:61:71:73:96:0d:61:0f:d9:
fd:32:5c:29:70:ab:ca:57:7d:36:aa:70:45:9b:e9:b4:86:84:
25:b6:4b:e1:0e:9d:bb:e5:a0:c6:d6:8d:ac:4f:5a:2f:8d:87:
23:be:d7:dc:49:f3:8c:8e:85:7d:81:f0:73:f6:7c:e2:2d:ff:
1a:fc:bd:d0:ef:75:cc:a7:06:05:16:88:c7:dc:95:a2:e2:ae:
54:7f:6d:f5:aa:e2:7c:b3:d5:e9:e2:f2:ee:03:75:5f:8d:ed:
63:73:92:f8:0b:8e:d5:51:c3:18:ca:6b:87:47:63:fe:99:be:
48:7f:69:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:15 2026 by rpki-client