Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: 656y+G61KJgd84q8pRuooEPCWxb1COpcjLMYPrwCLBw=
Subject key identifier: 19:0E:E3:F2:03:F8:7C:DD:DF:DC:BC:0A:9A:B0:53:44:67:5F:03:9F
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 01A14C870B2F28D4E052CC9DF6E3256F6706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 1AAE
Signing time: Sun 18 Oct 2026 01:01:20 +0000
Manifest this update: Sun 18 Oct 2026 01:01:20 +0000
Manifest next update: Mon 19 Oct 2026 01:01:20 +0000
Files and hashes: 1: 4XcJfnMEQwRMn36H0whqZmqgRz0.roa (hash: 3cAlArq6y9UICoHc8IZifo9HP9trBfeMANvUPBi0r6k=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: 5s+4Fy+fei4nNjBPhjSrz8VzaWe1EkYmpip75Q95B1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:87:0b:2f:28:d4:e0:52:cc:9d:f6:e3:25:6f:67:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Oct 18 01:01:20 2026 GMT
Not After : Oct 19 01:01:20 2026 GMT
Subject: CN=190ee3f203f87cdddfdcbc0a9ab05344675f039f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:5b:c6:96:ce:d4:41:bb:f3:74:42:b7:4a:
ea:9e:43:3a:d4:93:18:5e:61:ee:4d:82:d5:70:f5:
0a:e0:11:6a:1b:20:e9:18:b2:e2:2c:ea:1e:4d:c1:
48:f7:e1:bf:d1:37:95:90:ba:2b:df:23:a8:c8:ad:
bd:59:74:b1:20:5d:f5:eb:37:43:9f:0f:5e:46:5c:
3e:87:3b:9a:ca:5f:27:72:ac:3b:87:cb:8f:72:0f:
a1:3e:62:47:42:4a:51:37:23:49:46:a7:b2:f2:25:
f1:76:44:1a:f9:f3:f0:fb:79:95:54:08:8a:83:8d:
0d:75:36:9f:1d:aa:bf:b5:fd:89:0d:77:47:7a:aa:
81:ca:3c:a4:72:a4:4b:96:f3:30:a0:e3:08:ba:97:
e7:7f:d8:58:83:42:a0:26:74:3b:0c:0f:82:5a:7e:
2d:e2:88:1e:a2:a6:2c:0f:a5:81:24:cd:99:6f:2b:
29:53:8b:ae:3b:4b:56:f4:9a:f6:5e:fc:a8:74:af:
9e:ad:e1:6a:d9:0b:b4:af:62:1f:36:b1:48:5a:f5:
96:c8:26:c8:11:11:b2:19:3e:c0:20:f9:a5:43:58:
6e:0c:88:57:da:fa:53:e8:70:3b:7d:0c:2d:fd:de:
9f:ac:e4:8e:57:aa:23:1d:a1:a1:91:9f:32:39:03:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0E:E3:F2:03:F8:7C:DD:DF:DC:BC:0A:9A:B0:53:44:67:5F:03:9F
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:47:0b:c4:a9:2d:c9:95:fc:f8:91:eb:26:08:fc:5f:f5:e9:
b9:3b:cc:ec:5d:07:30:0e:e1:08:39:f4:e7:d9:b5:d6:26:67:
4c:e8:33:b7:f5:91:d5:d3:0c:95:76:da:09:f3:a5:df:5d:1c:
98:45:97:f1:3f:bf:2a:a6:df:76:34:1d:d4:51:a7:a9:d2:5b:
26:1a:8e:e4:99:e9:b4:ea:b9:d2:e3:fa:34:14:b5:bf:a0:65:
42:5f:bf:c6:bc:e6:35:b4:50:e2:87:f2:fb:05:9d:f2:dc:0e:
70:4f:be:58:bb:cb:cb:3a:6f:b5:0c:ee:93:fa:11:ed:8a:ed:
4a:be:37:7e:aa:c3:bd:50:b4:22:ae:1d:b7:84:d7:90:01:ae:
a3:08:0d:25:a0:e9:93:d3:5f:35:bc:fa:3b:90:c3:d9:19:f7:
b1:9c:9d:bc:fa:82:5c:d4:fc:f7:62:b2:45:59:dd:e7:18:2f:
94:e7:51:7f:42:14:26:b6:0b:da:e9:57:9a:ea:f4:d0:0b:a2:
c7:46:97:c5:75:73:5a:da:a3:48:54:9a:82:bc:6e:c7:34:e0:
40:e6:71:46:df:41:99:fa:fc:f3:a6:0f:16:36:77:91:96:cc:
17:8d:7d:24:b5:e0:a8:d6:aa:49:3c:3e:af:a2:3e:e5:c0:fd:
32:37:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:14:16 2026 by rpki-client