Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
File: 1AjPCbarAFupM7KnpKbSfqa7cso.mft (raw, json)
Hash identifier: oTTbEsvEAXQYLHwRWaXDYoBa9+vRo5ty0xjqAV9V8+Q=
Subject key identifier: 37:8B:F6:6F:BD:48:F9:C9:F6:1D:35:3A:DB:8C:AD:2D:6B:D8:A5:07
Authority key identifier: D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
Certificate issuer: /CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Certificate serial: 01A13F70A852DAF1E9D6FCDF687409903C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
Manifest number: 07BE
Signing time: Thu 15 Oct 2026 12:01:50 +0000
Manifest this update: Thu 15 Oct 2026 12:01:50 +0000
Manifest next update: Fri 16 Oct 2026 12:01:50 +0000
Files and hashes: 1: 1AjPCbarAFupM7KnpKbSfqa7cso.crl (hash: 1Yy7vhYXNDo6Zy60V5TKXH2muaPXue7A+fIr6P0SyU0=)
2: tK1_7kYoh8HPJEz9gt6VcaD4nUE.roa (hash: S18bPoeACVyQQ3iZwMpVkRKWBkpl4d3ZgQ7DJM72ZW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:a8:52:da:f1:e9:d6:fc:df:68:74:09:90:3c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Validity
Not Before: Oct 15 12:01:50 2026 GMT
Not After : Oct 16 12:01:50 2026 GMT
Subject: CN=378bf66fbd48f9c9f61d353adb8cad2d6bd8a507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:44:18:3c:80:b3:af:37:fa:67:47:15:d0:
22:39:b8:95:5e:de:b2:4b:2b:50:81:d1:0f:b0:7b:
96:6d:91:9f:de:22:fb:78:c0:6b:5f:d0:d7:7f:f4:
35:0c:c6:b0:fa:2d:be:42:99:5a:e0:6b:79:d7:b2:
e9:ac:6a:d6:3e:d4:11:16:5f:65:ce:de:eb:64:0c:
8b:f2:30:3b:c1:0f:f3:c5:26:28:97:0a:fa:07:6b:
24:13:2b:15:dc:fb:7b:da:37:97:b1:1a:a7:54:dc:
13:08:69:ad:02:c2:43:1b:38:7d:90:36:b6:76:bb:
a9:84:a2:e2:55:a8:ef:1f:93:71:dc:96:23:37:26:
c5:dd:bc:1f:2d:75:f0:2d:7f:eb:c6:8b:1d:19:d1:
30:31:eb:78:4e:5b:a6:8a:f2:39:d0:1c:ec:2b:e6:
1d:7d:ac:ab:5f:cb:54:92:eb:ca:fd:29:3a:b8:02:
37:04:1c:8b:44:88:47:03:a5:68:fa:2d:e1:d4:c0:
b2:1c:cd:ef:88:e7:9b:c9:f9:4d:c6:f9:0f:3c:18:
31:f5:67:ef:fb:5b:3f:84:b5:8e:4f:62:fb:36:49:
bc:d3:a7:c0:2a:8a:e7:41:fe:28:7c:c4:04:f9:8e:
ab:03:e0:69:79:8d:70:fc:00:a8:0f:8f:d7:32:93:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8B:F6:6F:BD:48:F9:C9:F6:1D:35:3A:DB:8C:AD:2D:6B:D8:A5:07
X509v3 Authority Key Identifier:
keyid:D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:86:56:d4:fa:15:98:98:52:c5:68:f6:fa:ab:2a:88:4b:84:
3d:f2:c6:2c:cf:03:d9:d4:a7:2e:42:15:36:c0:75:bf:24:27:
c8:f7:80:cd:fd:e6:71:04:69:16:24:77:53:30:6c:47:a1:74:
bb:6e:5a:22:9d:76:51:5b:18:34:8c:cb:0f:77:ed:40:81:4c:
07:f6:41:e7:f9:c8:e9:56:de:41:6b:d5:c0:b8:52:f3:24:60:
21:fb:e4:be:aa:f0:f7:eb:71:99:d1:af:44:70:e3:2d:4f:e2:
67:d7:f2:ea:33:ac:dc:98:37:0e:2a:c9:99:12:81:e7:9b:9d:
52:9d:e7:b0:dc:50:cd:aa:45:ab:39:e8:5b:fa:cb:5a:07:d2:
a4:24:24:94:1d:0b:e3:14:02:1d:5c:04:6a:b3:fd:30:5a:93:
4e:a6:c9:73:68:36:fb:d7:8e:a4:f3:f5:65:52:5a:db:c8:8b:
0d:5c:d1:78:79:57:f9:a4:21:8a:34:5b:a2:30:a2:2f:e0:38:
5c:44:53:d2:56:0b:6b:45:20:8f:69:d5:b3:48:bb:3d:55:06:
50:01:49:9d:99:56:46:06:18:d5:05:18:a7:d2:a3:00:c2:27:
6a:5b:f2:f7:80:18:22:1a:12:e1:be:8c:09:f1:8f:de:d0:ef:
86:9f:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:42 2026 by rpki-client