Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: 6oib9dB7XMjOWqQo4e2YKS36YNPuQh6l92disjZWhXk=
Subject key identifier: AE:22:08:C6:B1:CE:56:81:C2:35:B5:5F:9E:6D:42:E6:0E:0B:8D:3D
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 01A1513ED8AA1A84788E2B5B9146F0E31B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 0B4E
Signing time: Sun 18 Oct 2026 23:00:35 +0000
Manifest this update: Sun 18 Oct 2026 23:00:35 +0000
Manifest next update: Mon 19 Oct 2026 23:00:35 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: 5p6CdLJhH97oC2Jt60b3AbOi/a1Mk7ew/+oMI9CGJ60=)
2: qdFP8iSD0Z_J4wvN-DjLd-7BFwQ.roa (hash: 0D/tNJqnYIvzeRQq9p/CHZuxh+SBEqxg5rvNHFpn3cY=)
3: vrCign6erTM1LbQRKP4h0IonXBQ.roa (hash: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:3e:d8:aa:1a:84:78:8e:2b:5b:91:46:f0:e3:1b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Oct 18 23:00:35 2026 GMT
Not After : Oct 19 23:00:35 2026 GMT
Subject: CN=ae2208c6b1ce5681c235b55f9e6d42e60e0b8d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:7c:d3:01:6c:07:9a:b6:94:a4:52:29:9b:
ed:48:93:5a:78:e7:f9:3e:0f:6e:27:ca:78:95:fa:
d4:89:6e:f6:96:20:df:10:52:43:c3:2d:1b:e8:db:
18:3c:da:9d:2e:e5:0b:b9:63:68:41:16:b5:d4:f0:
98:7d:b7:19:24:00:04:e7:c5:ca:36:0b:af:64:cd:
ba:1a:f5:bd:e7:7c:0d:93:4f:3c:97:bf:c8:ed:2a:
15:9e:0c:8f:0e:e1:66:a6:d5:cc:d5:fa:41:aa:12:
6a:3f:da:7b:d6:c2:11:ee:58:99:43:c8:4c:14:fd:
36:81:6b:00:98:1e:b6:9b:de:36:9d:15:0a:47:98:
93:8b:45:ad:4d:6f:a1:a3:9b:1d:67:1c:0e:2f:52:
fd:ef:6b:3a:c2:44:db:60:26:92:4d:fe:60:2d:ec:
6e:22:0a:b7:fc:75:e3:a5:6a:03:60:73:a8:65:6f:
54:10:66:1f:97:97:47:9b:fe:cd:4a:71:69:fe:ac:
60:2c:7f:a2:6a:2e:44:81:45:20:4e:a1:47:22:0f:
84:e2:94:e8:ed:c3:51:d8:57:04:29:45:39:2e:f6:
8a:f1:cf:97:fe:e4:9e:8f:e0:14:65:6c:2e:49:26:
9f:9f:19:5b:61:c3:41:eb:55:b2:ab:fe:c2:cf:fd:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:22:08:C6:B1:CE:56:81:C2:35:B5:5F:9E:6D:42:E6:0E:0B:8D:3D
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:88:ef:b9:ba:e7:30:3e:6c:2d:ab:c2:ff:4a:e3:5a:42:08:
56:9b:94:d0:12:b6:7c:08:5b:2f:70:b1:61:05:de:9c:9a:dc:
14:a3:eb:e3:11:9c:6e:b6:a0:29:68:85:0d:68:a9:6f:ae:26:
07:3c:f1:10:d8:07:ad:65:6c:17:ca:a1:0a:64:75:cb:17:af:
dd:4b:34:2c:c0:c3:fd:53:44:dc:55:24:43:30:00:c9:f7:a9:
d8:61:e2:0b:6b:54:9d:fd:4b:1d:11:60:b6:d1:05:ec:1c:03:
db:60:f5:9b:2d:63:99:27:44:41:77:78:6c:62:2d:61:20:d9:
0b:25:a1:b6:ca:19:00:c3:d7:ff:f3:50:57:67:f1:d6:38:c5:
ea:35:18:ac:9c:18:4b:4c:d8:af:69:db:d9:18:e0:e1:bd:fb:
a9:cf:fe:73:a9:f8:07:1a:35:4d:a1:e2:26:51:1d:e9:dc:bb:
14:4e:db:99:c6:f6:b7:d7:53:7c:b8:09:d4:82:92:0c:48:f9:
0b:92:7b:16:35:b9:80:95:ba:81:7a:a6:93:c0:29:15:77:ca:
8d:b3:cd:7c:84:4f:91:10:7a:a9:35:14:16:a5:5e:a4:de:60:
c3:8f:69:82:4a:87:e7:62:12:fe:84:b5:e4:37:5d:ee:50:31:
57:2e:27:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:40:28 2026 by rpki-client