Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier: Phxc9QYduFFojZHNyW1m5Jrcujeia3xckA0cV1j/dvI=
Subject key identifier: C1:BD:B1:FA:AA:B3:45:1B:47:83:D1:5D:BA:DA:A3:BC:39:85:11:02
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 01A156D38D9CB659E61D7B39FEE9076B18D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number: 1AD6
Signing time: Tue 20 Oct 2026 01:01:07 +0000
Manifest this update: Tue 20 Oct 2026 01:01:07 +0000
Manifest next update: Wed 21 Oct 2026 01:01:07 +0000
Files and hashes: 1: 1Jxi3AriRg31UMXbMH3OPiY-5HA.roa (hash: 3Mxy5Zs+xxbHjoz6LYDQ1mtzuO64bgmhPoqFp9H+W6U=)
2: 1lCX43rfgrd3UwSra2DvMolB2ko.roa (hash: HlEmjVnlqK6TJjU1qHHjaKYAoLJQkw56SG1ALNLBa+I=)
3: 2PolrAOhRQsrhDYmFoZ8Hf2dqko.roa (hash: Xq71zocml0mTHu8vbp5x/HrEbiwcbUVeA+bdWsQ2Clc=)
4: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: pdQnRYnGW39gGUZO5CNO6v8BcdwIk+krqpj/j6tkTdk=)
5: EOQ5V0kDXyQ1FQ6B9-AVHGPqlCs.roa (hash: yS629cFjQWViH4uxLDi0K/sJNglxdC9RFtjY2YesInI=)
6: Rew-UH93UALzUyPxo4xaqs1RMv0.roa (hash: otpEuqhi4Q6jIERTfwB4XyfDwmL1emaLm3YkERpgegQ=)
7: SSpWF7_mFd5aLq1v7cUlO_7MUeg.roa (hash: sS4G3ab1K8SPkh8ckCRuErQYvrEjmRohAAhZp3pf6ig=)
8: VIHswKloBTz_t9AoHJWNnNEBMUI.roa (hash: WAmtMAhBc13uGgrmDPdaVCQ0HLUvc9oHeQeyCGtDrss=)
9: mJmloBqH1ccv7pf7_dE3WxThQ58.roa (hash: L0vhterDlOQyvmoADd6+0joQnbdSLqt2I9Yyqwk+Dl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:d3:8d:9c:b6:59:e6:1d:7b:39:fe:e9:07:6b:18:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Oct 20 01:01:07 2026 GMT
Not After : Oct 21 01:01:07 2026 GMT
Subject: CN=c1bdb1faaab3451b4783d15dbadaa3bc39851102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:d7:bf:ea:33:f4:9a:e4:93:56:2b:52:ac:
42:32:8e:95:f8:09:1c:a4:38:f1:4e:25:6a:20:4d:
9e:93:a6:ae:5f:6d:06:5b:36:5c:65:73:83:ba:2e:
e1:0d:a1:a4:54:71:8f:b9:ba:41:19:95:41:08:e3:
ae:63:13:16:b7:64:2e:08:79:a5:28:b4:e2:86:08:
18:d0:40:25:f6:10:e3:ff:4f:df:86:d3:a1:30:2e:
a6:f4:49:61:54:3e:88:0b:59:84:c5:fd:cc:3e:d9:
7d:bc:95:56:af:4f:d1:1f:d2:1c:60:c8:a2:a0:46:
83:08:b8:c0:8e:c5:33:d6:8b:00:6d:98:0d:fc:76:
a7:c3:71:b4:68:45:86:05:86:e4:fe:78:2b:b2:76:
e0:47:3b:b0:c3:ad:5b:1a:75:61:c9:b3:a1:bf:a1:
b4:f6:1a:fd:68:f6:9e:51:37:36:c3:df:e0:26:a4:
82:b7:72:5b:03:1c:5b:7b:4d:8a:4d:58:6e:85:ad:
3a:e6:ec:c1:09:ff:6b:28:7d:5a:9a:7a:eb:42:10:
b8:7b:31:8c:3d:4c:56:e2:a3:45:42:4c:09:01:55:
57:95:50:3a:de:ba:ea:e1:af:56:74:0d:5c:39:56:
a3:cb:31:ec:44:07:82:57:f9:1c:46:ac:3a:23:47:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BD:B1:FA:AA:B3:45:1B:47:83:D1:5D:BA:DA:A3:BC:39:85:11:02
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:66:00:bc:0c:ee:a5:9c:94:83:51:40:9d:69:3d:af:68:d0:
06:ad:7f:5b:27:f5:97:7c:93:20:85:08:7e:44:6b:a1:f9:d7:
99:d5:a1:14:2f:7a:d3:71:28:35:84:d7:da:7f:7c:e3:ca:3e:
90:e5:b3:a4:b3:65:01:ca:81:56:16:aa:3b:dd:24:9e:61:5a:
17:02:22:78:37:25:5a:54:d7:39:d8:40:df:95:9c:bb:ee:85:
81:ad:91:48:ae:54:4d:82:e1:63:74:85:68:84:30:2f:fa:3d:
d8:b9:dc:bf:55:d3:59:cc:2b:53:40:ec:98:ab:74:6f:26:fa:
13:ab:6d:64:ee:67:f5:06:f4:a4:ed:cb:21:08:fc:ba:06:9f:
fd:94:04:4c:48:8b:48:63:7f:0d:75:56:21:71:da:cc:34:85:
8d:c5:f7:78:f2:07:00:22:8e:f1:fe:f9:f0:d8:24:c7:f8:2f:
f0:e0:77:f2:3b:4d:c8:1f:08:88:4f:10:76:7e:38:de:35:b2:
f5:85:c0:a8:5c:43:1f:2e:b3:21:39:33:40:79:0c:9d:f5:0c:
96:02:1e:9e:77:09:24:87:f5:2e:b0:ff:d3:17:a9:f8:61:5e:
3b:10:b8:7f:9b:0c:af:2f:c0:6b:c7:f3:ee:76:78:37:ab:64:
59:ed:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:51:38 2026 by rpki-client