
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
File: p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft (raw, json)
Hash identifier: mYEK7VPNTpzohmxE0aMilRkNGGUKaaEtXrgNJKj0EdU=
Subject key identifier: 97:93:71:B4:16:8A:EB:6E:79:31:59:7A:0F:D7:0E:6B:69:18:E6:11
Authority key identifier: A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
Certificate issuer: /CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Certificate serial: 01A12AD69DB15438D0CB32A99C9C953CC44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:01:10 +0000
Manifest this update: Sun 11 Oct 2026 12:01:10 +0000
Manifest next update: Mon 12 Oct 2026 12:01:10 +0000
Files and hashes: 1: KnqLm83Z2hlavX1T4fc9lfOMzqw.roa (hash: r6PDB8P6tsiT5QQpwA2/Urm/y2YE3Dk/QLO59cu8riw=)
2: p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl (hash: /HoB10RSc/5fOci3FcS3ULXMDcJN1+cFrHBWrrtJpiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:9d:b1:54:38:d0:cb:32:a9:9c:9c:95:3c:c4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Validity
Not Before: Oct 11 12:01:10 2026 GMT
Not After : Oct 12 12:01:10 2026 GMT
Subject: CN=979371b4168aeb6e7931597a0fd70e6b6918e611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:5d:f0:cf:54:85:20:7c:7d:cd:0f:55:5e:
17:e3:21:89:45:1b:3c:43:af:79:9b:4e:b7:17:f6:
fe:9f:d2:c6:ab:44:08:10:aa:6a:6d:ba:e0:a0:f1:
63:ed:d0:9f:5f:43:ad:5b:b6:b0:95:d3:3c:86:dc:
f8:26:ba:87:13:9f:4c:0d:31:39:06:d6:ba:00:37:
cd:7d:ca:bd:54:ac:53:0b:98:27:48:5d:95:a0:32:
79:80:ad:51:1e:2e:c6:ab:d1:dd:82:bd:ea:0d:de:
5b:01:a8:7f:01:ab:80:28:45:20:19:e0:a6:ed:ae:
99:4e:b1:38:73:29:f8:d5:b3:82:b5:94:22:a3:97:
4c:a3:97:c2:39:ae:e5:4f:03:a8:58:57:40:a1:88:
97:5d:36:31:b1:5e:4f:46:90:de:2e:51:a4:c1:df:
96:c8:48:82:c5:c2:38:ec:83:78:1a:c4:1c:29:c2:
7b:35:03:3d:51:3b:b0:ba:84:90:fd:ae:3f:49:ad:
4b:25:eb:b0:44:58:a6:f5:20:a0:de:09:26:c7:9a:
45:d0:a1:9d:64:1d:27:2f:47:60:1b:3b:ef:f9:a2:
33:45:bb:63:81:a5:41:4a:92:17:32:00:c5:8a:dd:
fd:d1:3e:c3:c8:29:0f:3e:87:19:28:09:1c:36:c7:
6c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:93:71:B4:16:8A:EB:6E:79:31:59:7A:0F:D7:0E:6B:69:18:E6:11
X509v3 Authority Key Identifier:
keyid:A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:88:31:71:21:e4:5c:87:18:ed:18:03:c1:44:ca:ea:86:5d:
60:6d:8b:48:7b:0c:ed:80:54:c8:e1:25:7d:a1:50:a3:04:e3:
06:f2:2d:93:a0:5a:2a:a8:b0:27:5f:05:76:39:f0:23:a0:4e:
ce:ca:b1:45:79:ca:fc:97:ea:76:b1:99:97:2d:22:9a:01:d8:
2b:bd:be:44:6a:37:20:c3:ac:ec:a7:56:0a:c4:49:29:a9:de:
65:0e:0d:5c:75:eb:d6:c6:33:ac:d8:31:fb:c8:2d:82:3d:09:
9f:61:46:9a:41:67:63:59:8a:06:ea:b9:f3:e8:2b:cb:86:ec:
19:48:09:40:e6:e6:4c:67:98:19:98:e0:f2:be:7b:e7:85:cd:
ef:4e:6c:59:b5:90:d5:82:f9:84:1b:a5:f5:96:72:64:e5:a2:
91:59:b5:00:16:1d:02:d7:87:dd:86:f0:b8:67:de:d1:04:ee:
e8:ee:15:f9:cf:80:7f:de:36:b9:47:4d:c4:22:2d:89:0a:37:
31:0a:e5:39:d4:02:ab:bc:4d:72:8c:dd:f0:8a:bd:76:14:ef:
1d:57:b0:32:b4:4c:a3:b5:e4:81:8f:a1:74:0f:20:cf:f9:c2:
f7:8d:ea:c4:c2:e3:ec:cb:25:ac:7e:a6:dc:f4:49:71:27:86:
df:02:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:03:42 2026 by rpki-client