Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier: joVd1MgOvaAd7Rcny4wGubiLaNRSA/0jRwMtsP8wjWA=
Subject key identifier: 0C:F4:2B:87:B9:50:65:32:A7:A3:49:B7:86:03:0B:70:AE:00:BE:68
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial: 01A13D13145CD933315A7480A19ECF6A19C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number: 0AF8
Signing time: Thu 15 Oct 2026 01:00:22 +0000
Manifest this update: Thu 15 Oct 2026 01:00:22 +0000
Manifest next update: Fri 16 Oct 2026 01:00:22 +0000
Files and hashes: 1: JWCAfjjh5zsM89EhT5JBBpHJm28.roa (hash: +D0zzkFTWspOvvhGzzd00EXqwAQzFC2yhaPbQUOWqZU=)
2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: w91vLqTVuTqNiinUw8UTRqyP+lAVOCpZJL0DR2HZ/sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:14:5c:d9:33:31:5a:74:80:a1:9e:cf:6a:19:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Validity
Not Before: Oct 15 01:00:22 2026 GMT
Not After : Oct 16 01:00:22 2026 GMT
Subject: CN=0cf42b87b9506532a7a349b786030b70ae00be68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:5f:0f:4b:f4:e4:e4:b8:75:b0:6e:74:a9:
a5:77:73:5e:10:2f:32:9d:39:ec:7c:ee:20:c0:cc:
26:21:bd:04:53:c1:d4:c0:b5:e6:89:55:62:09:33:
ec:78:88:b9:98:42:1a:0d:75:f5:46:fb:4b:ff:13:
7b:92:8a:9c:13:aa:3a:3d:49:59:bd:b4:cb:8a:ca:
cb:3c:fb:66:9c:42:df:14:0d:c9:39:93:01:6f:fa:
e7:66:6e:6a:fe:fe:b3:67:df:af:f6:90:35:3c:39:
31:a4:f1:eb:9d:ea:f1:5c:26:2d:c6:9c:f3:d7:ea:
d9:d5:a8:79:34:05:55:af:09:e5:9a:70:c9:5f:29:
2e:b9:9b:84:c0:b0:e1:c8:ee:6c:ae:cd:c6:0a:67:
67:31:9a:0f:12:06:7d:c6:77:9d:77:a8:10:dd:4c:
bd:d9:3b:31:25:40:27:e1:22:14:11:63:06:97:16:
a7:1d:63:ae:43:77:23:76:c4:95:6d:26:36:4f:72:
e0:23:69:54:ec:02:7c:74:e4:ee:07:68:7e:b3:64:
ff:20:d4:e7:01:89:18:c5:e2:b1:ce:14:16:56:7b:
6d:b7:60:3b:97:0d:7e:80:a4:77:db:ad:d8:84:cb:
72:ba:c5:c1:26:63:ef:5a:d1:a6:f4:ae:43:a1:62:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F4:2B:87:B9:50:65:32:A7:A3:49:B7:86:03:0B:70:AE:00:BE:68
X509v3 Authority Key Identifier:
keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0d:1e:a9:06:d9:64:c2:ee:d8:e6:c4:e8:bf:a7:37:be:b9:
0c:00:1d:5d:8f:ba:1b:e2:5c:f3:36:5f:63:e4:a4:28:0f:7a:
9b:fe:24:85:c4:74:6e:5c:e5:68:1e:16:af:6d:cf:19:56:3b:
5d:8a:9b:72:4e:93:56:d0:87:81:9b:64:e2:dc:35:ae:d9:54:
52:a8:6c:10:70:1a:88:bd:f1:58:69:cf:de:2f:2f:14:78:97:
b9:82:0a:2e:64:8d:a1:d1:41:93:1f:4a:e7:5f:1e:1f:78:a6:
c9:ba:e5:fc:5b:65:92:9c:08:5a:3d:90:3d:31:72:8a:38:fd:
ff:83:0f:36:48:dd:b6:d3:e0:ae:b6:d3:4f:0c:23:3f:e4:9e:
fa:fd:e0:45:52:42:a5:30:66:26:54:57:a4:bb:91:4c:d5:22:
32:a3:64:43:90:1a:fb:3d:d1:d6:4c:2c:53:a2:da:13:76:7b:
f8:47:bd:0d:58:a9:67:f4:70:6f:72:61:27:18:d6:03:59:6b:
90:69:6a:c0:03:5d:bd:47:a3:67:b3:89:24:81:f7:3f:67:41:
e4:f8:d9:be:d9:58:7f:36:48:07:aa:07:f3:83:fd:a9:57:82:
97:b4:ac:25:28:6a:a5:51:5b:32:7e:90:57:0b:68:d7:8c:36:
d3:18:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:23 2026 by rpki-client