Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
File: _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json)
Hash identifier: qkLHczJ7pReein+fDTV9krE2QffF8RMxuXg47FkkdNo=
Subject key identifier: DD:01:B0:D9:3A:55:65:84:B8:63:26:A4:81:A2:64:41:2F:16:51:53
Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
Certificate issuer: /CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Certificate serial: 01A18DF8D0BF7DA77CBF082BAB90A73E0A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
Manifest number: 1ACB
Signing time: Fri 30 Oct 2026 18:00:56 +0000
Manifest this update: Fri 30 Oct 2026 18:00:56 +0000
Manifest next update: Sat 31 Oct 2026 18:00:56 +0000
Files and hashes: 1: BvhaM_nZH3fQst7z68_40-nvNk8.roa (hash: w3u/cjgSvlFlc9grPNy8PjEmfYPvw7yuNYwBbz1TN6Y=)
2: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: C573xVGAN110kpJgOBoh1fHYtaTW15LBCx09nk6dqOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:f8:d0:bf:7d:a7:7c:bf:08:2b:ab:90:a7:3e:0a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Validity
Not Before: Oct 30 18:00:56 2026 GMT
Not After : Oct 31 18:00:56 2026 GMT
Subject: CN=dd01b0d93a556584b86326a481a264412f165153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:2f:5b:30:90:fb:fe:df:8b:a7:77:47:a3:
9e:3e:2a:8d:89:1d:36:86:2f:20:50:27:4e:b2:a6:
10:03:5b:69:77:45:25:c9:5b:e5:1f:1e:76:26:59:
d6:78:39:96:05:66:34:67:8d:d3:54:77:a8:b6:df:
46:f2:15:13:a3:4b:cf:c6:7c:07:da:b4:a6:6e:82:
cd:53:32:11:00:0c:20:a8:a9:ba:60:93:04:a0:fd:
5b:2e:fe:57:0c:ea:79:59:53:72:14:ec:87:6a:ef:
6c:54:79:46:00:6c:7b:bc:0e:a2:4d:13:cb:57:b5:
b7:82:71:64:84:cb:27:fc:be:9c:25:70:67:7c:b9:
9d:da:c8:3b:a2:be:81:ec:9a:7e:35:03:c7:8b:36:
34:1a:87:60:5a:36:4e:72:6d:46:77:f3:35:0e:b3:
21:a9:20:75:bd:b9:09:8d:b8:0a:01:3b:3d:1e:8b:
31:92:68:be:cb:88:98:4e:94:ae:90:b7:11:24:52:
0d:1c:13:c0:fe:a7:df:e3:59:57:5c:85:1f:51:68:
e4:39:e9:e4:b7:b0:72:b5:cb:f8:e5:03:75:38:a1:
f9:32:d5:b0:7c:02:23:ac:5b:d2:8e:23:fe:25:c9:
a6:27:79:33:82:bd:53:c5:f8:fc:a8:e2:b7:fb:d5:
2a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:01:B0:D9:3A:55:65:84:B8:63:26:A4:81:A2:64:41:2F:16:51:53
X509v3 Authority Key Identifier:
keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b6:78:24:39:f7:e0:a3:34:30:01:d2:7b:4b:ad:68:76:f1:
d3:2c:46:3c:67:18:5b:71:fb:c5:2b:62:50:2e:8c:ae:58:82:
01:4f:a2:c5:5f:62:ff:54:9a:1f:ae:c8:74:c2:55:e9:59:df:
07:7d:08:19:96:0b:e5:5e:c2:93:4a:af:30:44:b1:0c:8c:aa:
8d:14:11:46:11:af:2f:79:a0:d0:47:58:5f:b7:44:fe:98:c7:
88:64:54:5a:d4:4c:4a:91:a3:b2:31:bc:46:f3:49:f3:03:e1:
01:01:41:68:89:a3:08:6e:89:12:e9:0c:af:a2:61:63:ac:1c:
62:e1:2d:20:15:97:33:7f:8e:d0:23:ca:da:2a:32:15:77:94:
88:5f:5d:45:8a:b1:35:d3:87:84:0c:df:c7:83:81:67:00:fe:
df:8d:b2:98:a0:ab:d5:5d:b6:b9:f2:ef:4f:79:58:46:ce:62:
0e:73:2d:3b:e0:9f:a5:14:87:5f:ba:7d:72:c7:07:99:a5:9e:
eb:72:ba:64:83:7d:1b:ff:a3:ac:aa:a7:5b:06:4a:24:43:09:
56:db:f6:b6:8e:41:63:e3:98:4a:28:36:15:ce:70:01:cf:71:
cb:61:de:d2:02:4c:09:c9:5b:24:76:ed:a1:1d:a5:2b:ff:4d:
64:80:30:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:17:56 2026 by rpki-client