Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: yPOAyiTPtC4aMRMjMuD4j1XIhxdbZxtbWR7Ulxq8dlQ=
Subject key identifier: B4:41:B2:49:11:BE:80:29:3C:BB:9A:2A:E9:6B:43:81:74:80:B9:4B
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 01A1404C4E580D2F92FD1460FBAE8C3B188D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 16:01:44 +0000
Manifest this update: Thu 15 Oct 2026 16:01:44 +0000
Manifest next update: Fri 16 Oct 2026 16:01:44 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: 4h7fs65jGk03xW80bMStxP2QDoIzr22BYx4L9+SlI7c=)
2: 6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa (hash: CYhce381HzbX7vSncPONtF+Lbdg5xHx48Q/vd4tyB6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:4e:58:0d:2f:92:fd:14:60:fb:ae:8c:3b:18:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Oct 15 16:01:44 2026 GMT
Not After : Oct 16 16:01:44 2026 GMT
Subject: CN=b441b24911be80293cbb9a2ae96b43817480b94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:8a:65:d6:fc:cd:45:4f:c1:f6:23:39:81:
1c:61:5d:ea:e1:39:57:7d:c0:64:e6:b5:f0:4f:8f:
ac:21:79:97:9f:f3:0a:76:3f:e3:93:5f:ef:5a:9c:
4c:e8:9b:35:e2:21:b2:48:e9:36:c1:27:e1:cd:1d:
6e:c6:3d:76:08:30:f9:82:fc:90:19:3d:82:ea:6c:
1f:6c:94:bb:3a:93:26:da:63:ce:3a:0b:23:0c:cb:
67:66:f9:b7:74:16:98:4f:fe:bf:70:2e:e1:db:6c:
b1:38:5f:a6:a4:95:7f:47:87:5e:d4:65:f5:34:f5:
6a:97:12:68:89:8b:77:0a:81:b7:d8:32:9d:b1:0e:
37:74:ee:0e:9a:8d:bc:99:83:f6:e8:e0:c4:c3:eb:
c8:86:7c:9f:ef:5d:05:be:d1:ec:ed:8f:78:44:a5:
8e:57:06:50:1b:7f:60:de:c6:d0:e0:d0:c4:f7:f7:
d2:3b:2e:21:ec:a8:f2:3f:cb:21:65:66:4a:93:27:
d6:4b:72:2f:b4:d9:1e:ce:a8:72:a5:2f:1c:17:2e:
7c:d7:3d:66:0f:40:1a:c2:ff:6f:04:d2:1a:f7:21:
6d:62:14:1b:2d:f1:8e:76:d8:80:03:2a:2e:66:84:
69:66:e9:ff:46:41:35:7d:42:73:d2:69:0a:d2:d2:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:41:B2:49:11:BE:80:29:3C:BB:9A:2A:E9:6B:43:81:74:80:B9:4B
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1d:fc:e4:d8:0c:dd:b1:af:f4:a1:f8:0a:a2:b6:56:44:97:
ad:89:6d:15:15:dc:75:c8:e2:80:bc:68:a3:01:25:d8:25:41:
53:56:5f:42:27:47:10:05:99:a5:aa:43:1a:e4:8c:da:8c:00:
e8:be:03:fb:96:06:20:23:7e:db:32:26:1d:60:16:cc:f9:d9:
18:e8:22:2c:43:df:5b:bf:11:f4:8b:05:04:b3:d2:6f:e7:3e:
44:12:ce:e5:b4:2a:62:7f:3c:a7:02:2a:e0:8f:5b:ec:cd:86:
fa:2f:cd:1c:b9:55:58:c8:d6:6b:df:c1:f9:b8:a0:91:83:ff:
1e:b2:43:23:8f:f4:bf:c2:31:a0:92:12:99:6c:5a:0f:a0:cf:
f5:ca:81:ae:21:90:c6:84:9d:7e:fd:be:6c:6a:a0:77:a0:b9:
ef:dc:df:b5:8d:94:aa:b2:57:f5:2a:9b:d7:5b:28:5d:b9:1a:
76:4e:f2:b3:9d:90:31:4c:72:87:6e:ef:99:65:9f:77:10:25:
27:f2:a5:9a:0f:a0:66:4f:dd:4b:b5:d5:3e:8e:fc:a3:52:f6:
b3:90:04:de:d1:a1:a8:51:21:95:21:90:20:a5:c6:eb:8c:09:
27:d1:83:91:f5:7d:92:5e:c9:a1:80:b0:ec:90:c1:71:a2:76:
b8:f5:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:25:10 2026 by rpki-client