Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File: C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier: lhktfzQSuRyAfMMxtX2s6OLfHoAl7hD2LMLmslYbsk4=
Subject key identifier: A1:0B:56:A4:DE:6A:FD:92:BC:C3:00:77:05:C5:7F:00:C6:3D:3F:29
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial: 01A13E260C934A73D9A26758EF93FA339DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number: 1AAD
Signing time: Thu 15 Oct 2026 06:00:43 +0000
Manifest this update: Thu 15 Oct 2026 06:00:43 +0000
Manifest next update: Fri 16 Oct 2026 06:00:43 +0000
Files and hashes: 1: Booj1ASQ-cXKqkh-r2x7fAQ_0Uw.roa (hash: zF9nqvpnqLrzZFWAUgKZQIRUSTlgxgEW6M1SkVs+U8w=)
2: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: +N9mt2RKIvHEloIaqJEoUMMAk4so4ZblgjGZo9LqWv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:0c:93:4a:73:d9:a2:67:58:ef:93:fa:33:9d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
Validity
Not Before: Oct 15 06:00:43 2026 GMT
Not After : Oct 16 06:00:43 2026 GMT
Subject: CN=a10b56a4de6afd92bcc3007705c57f00c63d3f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:5a:20:fc:32:b4:f9:9a:60:48:c1:3f:50:
76:f4:b6:99:16:cf:c0:17:de:7d:bc:10:8e:9d:9f:
e4:22:4a:10:19:7d:3d:3e:83:e9:1b:f4:ff:8e:16:
2e:26:89:f3:3d:73:63:0d:2b:12:31:1b:29:0e:ce:
55:df:23:80:00:35:11:7b:a0:61:5f:6b:17:95:b0:
82:31:ff:6c:93:d7:ae:fb:40:bd:cb:13:85:bb:a0:
49:1b:79:f5:3e:e9:87:3f:f0:04:ad:33:56:72:46:
21:2c:dc:78:7e:42:b3:75:f4:68:4f:28:71:53:32:
53:0f:a9:90:0f:5b:be:ce:63:cb:c0:8d:55:c8:3d:
95:40:5c:5b:75:34:6b:93:84:c3:72:b7:7e:1b:0b:
5b:2b:0c:b7:0a:b4:61:f3:99:a2:2d:1b:5e:c3:99:
81:aa:25:49:93:7c:27:4b:ec:38:d7:2c:a2:3e:3f:
cd:dd:13:b3:11:3a:e3:9f:7a:ad:dd:f4:6f:87:c5:
af:23:75:91:0d:c5:2a:91:96:df:19:81:ed:49:d1:
50:0a:44:27:f4:2f:58:b0:e2:91:76:83:ec:a7:4d:
34:77:ed:19:99:20:07:14:c9:93:4f:de:2e:07:54:
02:62:e2:eb:eb:a8:55:16:84:d0:62:4d:ce:c6:23:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0B:56:A4:DE:6A:FD:92:BC:C3:00:77:05:C5:7F:00:C6:3D:3F:29
X509v3 Authority Key Identifier:
keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:51:ef:0f:0e:a5:31:0f:b8:8e:1b:aa:b9:87:a8:ef:2a:48:
0e:50:20:83:6a:70:d9:5e:6c:0a:11:5e:8f:2a:b0:49:88:58:
e8:57:66:47:b4:04:8c:b1:40:cf:c7:69:bd:ba:f1:4b:44:69:
c7:d9:ce:56:0b:98:e0:f4:91:d1:68:76:9d:56:81:2a:ba:d2:
3e:e9:43:a6:4a:58:1b:f1:c2:f0:38:03:34:e0:a4:a9:76:a5:
f6:23:9f:d3:5c:16:0a:6a:c0:33:9c:89:b7:eb:b3:ff:ca:80:
97:f5:73:fd:76:b6:b3:75:21:70:68:99:87:c7:e3:c5:4d:55:
bb:b4:c1:0a:31:d0:95:4f:96:3d:f2:c8:68:70:04:c0:67:58:
9b:73:18:a5:49:93:03:2e:ab:d3:51:f2:a4:5e:9f:01:08:c0:
5d:88:e7:a6:77:70:02:e6:23:2f:0e:bd:ab:2e:80:ca:bf:62:
5a:70:be:53:42:55:f1:b6:74:a5:39:7b:ab:aa:ab:85:ae:1f:
1d:2f:0a:fa:f0:17:52:d6:8f:02:8e:8c:12:88:44:1d:09:32:
70:61:75:64:0f:8b:04:00:d0:6d:bc:09:c6:1a:06:dc:9f:8e:
31:9e:83:82:66:91:52:fe:5e:bf:32:87:6e:50:08:0d:3b:75:
cb:db:1b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:16:06 2026 by rpki-client