Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier: +BwFO4D6o2dXLYLOB22Sf0iyCoYwRaamVmzz94JoMPU=
Subject key identifier: 42:DD:60:B0:E6:92:DD:77:D7:6D:A8:5C:2F:E3:35:14:BB:F9:60:30
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial: 01A14203F475713C492DAE6E4CB89F8F1D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number: 088F
Signing time: Fri 16 Oct 2026 00:01:57 +0000
Manifest this update: Fri 16 Oct 2026 00:01:57 +0000
Manifest next update: Sat 17 Oct 2026 00:01:57 +0000
Files and hashes: 1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: uyLFsIBtKGu/29xSiVumzr512FHR73MC/w5AEoz9Ulg=)
2: ChSIg1aH6Sa_zZYL915QNKTUErU.roa (hash: qJ341GmlhFr65YVSbjKJGdZNne3uNTbQkMWmODy8law=)
3: _NLIFql8UUtF6G08tYKMp6D5ryE.roa (hash: 2eEokZKG4mibWExmbuDz6Q/LrDTuFm+PXBKGxQPaBHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:03:f4:75:71:3c:49:2d:ae:6e:4c:b8:9f:8f:1d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
Validity
Not Before: Oct 16 00:01:57 2026 GMT
Not After : Oct 17 00:01:57 2026 GMT
Subject: CN=42dd60b0e692dd77d76da85c2fe33514bbf96030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:02:69:fe:06:95:93:f4:09:46:24:15:b3:
b3:cf:0d:5b:f2:37:af:ef:ca:5f:bb:13:bf:4c:be:
5a:06:25:07:c7:70:55:d1:1c:d9:c9:e9:72:e3:c0:
76:8b:19:c8:13:6f:14:a6:74:2a:f2:e9:ea:b5:7d:
62:cd:d3:c5:83:37:8a:43:f3:63:1d:bd:36:a7:d4:
5b:c6:d4:f8:52:1b:4d:f9:d7:6e:c4:9c:6f:e0:b5:
5b:9f:f0:bc:00:0e:14:35:e3:82:46:21:cd:d1:8e:
17:b1:01:bd:6e:8b:33:76:29:30:de:3d:a6:3c:bd:
6e:6b:21:31:79:8b:2b:35:de:fc:b5:ba:a1:46:c2:
a4:09:cf:46:6d:9b:41:57:37:79:11:94:91:0d:af:
5e:b3:8f:27:f7:bb:5c:7f:34:a1:b3:55:bc:ef:99:
30:e6:5b:f7:bd:c8:c3:88:cd:9b:b1:4f:fe:2a:80:
8c:6b:b2:1a:2a:61:bf:30:05:5c:9f:f7:02:20:8e:
a4:3d:1f:39:0a:07:e5:00:a3:ea:83:e5:38:40:9a:
bf:ec:a9:c9:f3:14:48:6e:2f:90:2e:be:54:0c:34:
9b:62:f1:70:fe:35:a4:d1:7f:f0:cc:ff:75:d4:e3:
84:ad:51:9d:0d:7b:ce:6e:b6:26:ff:11:9f:b5:83:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DD:60:B0:E6:92:DD:77:D7:6D:A8:5C:2F:E3:35:14:BB:F9:60:30
X509v3 Authority Key Identifier:
keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d1:6d:1b:3e:bd:80:c8:13:3b:80:70:46:b0:88:52:a8:e5:
c8:4c:67:77:d1:d2:dd:90:39:cc:cf:e9:a6:e6:01:35:0d:16:
f8:f9:0f:bc:5f:52:20:7c:e6:b9:95:a8:74:61:36:f9:df:98:
95:30:52:06:65:59:5a:85:f3:3a:48:70:0f:6f:4a:b1:73:f4:
98:69:3a:25:22:ad:24:ac:9a:98:3e:e2:9b:e0:6a:24:97:63:
7a:e6:fd:dd:e5:29:be:b2:d3:6e:19:28:b0:d3:11:02:a1:fd:
19:dd:cb:e6:54:9d:44:cb:76:6d:b9:d6:b2:42:48:74:01:2b:
e9:62:21:24:b8:8d:f8:f7:90:4f:5d:37:c1:52:d5:b6:d9:6d:
7d:db:00:d3:b1:68:a5:a3:6c:8b:12:a8:bf:33:37:04:7a:9e:
88:18:f7:98:a3:50:d2:78:bf:91:09:2a:20:96:da:d0:d0:73:
3b:42:01:9e:2a:bc:ad:62:f9:88:e9:f7:1f:05:6b:68:02:a2:
e1:14:25:fd:f7:83:2b:0c:dd:d6:16:9f:82:af:6d:71:b0:7a:
3f:69:ea:05:9f:4b:a8:e4:d5:87:21:69:b1:b6:26:42:b0:6f:
42:14:7a:68:fa:2d:83:f5:e7:3d:d5:9a:f2:65:f6:02:f2:93:
32:71:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 08:58:53 2026 by rpki-client