Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: z7rCEvQQOWZPdrluYKv1W4iM/mEQzU0i41VFlKKSQvc=
Subject key identifier: 42:4C:13:3C:4D:47:4B:F5:A9:51:F4:C2:B0:21:7D:6E:1E:65:D2:C2
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 01A120C07772774913D1E93C513F604FB349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 068B
Signing time: Fri 09 Oct 2026 13:00:46 +0000
Manifest this update: Fri 09 Oct 2026 13:00:46 +0000
Manifest next update: Sat 10 Oct 2026 13:00:46 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: 0R1jQTenmQ0BwFhPJZBYxY94dSxMueeAvK9w/s6sM8w=)
2: 94RSIfdi4Wu_3u_5Fxt7y2P-IZg.roa (hash: KQBiX0qPyskq77ewW4ksZcWfJF9WrYtw2Dq9ll73ZI4=)
3: nKSVCDWOLc_L-u8R349_O7dpE-0.roa (hash: 3mbBV8zfrwDYTj5UVPeGBqMVBLvBI0mE8QTCzzuoTPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c0:77:72:77:49:13:d1:e9:3c:51:3f:60:4f:b3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Oct 9 13:00:46 2026 GMT
Not After : Oct 10 13:00:46 2026 GMT
Subject: CN=424c133c4d474bf5a951f4c2b0217d6e1e65d2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:21:6e:ce:32:99:76:24:33:33:22:71:10:4a:
4c:a4:ad:fb:95:0c:f8:f1:0f:2b:3b:96:5b:2b:0e:
05:9a:6a:89:cb:32:31:ed:31:ff:a3:39:05:e5:7c:
24:ea:10:86:84:0c:f6:fc:3d:55:70:ab:a0:71:66:
d6:20:ae:8a:1b:0d:77:cb:c3:ea:5d:3c:ed:04:25:
9a:5f:da:3b:fc:c6:86:02:47:00:63:c6:f6:7e:7a:
71:cf:29:aa:0c:b1:f3:b8:8b:af:4a:62:46:12:08:
a2:9f:fb:7e:20:03:65:3d:00:a2:c7:24:71:5f:88:
ff:d4:f1:78:64:9e:ac:de:c3:11:b3:8c:30:8c:b6:
19:e5:ea:16:04:06:0a:76:fc:6d:03:a0:b1:9e:03:
1d:c0:72:20:6d:96:14:87:1c:d9:9b:b1:1e:37:4c:
97:14:cf:8b:db:4e:7f:ea:77:00:18:05:ac:b4:fe:
03:52:5c:8b:75:fa:0e:22:44:b0:8f:8f:50:e1:4d:
40:cc:a0:4b:10:cb:36:0a:b9:df:63:48:20:95:52:
48:e0:00:f5:26:41:c4:09:fe:78:b2:9e:ab:2e:b3:
b2:7f:03:d2:53:2c:56:dc:20:2e:a5:b2:40:36:fa:
ff:4f:d7:31:79:97:25:4c:12:eb:47:1f:dd:9e:71:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4C:13:3C:4D:47:4B:F5:A9:51:F4:C2:B0:21:7D:6E:1E:65:D2:C2
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:27:c9:df:08:5c:82:46:3a:fb:69:5d:02:5c:fe:5a:d0:33:
3e:f8:99:ba:cc:9e:32:f9:fa:e3:83:81:25:eb:5a:af:b2:25:
bb:0f:f3:0c:cc:5d:58:0f:48:79:08:35:81:25:10:01:44:7e:
a2:a8:25:2f:52:90:c0:4c:36:fd:46:22:27:ab:de:91:97:c5:
e1:e5:9d:65:41:f2:a3:01:99:70:8c:01:14:4a:7d:8b:c2:c7:
28:b9:b7:78:01:9d:12:7a:a8:e4:a9:19:98:e4:44:d2:ae:0b:
bb:af:30:2b:59:2c:4e:79:9b:e0:00:00:ad:83:d5:98:fc:92:
fa:18:85:c2:90:cd:3f:99:d7:a7:a3:73:d6:b9:59:ec:67:6f:
c8:75:7b:50:47:a5:c3:51:c9:39:d0:e5:e4:4b:37:71:e0:31:
41:ac:42:0d:bd:c2:7a:fe:b8:71:c8:0d:0f:70:8a:ea:69:ac:
6e:af:aa:a6:0d:46:ca:7d:aa:89:4c:c8:f7:e5:26:b0:c0:1d:
e2:77:de:8f:7e:ad:51:f8:1d:84:25:37:0c:f3:3a:dc:14:17:
60:cf:d9:ac:73:00:fd:cf:f6:eb:f4:32:7c:a1:21:61:6b:2c:
29:84:15:a2:99:cd:0d:72:48:d0:aa:d5:97:70:29:c1:6d:4d:
7f:66:4e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:37:17 2026 by rpki-client