Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
File: 0f00NtehmnND-oANh6Aa8YPaMYs.mft (raw, json)
Hash identifier: 9RkQtaw+aimFabDq/wDcD+9LrTdYMjjDZ+RRof3lPAs=
Subject key identifier: 5A:DE:2A:2D:F0:53:C5:B6:7B:D9:F6:81:4C:18:ED:E5:68:99:58:5E
Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
Certificate issuer: /CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Certificate serial: 01A181F4AA48C52122BB8361F0A33FAAD886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
Manifest number: 10D4
Signing time: Wed 28 Oct 2026 10:00:57 +0000
Manifest this update: Wed 28 Oct 2026 10:00:57 +0000
Manifest next update: Thu 29 Oct 2026 10:00:57 +0000
Files and hashes: 1: 0f00NtehmnND-oANh6Aa8YPaMYs.crl (hash: uogITuNM8v+WN71WewFHpNN48cQk7PzeGPkcPGEiDtM=)
2: IASwi9of8Nm06s2NEyZeclBiyks.roa (hash: wJHjHPTUMp7nASIGnsvw0Yq6r11NWYMurdnBadU/uWs=)
3: cJm02hXD31NI7pVQ-Zg6zC-hgq4.roa (hash: HsDfNZqhgWgKKit0y0ockf+XjyRYYtlEbZ6HrEVkmGs=)
4: d2D28pbUUy75o_ayovdj8OnlSSk.roa (hash: VCEc/3eMD6beAJR+mVre94XxkAsuGJ0/hx5+lBhoAGg=)
5: jwsbk3UxQHXyjEExXwNUXcrvx38.roa (hash: Glu31tXKVdAhpJSQOXApQod2ByFLYzTP23c7sIux+Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:f4:aa:48:c5:21:22:bb:83:61:f0:a3:3f:aa:d8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Validity
Not Before: Oct 28 10:00:57 2026 GMT
Not After : Oct 29 10:00:57 2026 GMT
Subject: CN=5ade2a2df053c5b67bd9f6814c18ede56899585e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:4a:41:65:d6:52:71:75:88:61:3f:22:09:
ed:f6:a2:5e:74:95:8d:f2:92:4c:ff:bf:6c:6a:7e:
9f:2b:5d:69:88:0b:f4:60:38:fd:80:21:49:e5:57:
0e:d6:a9:11:1d:a9:6b:8a:eb:da:50:57:0d:ca:fb:
16:c9:09:5b:e9:89:9b:00:68:c9:59:62:f6:c1:2b:
01:3d:05:5b:ee:d4:8b:43:44:20:e1:24:40:0f:fb:
f2:86:8b:c1:95:32:e3:0b:4e:da:d6:7f:05:24:59:
75:6c:06:9a:31:da:75:ef:f8:e5:0f:48:ad:fa:43:
85:26:ac:2a:01:39:8e:b2:99:f4:67:ab:81:89:62:
e3:0c:24:15:37:8b:21:be:55:cd:42:e5:06:2c:48:
49:ef:a5:19:84:b9:cd:3b:84:13:f9:8a:61:c4:3a:
f0:74:d7:3c:64:1c:dd:3a:08:7e:74:96:6e:13:8b:
70:66:36:76:a1:f3:a6:c4:f0:36:af:93:68:d1:17:
e8:42:b8:f3:85:44:f0:13:b3:cc:84:f3:30:48:80:
3a:3a:3d:0d:fd:f0:41:6c:48:b4:8f:0f:28:c1:ae:
a5:56:6d:ac:a4:dd:24:e6:4c:9d:6d:1c:0c:bd:8f:
8d:da:8d:e9:86:8e:7f:68:ed:49:d4:5f:b0:8a:bd:
7a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DE:2A:2D:F0:53:C5:B6:7B:D9:F6:81:4C:18:ED:E5:68:99:58:5E
X509v3 Authority Key Identifier:
keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fc:2e:c5:2a:97:64:78:3b:fc:82:64:81:e7:6a:06:6f:16:
bd:83:dd:f0:2a:42:c3:fc:fe:7d:83:34:7d:32:94:93:f6:c3:
0b:cc:f5:b0:9d:d4:55:7e:79:46:17:66:66:ff:33:20:b6:d4:
3e:05:24:8d:74:ce:2a:67:d1:65:b3:59:ef:cb:3b:33:e5:98:
36:60:53:0f:5f:58:71:64:b6:c4:e5:4d:99:9a:69:67:a9:a1:
3b:1c:25:55:70:ba:f5:18:3d:c8:44:ea:fc:2a:16:74:0c:12:
e0:2f:b8:7d:ad:2e:c8:13:81:72:c4:65:d8:c4:78:c9:c7:e1:
11:a2:d6:83:13:a2:49:88:9e:fe:0a:5e:cf:9d:0b:f4:ce:62:
b0:65:c8:cd:ad:b3:24:36:f6:b6:25:41:92:78:80:92:13:6c:
e7:0d:01:71:23:f4:6e:57:46:9e:07:62:be:6b:55:74:c0:71:
5a:5f:73:78:f8:95:ef:09:d8:21:ca:a6:a6:32:f5:e0:4c:cd:
62:4f:d1:b5:b2:a5:1c:c4:95:d2:31:14:01:cf:53:95:b3:35:
be:93:ff:6e:7e:4e:1d:48:f4:a6:0f:4d:f4:de:5c:22:cf:f8:
71:ac:4f:4f:7b:63:77:a7:e6:09:9f:34:5a:b2:44:fd:d6:75:
ab:4d:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:37 2026 by rpki-client