Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: SAAT13IVGfSxONjyYE1C0e3tXk+HJAFcTgfiiuqWq3E=
Subject key identifier: BE:E5:0F:43:68:E1:E6:12:CE:2A:FC:E2:FE:3B:DA:2F:3D:D7:12:67
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 01A13ECB5DA30C2D60D87931726CD84E3F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 1AB1
Signing time: Thu 15 Oct 2026 09:01:17 +0000
Manifest this update: Thu 15 Oct 2026 09:01:17 +0000
Manifest next update: Fri 16 Oct 2026 09:01:17 +0000
Files and hashes: 1: A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa (hash: /ml6WX65AwyNhLXMSn8MV5ORhWu+aykCZ+qTwwwxX9g=)
2: Uxztf7U023GXGEUScmTqEO_gfGo.roa (hash: gGrsr7XyuRi6jd4l0HrWabkhCAVylFI6zYe23gYxDXw=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: q8coCbJzZVyRPMULZz8+m0B6DxVpNTupZ3Fuz9/+CPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:5d:a3:0c:2d:60:d8:79:31:72:6c:d8:4e:3f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Oct 15 09:01:17 2026 GMT
Not After : Oct 16 09:01:17 2026 GMT
Subject: CN=bee50f4368e1e612ce2afce2fe3bda2f3dd71267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:ae:d5:c0:a8:93:74:26:dc:ce:6c:50:f0:
7d:89:95:01:26:31:45:40:9b:77:5e:ce:53:8d:f3:
68:54:de:1e:31:eb:95:cf:02:09:81:f1:62:fe:79:
b1:c0:52:08:25:c3:e2:ea:41:a0:0e:66:75:f3:d2:
0c:a6:8d:db:92:32:72:7b:7c:4d:b1:61:51:ba:c2:
96:b8:fa:db:aa:9f:c5:29:3b:4e:6f:c8:89:83:f6:
ba:fe:a6:6a:56:16:c6:95:dd:9f:df:33:99:9c:7e:
fa:51:f9:cf:73:b2:e6:bf:2a:79:ee:08:23:4b:3d:
f7:fb:2b:68:12:c5:55:d8:cd:37:f3:c3:df:19:f8:
35:74:32:c5:60:e1:eb:df:37:f2:7c:1a:4a:7a:3b:
0e:fe:5b:86:b1:3b:34:c0:6f:74:b0:31:34:88:00:
4f:12:f8:8c:8c:37:6e:d3:fd:29:bd:96:ea:0f:b8:
72:7a:59:c4:d5:f2:c2:9b:10:a1:11:39:6b:91:fe:
37:80:05:ef:65:2c:63:85:00:82:0e:c2:38:2a:ad:
7f:f2:c4:84:86:5d:40:03:9d:8c:06:66:a2:28:b5:
2d:5d:39:56:a3:49:10:2b:f7:5d:a3:63:fa:19:49:
fa:05:27:f4:2a:3b:e6:e4:6d:c2:27:dc:bf:ed:d4:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E5:0F:43:68:E1:E6:12:CE:2A:FC:E2:FE:3B:DA:2F:3D:D7:12:67
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8b:e1:9e:b8:72:34:57:66:62:82:4e:6d:10:05:bb:91:4b:
e0:88:9c:17:ea:43:8b:d3:e5:59:99:74:76:39:9f:bf:82:b0:
b2:01:2f:e2:ca:ab:89:a1:8c:b2:91:f4:cc:73:38:e4:0f:ad:
f1:b9:2a:e0:ee:6d:d7:7e:54:92:af:ca:0f:49:65:c6:ad:dd:
98:09:73:34:d3:a7:74:8e:15:ac:a5:c6:5d:d6:70:26:2a:36:
c4:1b:d4:2d:a1:a0:7a:8f:b9:58:b8:33:72:6a:43:c4:2b:e5:
1a:a9:a2:b1:1f:a4:b6:bf:6b:41:e6:97:de:e5:72:52:b1:41:
4d:e7:38:df:66:f3:e4:6b:02:7b:6b:52:cf:cf:88:46:5d:ba:
09:fa:c1:09:ad:07:df:c3:d6:07:98:58:96:a7:25:f6:9f:f0:
4e:bc:02:31:32:2a:ee:dc:a5:54:40:0f:ed:16:fc:21:8a:ac:
c1:51:bb:fc:5d:4d:c2:24:75:69:66:c1:b0:ae:af:05:0e:1c:
86:7b:a4:a2:1f:be:96:29:d0:e6:87:2e:08:ce:3e:f1:6e:15:
ba:1a:ae:c6:5f:f5:b4:86:43:67:e6:74:99:23:99:0c:30:4b:
7f:e0:ad:e5:68:36:9f:43:3e:b7:59:47:71:86:01:5f:00:6a:
8f:97:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:15 2026 by rpki-client