Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier: 6dZp8M8Lv/pu3B3qgCfxC/hPCxOQqPQJS9omaKwuO34=
Subject key identifier: 0D:D7:0B:2D:34:17:4B:0A:0A:D8:A9:A7:62:E9:8E:56:14:A0:C3:08
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial: 01A1829A0EA08FD53E39F5D33F0ED03CA1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number: 0840
Signing time: Wed 28 Oct 2026 13:01:36 +0000
Manifest this update: Wed 28 Oct 2026 13:01:36 +0000
Manifest next update: Thu 29 Oct 2026 13:01:36 +0000
Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: nG3Gz/vhzCeSwe8ImQzR+lDeQ9p3GHXER9VckUgpbPQ=)
2: iQGTd2WXoLVwRsQ_8nC_udEAF7E.roa (hash: Xe100ccFvMhNIhN2VUssDCNyo4J+LE95jPp43mX4rJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:9a:0e:a0:8f:d5:3e:39:f5:d3:3f:0e:d0:3c:a1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Validity
Not Before: Oct 28 13:01:36 2026 GMT
Not After : Oct 29 13:01:36 2026 GMT
Subject: CN=0dd70b2d34174b0a0ad8a9a762e98e5614a0c308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:95:3f:c9:f1:fc:23:13:b5:3b:d9:76:b7:
a3:82:10:90:15:c8:9c:70:26:4d:1d:b1:76:b7:17:
83:cd:3e:35:d4:a2:bb:d6:e0:1b:df:46:f8:89:60:
ed:c7:f2:ca:b2:cd:cb:e4:00:57:c4:61:5c:af:b2:
6f:73:52:37:5e:4c:a8:5b:95:1c:da:95:0b:31:fc:
4f:22:51:a2:04:d6:32:3d:12:76:03:34:3f:32:8a:
bc:ab:1b:27:48:3f:3a:5a:8c:20:b4:b5:8c:5a:6c:
8c:ee:01:a3:fa:bd:04:74:2f:40:8f:d2:57:4f:ce:
6f:ec:f6:94:97:ea:b9:37:e1:ea:c8:d1:89:fb:7e:
e7:ea:5c:a5:18:8b:b6:71:80:c9:9f:27:4e:28:99:
37:50:47:78:87:e6:6e:a9:d3:70:4f:25:de:50:f9:
d9:df:ab:c8:18:8e:e9:37:49:67:29:6a:ea:6c:c8:
fe:d2:51:ed:a3:b3:39:38:b7:72:26:6a:ca:63:af:
b4:a9:6c:cf:93:2a:dc:23:60:60:87:bf:36:0f:70:
a6:a9:99:40:a3:c4:2c:ac:32:27:15:bd:2f:c0:1d:
e5:e2:a4:33:fe:1c:6f:43:7c:2d:cc:bd:cb:4c:e7:
06:a8:33:70:30:79:e8:1f:c8:7b:46:9d:dd:98:7a:
7a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D7:0B:2D:34:17:4B:0A:0A:D8:A9:A7:62:E9:8E:56:14:A0:C3:08
X509v3 Authority Key Identifier:
keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:89:26:7b:ee:a3:7a:04:be:ff:7f:1e:61:2e:8e:80:b9:e3:
cb:e1:65:76:81:e1:38:e2:56:fc:19:20:65:66:ef:5c:2e:77:
16:f2:32:9b:1c:3e:33:4b:4a:c5:62:87:c7:56:34:e0:0f:89:
aa:0c:fd:bd:9d:cb:c4:b2:fc:e3:67:b9:b4:d5:22:5c:bb:28:
57:f6:23:5a:85:ae:6f:5a:95:98:6c:d5:60:74:ce:6a:ce:25:
e5:04:51:44:78:7a:ee:51:cc:5e:51:a3:81:13:33:14:c1:7f:
4d:18:18:60:19:08:b7:c3:73:6a:3b:44:c8:2f:15:2e:d7:29:
e0:e5:c3:bf:26:19:e7:2f:60:74:77:b5:51:3b:9e:f9:72:28:
61:35:44:9a:91:44:7c:70:ae:6f:15:35:3f:7a:82:87:58:d2:
d6:f0:f9:d0:3a:e9:54:a1:d8:d6:31:1e:a5:99:38:b6:42:9a:
45:10:c4:5f:cc:b8:e8:8a:ab:35:70:df:ae:b8:17:12:1d:3b:
8e:e8:34:a9:bb:0e:4e:20:90:f0:69:0e:43:46:97:f2:dc:5a:
16:31:af:bb:ed:5e:ce:3c:40:6f:bd:ad:bc:28:8b:61:7b:72:
fe:bc:b0:2c:c1:06:09:27:46:93:e0:2d:d0:34:5d:22:c4:4e:
78:b9:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:16:38 2026 by rpki-client