Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier: 7ZTmnMCx079JeCtTqikyC4Cs/AQW62JfL6+mj5+6024=
Subject key identifier: CE:A2:64:0B:61:F8:0B:D9:8C:18:51:76:27:F7:8C:4F:0E:97:93:C9
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 01A17A3ABF957FC5680A4EA04602005F9E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number: 119B
Signing time: Mon 26 Oct 2026 22:00:32 +0000
Manifest this update: Mon 26 Oct 2026 22:00:32 +0000
Manifest next update: Tue 27 Oct 2026 22:00:32 +0000
Files and hashes: 1: KuefoOzdZ9vrXjVoaWqLBNOd8Fc.roa (hash: Tr2+OxM2L2vZYYtrtzp3JmsEgxHYlAlF0KBqV8P0L1o=)
2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: 6/sNJso772tynpy/F1Wckv6P4+2cqS8DovC0vKrfseY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:bf:95:7f:c5:68:0a:4e:a0:46:02:00:5f:9e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Oct 26 22:00:32 2026 GMT
Not After : Oct 27 22:00:32 2026 GMT
Subject: CN=cea2640b61f80bd98c18517627f78c4f0e9793c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:97:4c:a5:c8:f8:73:4d:84:64:19:a1:2f:
fc:35:43:2d:34:0d:12:48:9d:51:b4:73:19:9f:c0:
3b:3e:b8:54:fc:ec:67:18:3b:3e:fa:df:ca:34:cd:
ff:78:db:5a:dd:d1:ee:ee:b0:a1:c9:7d:80:39:ea:
82:56:81:78:c8:8a:49:b9:4b:7f:41:e8:bd:c8:45:
72:c4:11:a9:0f:3d:a7:e6:f9:93:79:7e:f0:5e:dc:
f4:e1:ac:98:5e:e9:5d:c5:fa:e3:cd:63:07:9f:52:
92:bd:ac:ec:79:44:0d:0b:4b:20:ae:20:a3:57:82:
ca:c1:5f:48:89:6d:0c:11:d8:17:4c:2a:b4:c5:da:
20:c7:1f:6e:03:bc:95:6e:c1:20:6d:4a:ad:9a:aa:
11:e6:0a:41:f9:33:6e:ca:c5:86:dd:9b:fe:f0:f6:
56:d6:30:57:88:f8:57:41:f3:a3:ad:d1:5a:8e:59:
7f:71:b3:2c:17:ff:2f:3f:7b:21:79:91:45:74:12:
49:14:c6:ff:f8:b1:49:45:bc:16:e6:f8:f0:24:c7:
02:fe:c8:dd:26:c0:e2:da:70:c0:2d:dc:58:bd:bd:
9c:ba:87:0d:2d:e3:14:46:f3:b2:09:ff:b4:67:cc:
ef:d6:48:9f:38:57:45:ca:cd:b6:a7:cc:48:2e:56:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A2:64:0B:61:F8:0B:D9:8C:18:51:76:27:F7:8C:4F:0E:97:93:C9
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:45:ed:83:c3:c5:b6:c8:94:84:e0:09:11:91:f8:c7:a5:ba:
a5:44:b4:f4:c0:cf:06:ed:1f:4d:61:1a:05:0d:0f:99:86:cc:
06:74:45:e0:d1:65:05:d6:68:2b:0c:c7:62:7a:2c:eb:9f:bc:
87:a2:a8:d8:c5:7c:57:7c:0b:25:df:39:36:a5:18:c7:1e:56:
25:c0:45:2a:c7:96:90:a0:dd:9b:47:a1:69:f4:da:3f:01:73:
42:91:79:68:8d:30:24:76:76:e7:e5:83:82:85:5c:f2:6d:1c:
1a:73:c8:d0:e0:ca:f3:f4:1c:25:c4:53:10:81:31:12:04:0a:
3e:47:9f:dd:c8:66:22:4f:24:a8:d1:af:81:c1:a5:11:57:07:
27:1d:9d:13:95:c6:88:aa:d1:58:91:5d:60:26:67:f5:f2:71:
dd:37:7d:cc:93:da:9e:0e:70:f0:02:2c:e1:06:be:bc:58:3d:
de:7e:91:86:16:5c:86:a9:d5:4d:c0:b3:f9:5d:b9:61:da:d1:
1a:cc:b7:c8:11:f5:a1:cd:07:1f:c5:67:01:d5:5d:37:f1:4e:
64:a6:c1:87:2b:b8:92:7e:f2:92:6b:0a:df:8e:80:e4:9b:06:
41:a8:1a:4f:c1:d5:97:2d:23:e5:c1:e5:c6:fc:36:62:bb:d2:
01:03:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:59:43 2026 by rpki-client