Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
File: ahRjzDw0FHZhFRif2a-ORMXblBI.mft (raw, json)
Hash identifier: zP795gsgHgJJvWAJsxgj3OfczCOE9vDu1HKjbNAbRIM=
Subject key identifier: 96:45:1C:AD:EC:1B:EF:17:64:DC:3D:5D:8B:78:A2:6E:40:4F:DF:A5
Authority key identifier: 6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12
Certificate issuer: /CN=6a1463cc3c3414766115189fd9af8e44c5db9412
Certificate serial: 01A1867633320B6C5D94FCD9539B285D70EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
Manifest number: 01B7
Signing time: Thu 29 Oct 2026 07:00:55 +0000
Manifest this update: Thu 29 Oct 2026 07:00:55 +0000
Manifest next update: Fri 30 Oct 2026 07:00:55 +0000
Files and hashes: 1: 7A5Mo_HCT5tIYge5BK9JUhMg5Hw.roa (hash: Ep+Z/ryezb/UZFnKTPmt1RNdUI3JuXr1O0msLtfQ0TA=)
2: ahRjzDw0FHZhFRif2a-ORMXblBI.crl (hash: csSDRjuv0z978GfMnbGFoXth9wyXc0p8QEl8EMR6PKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:33:32:0b:6c:5d:94:fc:d9:53:9b:28:5d:70:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1463cc3c3414766115189fd9af8e44c5db9412
Validity
Not Before: Oct 29 07:00:55 2026 GMT
Not After : Oct 30 07:00:55 2026 GMT
Subject: CN=96451cadec1bef1764dc3d5d8b78a26e404fdfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:f6:0a:e4:7d:89:66:26:14:58:43:57:fc:
cd:53:8b:44:f4:f1:ce:ae:a1:62:eb:2a:49:ad:60:
58:60:65:fd:41:49:9e:b9:d1:87:6c:da:1b:23:88:
c9:2d:ab:92:ad:ca:4d:be:e5:71:84:24:db:45:6b:
6a:5f:5c:a9:56:29:4c:f2:2e:e3:1c:8d:b1:23:bb:
db:4a:a5:20:ef:37:76:bf:c2:56:92:ca:ce:38:5e:
0f:69:41:33:dc:9c:e0:35:8e:d8:dc:f2:a1:99:82:
23:cf:32:14:e6:67:7a:9e:e9:71:9d:fe:42:72:7e:
c5:9f:fc:7f:fa:4b:57:ec:84:fc:07:27:3e:c4:d3:
bc:08:02:ec:d2:45:c7:ad:60:3a:91:fb:90:74:5b:
49:54:ab:d2:ec:f3:1a:7c:6f:19:97:9a:33:2b:8c:
cc:6a:eb:07:87:f0:ff:93:d8:e7:c1:14:e5:c6:a5:
ca:5e:23:b9:3a:c4:2d:57:e7:27:d2:a8:53:5b:4c:
2d:13:3d:c9:18:7d:46:ff:99:8d:2c:5f:c7:3a:f4:
f3:48:ac:8b:40:3b:d3:4a:bf:5f:5a:bf:67:a9:7a:
c9:e0:33:0b:3c:51:2b:a1:b6:e4:6d:59:f4:3f:70:
ad:fe:3d:93:cb:0b:21:8c:d1:7b:6d:99:25:9f:96:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:45:1C:AD:EC:1B:EF:17:64:DC:3D:5D:8B:78:A2:6E:40:4F:DF:A5
X509v3 Authority Key Identifier:
keyid:6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fa:a0:87:3c:49:32:d7:42:5f:c3:67:cb:91:8c:53:d0:ad:
3e:2f:7c:3d:2c:5b:5c:85:6e:70:36:4b:2f:2e:63:4d:a8:41:
de:4d:e4:99:f7:16:90:4f:23:bb:8c:a1:cb:9f:ca:59:86:b9:
0b:75:df:cf:f8:0d:17:10:88:0a:0f:47:c7:93:a8:3f:ac:86:
6f:94:8e:76:ac:bb:96:29:71:a0:9c:45:e9:07:18:ec:9b:c9:
ca:b6:cc:7d:75:2c:5b:bd:5d:dd:43:36:40:86:2b:90:bc:a3:
8e:1e:f9:5b:71:f9:6c:b6:7c:72:eb:ad:35:fe:27:71:e2:30:
70:23:b9:27:48:38:aa:97:05:a8:ec:a0:03:63:6b:83:fd:62:
83:ce:54:f9:0b:3e:3a:0a:30:23:09:77:72:84:4f:9e:9f:65:
cd:a1:dc:04:d8:ab:0d:65:c6:24:4d:a3:6a:d1:52:91:69:c5:
08:6a:92:f6:0e:0e:00:21:1a:24:94:1f:f1:4f:ed:52:f6:73:
c0:fe:dd:3a:a1:e5:bb:e1:c0:2a:e5:78:fc:db:c5:5f:70:d9:
f0:ea:61:52:fc:1a:5f:35:1d:69:bb:29:ce:8a:24:71:f2:08:
4c:9c:12:3c:0b:f4:cb:cd:5e:24:d6:9c:d2:06:2e:c8:47:6e:
74:fe:c2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:48:09 2026 by rpki-client