Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: YVMdxK8O/SyJDjssVk8gByg7XfRbSQPMGYqrrl82ccY=
Subject key identifier: CB:C4:10:05:E9:F5:D4:B4:3C:95:56:E4:B6:0A:BC:83:12:4A:41:C7
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 01A1765EAF711FDE6040E7890E6DACAAC48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 1AC6
Signing time: Mon 26 Oct 2026 04:01:19 +0000
Manifest this update: Mon 26 Oct 2026 04:01:19 +0000
Manifest next update: Tue 27 Oct 2026 04:01:19 +0000
Files and hashes: 1: SQCsFnrjeuZiVY1_BfYgIg4qi-k.roa (hash: 5RBF/vlBHGxON2JarwGOKKIBZfcvo+qjnXq8BAVhPwI=)
2: dPW253uLNkMC6hq3xNGknvYUUCk.roa (hash: lFOPNOmhkr/l52mg27uVNBuUyHirwJeRRAr2NLCO680=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: l/vRZ8s6VxTroMa9TXeSg6Gjfj0+efgU7V737Bnp7kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5e:af:71:1f:de:60:40:e7:89:0e:6d:ac:aa:c4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Oct 26 04:01:19 2026 GMT
Not After : Oct 27 04:01:19 2026 GMT
Subject: CN=cbc41005e9f5d4b43c9556e4b60abc83124a41c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:4b:f6:6d:28:3a:1c:05:53:74:4f:41:8f:
51:ac:5f:fc:79:05:e7:98:f9:da:79:59:33:e9:e0:
cc:ec:c0:c5:1b:19:1d:8f:58:c5:6d:74:f0:04:9f:
bd:c6:1a:77:1e:0b:36:92:13:53:04:ad:89:ff:6d:
24:39:ab:7a:e2:22:76:0f:19:ed:6e:fe:0d:54:f9:
fb:64:3a:ba:64:31:a8:6e:ac:26:78:58:a2:eb:ac:
59:96:e9:7b:1e:3c:bd:ac:6f:b7:28:cd:5d:a2:12:
e5:0f:f7:e0:ed:1d:6f:38:06:a2:da:0e:2b:2b:16:
b0:e1:fe:34:bd:0d:1c:1d:2c:53:9b:3a:71:87:8b:
a3:5d:ae:fe:fa:73:b0:c9:24:ce:55:40:13:98:bc:
1a:b5:89:7e:8f:69:dc:3f:47:75:92:08:58:ac:62:
9f:db:97:4a:77:b5:ae:cd:91:a4:e8:7b:46:bb:50:
47:f7:be:8a:4d:22:aa:4f:52:43:55:95:6a:63:d1:
52:97:d9:45:01:17:e6:38:1c:10:2a:6e:91:5e:45:
d7:5b:cb:d7:9f:ad:47:30:c0:e3:75:48:da:73:47:
81:a1:85:72:51:0c:f0:95:91:3a:2f:b7:b9:c6:1b:
14:08:19:6b:fe:01:92:62:87:ff:9a:ad:fe:f7:60:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C4:10:05:E9:F5:D4:B4:3C:95:56:E4:B6:0A:BC:83:12:4A:41:C7
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:31:ed:2d:7f:18:ea:24:1e:29:84:79:49:da:a4:c5:0c:de:
21:2b:10:ec:53:28:7d:63:fe:d3:30:4e:d8:12:51:33:f3:69:
74:6d:50:a5:18:12:3b:29:18:48:e7:09:01:ca:a0:55:ac:76:
30:08:aa:1b:1b:c9:62:45:52:8c:6a:67:7f:7f:20:b8:1c:67:
48:7d:1d:84:7a:73:8a:d2:2f:fa:e4:ea:6e:9e:ef:63:9e:af:
48:b2:39:4a:08:b9:48:fb:b2:be:86:fc:11:a1:29:af:7d:47:
ad:2f:20:4d:3b:6b:3a:f9:af:d5:65:47:e3:dc:ad:64:70:84:
9c:17:dd:d2:5f:5b:d6:74:60:49:8a:79:53:9b:4c:4a:09:de:
c8:7e:81:6e:96:55:e6:44:ab:f6:d9:43:fb:43:d1:48:6e:84:
d5:b5:3a:ea:37:60:3b:67:79:2c:de:c3:81:79:62:42:97:d6:
9f:9f:87:90:e8:3a:ed:09:88:ef:49:62:45:b7:37:ab:06:3b:
f6:35:e9:96:20:54:d7:85:9c:da:11:cc:37:2e:0a:d8:10:23:
24:4d:0c:a8:a3:d3:42:e8:7d:c0:ff:d4:b2:e6:4c:8f:8b:2e:
12:bb:df:f9:90:14:35:d8:6b:21:e6:b1:6a:0f:63:3b:1d:0c:
ad:fa:8c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:20:23 2026 by rpki-client