Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File: Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier: mlnewQvtf5RRNu3fPk4NhTojtAoiKI+SAITugLsRMzM=
Subject key identifier: 50:0A:B2:F5:65:53:F9:B6:F3:2D:68:C6:38:62:8F:82:C8:A2:C3:16
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 01A1220A6C6419336ED3FF0E05C9FA2F73B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number: 1AA8
Signing time: Fri 09 Oct 2026 19:01:10 +0000
Manifest this update: Fri 09 Oct 2026 19:01:10 +0000
Manifest next update: Sat 10 Oct 2026 19:01:10 +0000
Files and hashes: 1: 0MnT-Cev0aWfox9D3TA-NvqEMlk.roa (hash: JJLpUG+0ObMqR5bxSAi6saPQ/DL3PUHcYLY29JhBmbE=)
2: 1-LbhNdw_AJV43onNE0QCUpCX6so.roa (hash: dSYVcw8EiYO4/PAbhwcAgMdvgRcG7f4kUZi0vNXjJIw=)
3: 4BHAHtAhc28ZrQwUD5OHuec1Ir8.roa (hash: 0iGZlpXjvTxGNf9N3a9R/JttWSb6ffwtMSks1EBv2mQ=)
4: 4qWGLPeV9cfuGGpVtJBLff_UhD4.roa (hash: fsCbic0Uc+tcg0uG7d9ay2R7taJTtXFIv1SOgaMPRbM=)
5: 9h9M7PjhCe5Xzh52sY19F_HCfoo.roa (hash: dKnlXAO85KhguToJuoLLUtMZOEcwIkloXdGeaFlciRA=)
6: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: de0qno8BkKGEGY3pNqPsbztbXEtDGGnz3YQ0Q1oErT0=)
7: jLoeQ1ou0WBg9J7CvjX-GemJzOc.roa (hash: l5EAwU3ekmbrZBP06TeMqr40qf//w4QSp1sb+SkDG2I=)
8: kHyEvJhu_w11Kx9L4McOAF2P03o.roa (hash: jmuEXw0e3wCECNG5mj5zMNmwosrMAavIJYnu60jwGTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:0a:6c:64:19:33:6e:d3:ff:0e:05:c9:fa:2f:73:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Oct 9 19:01:10 2026 GMT
Not After : Oct 10 19:01:10 2026 GMT
Subject: CN=500ab2f56553f9b6f32d68c638628f82c8a2c316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:4d:a7:40:15:58:fa:e6:ff:29:0c:8c:91:
8d:16:3a:90:34:6b:a9:6b:40:3e:44:a4:fe:c3:f7:
9c:4f:3e:82:f4:02:22:48:da:39:83:8b:e6:7c:9b:
59:56:fa:0a:fc:bb:e2:28:78:13:b9:4d:c9:80:fe:
e2:cb:94:7b:6c:2b:42:d1:e3:8d:7c:4f:89:76:55:
0f:77:61:e0:59:7e:7b:df:4b:0d:29:69:aa:c4:95:
0d:45:d8:a4:12:92:50:46:35:1c:8e:fd:94:16:14:
87:9a:d8:7e:da:c1:53:70:c5:fe:07:8f:c8:a2:b5:
5d:7f:ce:66:6b:dd:90:4e:5c:bf:9e:66:cf:1b:63:
6f:27:ab:bb:80:91:84:98:cb:32:4b:1f:a5:f8:ac:
a7:e2:a3:90:f2:83:5f:fb:45:40:01:8c:2f:0f:7f:
1b:dc:0a:bd:39:0c:47:66:85:1d:5f:31:ce:d2:ed:
75:de:fd:91:c0:c4:98:45:3b:6b:7d:81:5e:ba:af:
a6:39:f0:b6:1f:ed:ae:a5:25:c7:6f:9f:ab:97:35:
21:66:4f:50:ba:af:1e:ab:a3:8f:e7:43:3c:66:ba:
51:cf:88:90:e5:a0:ec:80:a9:d9:1b:32:f5:7d:e8:
d9:57:d6:8c:07:e9:8a:3f:ae:ab:e1:0b:c7:4b:8f:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0A:B2:F5:65:53:F9:B6:F3:2D:68:C6:38:62:8F:82:C8:A2:C3:16
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dd:e6:ea:84:73:56:ca:ee:ba:59:0f:66:05:b3:5b:4b:1b:
39:ae:03:db:28:b0:0c:92:c2:1e:4b:bb:80:ee:02:66:39:60:
bb:2b:b9:8c:6f:e8:1d:98:96:0b:3e:88:fd:a3:dc:7c:3c:e7:
8b:d3:40:f1:09:06:af:81:c9:0a:ea:b5:23:7f:90:08:92:be:
a8:92:3b:5c:1d:8f:1e:f7:44:af:35:b5:ec:c9:f5:5f:55:33:
72:85:26:f4:1c:48:7d:f7:1e:91:3f:99:0a:63:53:77:9a:eb:
46:32:59:5c:78:89:ec:ba:fb:9d:a9:61:aa:43:6d:55:c3:b2:
e8:2d:7c:92:2d:ec:9c:28:48:ac:9e:4d:9c:00:31:1b:d7:26:
28:4b:75:03:5c:4a:9e:bc:62:5f:4a:7d:dd:da:c9:18:9b:8c:
fe:67:4f:6c:47:5a:8c:6d:c7:9e:a0:d2:79:b7:48:1f:e4:8a:
0f:53:a4:c2:37:d5:5f:de:31:43:4a:e2:93:99:e6:94:14:c6:
77:e0:fc:77:b6:cc:b4:00:38:b3:7d:ce:db:98:94:d9:96:8a:
74:b5:e9:6b:8c:60:d5:4e:7c:0c:92:28:33:90:15:3b:f2:62:
f5:1f:79:4c:7a:66:fc:a9:62:2d:eb:ce:e3:ef:e8:2e:97:10:
51:81:b0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:53:36 2026 by rpki-client