Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: SYPP/xFt+5qBxb1pPK6jhknKQjQio4Z/+0+QMxPzI+4=
Subject key identifier: 6D:02:26:D2:34:83:CB:59:00:86:76:57:B1:6B:33:23:D0:8A:4E:BC
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 01A13D814A0D6A2E7365BBAB57380A0EC777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 1AAA
Signing time: Thu 15 Oct 2026 03:00:45 +0000
Manifest this update: Thu 15 Oct 2026 03:00:45 +0000
Manifest next update: Fri 16 Oct 2026 03:00:45 +0000
Files and hashes: 1: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: dChliEkJDIusUr3ZhUJo+26kQMmc8WWSZfWCnnjYJ1A=)
2: 4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa (hash: TQ+KC3G8+QaJHhu/9P7uxzpoVECiZV+fna31NmwlOi8=)
3: bPoEfZam0GZUvE1xltgIVPM2UVA.roa (hash: oJcgAX3KB1YWr1arABvCqWuGMGK5eGcGXJDWs9BTX6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:4a:0d:6a:2e:73:65:bb:ab:57:38:0a:0e:c7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Oct 15 03:00:45 2026 GMT
Not After : Oct 16 03:00:45 2026 GMT
Subject: CN=6d0226d23483cb5900867657b16b3323d08a4ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:c3:37:a0:3a:3d:82:82:82:92:ec:8f:2b:
f2:6d:a3:6a:a9:d2:ed:7e:0c:23:6e:b9:39:cf:46:
3d:58:9d:d6:88:9f:29:5c:51:08:3c:e6:1a:84:e0:
ac:a0:1e:7d:88:4b:d2:61:b8:5a:6c:a7:d1:ff:45:
15:4e:a5:d7:07:32:02:00:c8:51:c9:ec:3a:a0:76:
ca:59:e9:f5:99:35:c4:6d:f7:68:ea:fc:1e:57:b9:
7c:d9:50:aa:f5:41:71:bd:66:47:75:b6:38:97:eb:
c4:a7:0a:58:c5:b1:66:bc:1e:01:eb:19:e4:e1:44:
e5:6f:71:56:85:61:28:c4:78:0f:b2:f0:8a:49:3d:
9f:40:0b:d3:22:ad:31:ff:f5:60:79:85:41:f2:54:
71:98:f0:0b:a0:2f:1e:a6:3e:de:f8:70:ac:5c:e0:
73:5e:ff:8b:1f:17:c3:f0:44:98:a4:1d:00:39:0d:
d6:81:3a:84:6b:31:e3:d7:29:bd:cd:62:43:08:62:
49:3f:94:18:69:5c:64:0d:68:79:ef:1c:36:4a:13:
9c:fc:9d:68:d5:7f:aa:99:a5:77:ac:dc:99:ac:c2:
a0:b7:3e:2c:00:33:4b:d9:6b:df:30:04:21:03:9b:
e8:68:bc:fd:58:ad:d7:c7:8e:6c:9f:02:84:91:9f:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:02:26:D2:34:83:CB:59:00:86:76:57:B1:6B:33:23:D0:8A:4E:BC
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fb:49:41:06:0f:a4:1d:af:28:0e:91:ad:84:19:2e:eb:0f:
2e:e6:bb:22:7d:73:8e:07:aa:34:b6:69:cf:44:05:0e:33:8b:
0b:32:93:4b:57:16:b9:fe:93:a1:46:b2:c3:f4:87:0e:77:51:
b4:bd:94:9c:c9:89:9b:06:8a:a6:f1:8d:10:38:64:2a:d9:e8:
c7:e3:62:5c:47:d6:b1:28:bb:af:2a:75:d9:5c:4f:a6:b2:55:
9d:33:4e:1d:6c:d9:29:be:a8:90:ea:fd:a4:18:ec:50:8f:87:
1e:27:27:d7:67:b7:97:76:f2:c3:08:1d:d8:28:04:ea:9f:03:
f3:bc:5f:15:66:a1:c9:95:3d:54:2c:4a:f0:bb:71:de:a1:f8:
bf:6b:46:9d:19:51:0d:b1:f8:ad:1e:bd:2b:1f:c4:a2:51:93:
93:32:c3:f1:10:9e:68:59:58:e2:17:af:71:b6:3a:74:e9:ac:
d8:39:66:4c:b7:98:f7:38:52:ee:d8:e8:fc:44:bb:05:51:2b:
4f:b2:32:31:d6:e3:f8:01:a2:72:af:96:7f:62:cf:20:b2:7b:
aa:d1:a7:10:3d:59:a8:b1:d7:fb:ed:13:7a:21:7d:85:ab:4b:
7d:52:8b:90:7b:cf:13:17:ef:ab:97:36:21:cd:f1:00:12:0e:
fc:2e:4b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:22 2026 by rpki-client