Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
File: dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft (raw, json)
Hash identifier: gIsYJ48lzlJfVygEi9ILMCiYh/jmgYa2WCACtuBy7qU=
Subject key identifier: 4A:2E:AF:24:D7:CD:98:19:A4:A9:05:DC:67:AE:AC:E2:CB:EA:A8:90
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Certificate issuer: /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial: 01A1765E4FA8FC019198A1D101F3628A3BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
Manifest number: 1AC4
Signing time: Mon 26 Oct 2026 04:00:54 +0000
Manifest this update: Mon 26 Oct 2026 04:00:54 +0000
Manifest next update: Tue 27 Oct 2026 04:00:54 +0000
Files and hashes: 1: 1-rduehBiSXoXtEjm13X_baLg9hg.roa (hash: w3JHE4zjBQCl+As/2Jf4pROYK6+W2f/IVxYPRcpmzD0=)
2: dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl (hash: IQhamxIRp1hkjCX7SsbMtgA2vUzCV7+ZMLSTjEhqAeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5e:4f:a8:fc:01:91:98:a1:d1:01:f3:62:8a:3b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
Validity
Not Before: Oct 26 04:00:54 2026 GMT
Not After : Oct 27 04:00:54 2026 GMT
Subject: CN=4a2eaf24d7cd9819a4a905dc67aeace2cbeaa890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1f:61:b8:69:9c:09:4b:0c:d5:42:c2:67:53:
ae:c1:c2:f4:10:c5:54:cb:56:93:3c:44:92:ef:b7:
06:f6:88:31:09:d8:5c:bc:f9:b0:ac:6b:a1:45:7a:
69:85:7a:9d:22:28:6d:cc:bc:7a:96:86:36:74:bb:
0b:02:a9:fe:98:19:9b:cc:e7:e7:84:fc:40:26:83:
6c:6d:0e:df:9c:17:aa:a6:26:c4:65:55:ed:0e:7f:
02:b7:20:0d:1f:ce:7d:6c:c0:bb:23:c3:43:14:14:
97:d9:fb:d0:bd:b6:df:0c:66:4b:ee:12:85:f8:9d:
e7:cc:59:e0:fd:42:37:66:09:cd:95:56:ff:41:2d:
6b:54:97:b5:ff:76:ec:0c:34:b7:38:5c:8d:f1:41:
22:f0:bf:09:18:ba:51:cb:8b:9d:26:b4:13:f0:b9:
36:3c:d6:65:9c:5b:9f:e1:23:3b:5f:55:3d:2f:f0:
7a:11:36:6a:ce:42:75:75:0e:d5:10:3d:16:56:de:
83:38:d0:37:69:c6:2d:d1:24:93:4c:e0:c4:42:10:
66:1a:76:d7:e2:aa:e4:a6:a5:a7:43:cf:f5:5d:28:
5d:5f:a6:d0:78:af:20:9c:c1:bc:98:10:19:d9:75:
f7:cf:e9:33:db:f3:0a:55:b7:10:fd:e7:a4:23:2f:
33:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2E:AF:24:D7:CD:98:19:A4:A9:05:DC:67:AE:AC:E2:CB:EA:A8:90
X509v3 Authority Key Identifier:
keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:eb:ab:53:38:f7:bb:1f:ec:c4:55:3b:ca:f6:28:f7:39:b2:
12:9b:43:fc:4f:ce:e5:bc:4c:88:96:80:f2:9c:51:b1:76:99:
6a:34:6b:b4:f7:66:f1:ac:7c:2a:3d:fd:ae:ab:6a:0b:da:ce:
e0:c3:1a:31:c6:93:3b:56:ce:1b:5f:af:ad:04:73:23:7d:ac:
9e:c3:0e:6b:0f:86:c7:ad:14:b9:fe:6b:82:c6:24:20:4c:67:
c8:16:2a:f4:4f:22:94:14:17:56:97:4e:0d:44:76:39:a5:50:
06:92:23:87:b9:0d:fc:e2:97:e5:22:ca:4c:fd:d9:55:74:56:
d0:ab:fc:ec:12:24:fd:0e:74:a0:10:53:c7:e3:b0:8a:53:b4:
92:eb:9a:3f:49:b7:da:37:59:1e:1f:4b:c8:ca:bf:a0:4d:93:
43:80:b0:6a:af:b8:83:21:b5:8e:b1:41:3e:a9:a5:b5:80:9a:
5d:41:07:86:0a:96:85:31:17:d5:2a:a8:cc:a7:83:02:59:75:
5d:f6:cc:42:00:67:db:41:29:44:b9:ea:1a:a7:e2:be:70:8c:
20:fb:ba:73:26:0f:c5:40:ac:3b:2d:f7:55:64:e2:07:a0:56:
ae:e4:7c:2d:ee:ab:3b:02:dd:b4:6a:da:01:58:61:aa:e4:e9:
a5:c4:ed:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:51:32 2026 by rpki-client