Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: ylDtDw7EpKXPWKjcTw15aNPn+USJBTIO8LUVPOTnPI0=
Subject key identifier: C1:CF:88:AB:E5:AF:C8:83:7C:55:A6:52:1D:7F:7C:F5:CE:F9:E5:26
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 01A13CDC3B3EFC30B3D53D13C4333E6FC3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 10AC
Signing time: Thu 15 Oct 2026 00:00:28 +0000
Manifest this update: Thu 15 Oct 2026 00:00:28 +0000
Manifest next update: Fri 16 Oct 2026 00:00:28 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: tVwNpLBXSZ56EmCnAoO5MzqrDhdPexjn4W5Bib5pN8U=)
2: wx4jf3r0v_RD4WGbwjNb9_66YeA.roa (hash: Yg61lLQnPGGlaDhOZEVebkyWouHjvzVXcfasCV97MNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:3b:3e:fc:30:b3:d5:3d:13:c4:33:3e:6f:c3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Oct 15 00:00:28 2026 GMT
Not After : Oct 16 00:00:28 2026 GMT
Subject: CN=c1cf88abe5afc8837c55a6521d7f7cf5cef9e526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:67:9d:8a:b8:b5:45:87:f4:d6:64:27:c4:
74:0f:73:8a:70:6d:38:00:60:55:a8:72:b5:7e:69:
35:7e:fc:90:4e:f6:6f:ab:25:bc:f5:c2:f3:21:dd:
17:d8:93:6b:b8:92:b7:70:16:bd:93:92:25:1d:06:
0a:3d:df:41:f1:25:73:c2:f2:ec:2f:09:16:b8:f9:
56:c8:a3:e6:44:10:be:65:f9:fc:30:58:94:4b:fc:
0c:8e:14:e5:4c:d0:18:7c:93:18:35:03:80:05:40:
57:ab:df:07:1e:fe:91:b9:ce:75:d9:f6:20:5e:de:
28:a5:46:18:8b:97:ca:f8:9c:81:ef:ae:44:bd:b1:
67:63:58:df:d4:9b:37:f2:63:1e:39:d6:c2:56:10:
fa:4b:4d:d1:59:ab:3e:c7:13:57:d6:6b:e4:10:cd:
24:e3:5a:68:10:0e:b6:c0:6a:3b:6f:3e:e7:76:0d:
af:43:d2:a1:28:37:98:af:51:3d:4b:65:e5:55:2e:
54:45:e8:f3:8e:8b:d6:4f:93:1f:fe:a8:7b:ad:97:
93:b7:a3:58:d3:43:a5:8a:57:48:a0:19:d6:10:d1:
f0:e7:99:2d:34:f3:42:95:78:15:1c:e3:6a:9d:aa:
34:ee:6f:11:52:4c:6a:dd:37:47:b9:e0:7a:c6:f2:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CF:88:AB:E5:AF:C8:83:7C:55:A6:52:1D:7F:7C:F5:CE:F9:E5:26
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7a:c0:7b:4f:bc:ac:b8:87:95:ed:39:f7:0d:03:57:82:c3:
30:e4:32:2f:6f:19:51:47:4e:f1:32:da:9b:dc:53:81:75:18:
0a:e7:e4:3c:92:21:c8:92:b9:16:8b:82:92:ed:2c:41:a1:75:
e4:9d:ef:a2:98:0f:65:14:68:66:7b:05:8d:72:d9:d0:8a:14:
5a:b5:1d:d1:64:a3:c0:16:cf:d2:02:74:1a:aa:10:3e:4e:4b:
c5:ca:91:be:1e:d3:d8:3b:6b:ee:b2:e8:86:b3:f1:32:18:98:
dd:c6:22:b0:fd:78:7e:5e:8e:92:89:f8:ed:1a:c8:4b:16:c0:
86:26:56:84:8b:59:e6:82:ba:71:1a:79:45:ad:16:e6:19:cc:
99:b8:6b:1b:7a:97:b1:de:7c:78:ae:75:77:85:85:8b:4a:02:
59:2e:f8:69:4e:52:8b:4c:f8:b0:d5:6e:fc:54:4a:5a:71:16:
83:41:5a:31:2b:92:ee:10:5a:4a:71:f8:05:04:06:c8:14:9e:
fc:4f:0a:d0:97:8c:f9:f9:36:35:02:70:8f:f9:76:2f:fa:20:
3c:f4:bf:b5:1d:7a:59:23:bb:47:f4:1e:24:b6:c8:82:67:d8:
a4:0e:c7:8e:ac:2f:94:ce:bf:38:c2:ed:b7:8c:76:43:75:da:
5f:a3:c6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:23 2026 by rpki-client