Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: IC3PhEWK3LWbWUPEHUP0D1ttxRM/tGMaFgJHbM1HQAA=
Subject key identifier: 5C:01:34:1D:E0:9F:40:23:D2:CD:E9:AB:0D:A2:44:3F:17:7B:14:19
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 01A1686BCDDA38FDD48BE6C33C4037B446B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 09F0
Signing time: Fri 23 Oct 2026 11:00:57 +0000
Manifest this update: Fri 23 Oct 2026 11:00:57 +0000
Manifest next update: Sat 24 Oct 2026 11:00:57 +0000
Files and hashes: 1: 69yOYQhcSzVteXbmSSuXjdooyOA.roa (hash: 2ZA47QSgmHPBZuYu1sYyxVw+wEl4vjMSOZuQJyxjjcA=)
2: DaNzl7w617W61WMkK2mhl8jN5wU.roa (hash: KfPIGqY3EVhRc2Ytnf57ChmISLtMr8fTABQiZHidkaM=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: 4DFmbPSLxzgt4SB8I1mkzXy8dqsrsdGqCK+i89BC9N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:6b:cd:da:38:fd:d4:8b:e6:c3:3c:40:37:b4:46:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Oct 23 11:00:57 2026 GMT
Not After : Oct 24 11:00:57 2026 GMT
Subject: CN=5c01341de09f4023d2cde9ab0da2443f177b1419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:7d:9c:ef:9e:66:e1:e1:ec:d2:a8:28:d4:
d1:79:5a:f0:d1:58:bd:f8:7d:86:42:49:5c:f4:64:
eb:f6:2e:fc:13:b6:87:8d:f4:85:14:8f:b0:a1:f8:
ef:ad:a2:6e:3b:72:ee:38:00:fc:f8:c1:d1:f3:73:
fd:f7:cb:1e:6f:8e:fe:c8:d8:8b:10:7f:3d:99:14:
32:c3:ab:53:90:0e:ac:7d:9f:af:2c:39:e2:f1:a3:
d4:fd:0a:01:6b:48:7d:d4:0c:18:65:43:fd:cc:04:
9b:7e:e3:06:e9:f5:42:0c:e4:95:8d:7f:9f:fc:54:
30:1a:9d:d2:0c:10:2c:87:9c:83:c4:71:f4:1f:2e:
9f:ce:59:56:5d:7b:c9:bf:9e:a6:15:3a:a6:e8:81:
69:ad:f9:f3:49:f4:80:68:9e:19:ba:1b:28:db:fe:
86:86:2a:47:f6:18:e2:9e:7f:07:55:8a:21:2d:70:
86:fb:0f:63:a8:74:63:8d:86:b0:70:a0:95:20:06:
84:b7:f0:7f:87:cf:b6:22:ce:fd:12:3c:27:ef:61:
24:38:6c:88:22:41:e1:5a:ed:c6:26:a1:5e:e6:46:
09:b1:45:25:3d:d4:cc:91:a3:d7:c5:6c:ed:1b:a5:
ee:a6:df:b5:9f:80:52:3b:6d:28:7f:d6:db:97:93:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:01:34:1D:E0:9F:40:23:D2:CD:E9:AB:0D:A2:44:3F:17:7B:14:19
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a5:5b:7e:8e:73:8d:7d:3f:0b:48:e1:29:f9:bd:2f:88:fb:
f7:e0:f3:a2:0f:0d:65:14:b0:34:39:ef:f7:8c:07:53:4a:b9:
63:1c:f5:dc:be:b5:10:66:89:d8:5f:4c:db:1d:eb:92:b5:da:
a2:af:a3:55:57:c5:67:43:d4:73:d2:33:5e:4e:a4:e2:c8:e7:
d4:73:4e:bd:37:22:fa:ff:ec:30:d9:20:7e:0b:5e:06:ab:3a:
8a:d7:83:4e:11:41:8a:4c:7f:46:74:cd:d7:70:87:8c:da:df:
db:70:5a:98:c5:ee:cc:54:6e:17:a9:e7:99:3e:84:71:ad:2b:
9e:21:ca:c3:07:d5:4a:d9:c3:41:1b:27:81:12:e4:86:62:8c:
f8:4e:c2:93:09:36:8f:82:0d:69:b6:23:14:d3:c5:60:1f:d6:
91:95:17:81:16:99:bb:1f:6f:75:ff:7d:2f:1b:70:1a:91:4e:
6b:30:bc:e8:9b:6c:97:cc:d6:b5:4c:9c:11:2a:b9:a0:13:29:
01:03:4e:21:e1:14:b2:30:d7:06:13:c6:0e:7f:b2:73:57:ad:
57:9e:f5:31:4e:5c:81:23:e9:52:af:0d:bf:79:e8:67:5a:d6:
09:a9:03:ea:fe:9e:09:9e:8d:35:08:84:13:c0:5b:1d:21:fa:
07:fb:21:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 23:01:24 2026 by rpki-client