
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier: 7Z7JBkg8eeui0Q+Lye3DzA7pWmcBuMMuKs1dz0jrdPw=
Subject key identifier: 4B:0C:53:CF:FE:C3:DF:5C:DA:CA:89:70:B9:E0:C3:6D:1E:C3:14:E6
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial: 01A18A89ADB6E7F7052DED3C3BDAAC2A27B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number: 1ACE
Signing time: Fri 30 Oct 2026 02:00:40 +0000
Manifest this update: Fri 30 Oct 2026 02:00:40 +0000
Manifest next update: Sat 31 Oct 2026 02:00:40 +0000
Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: QurJmmRjD18BkmGfk9duoS5kpvzmSq8Tr53lKw2c6uk=)
2: eIIxqZskipAH_XpPhKjF9X-64rY.asa (hash: VTutP00cFHBg9CdpBAccd7neZzunWQqoCOHiZUhg2dY=)
3: eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa (hash: jItvJdxi3E9SOd6i/gjBeEHoNNhvY/8u3V8hrLU5X7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:89:ad:b6:e7:f7:05:2d:ed:3c:3b:da:ac:2a:27:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Validity
Not Before: Oct 30 02:00:40 2026 GMT
Not After : Oct 31 02:00:40 2026 GMT
Subject: CN=4b0c53cffec3df5cdaca8970b9e0c36d1ec314e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0a:e9:c5:f6:1f:8d:75:12:c5:81:a7:82:90:
d8:ea:c1:b1:19:72:80:77:e9:2b:b9:6f:4e:ac:b6:
ec:56:8e:73:c2:d2:94:56:da:d2:9b:ea:6c:ee:13:
fe:87:bc:bc:da:40:ec:8b:f0:73:b9:65:7a:a4:73:
11:94:af:0d:bc:0e:1d:cd:12:e6:55:58:7b:b3:91:
08:46:89:da:2d:49:87:9a:74:e8:4c:aa:c0:3e:db:
c8:2b:9f:2f:ac:53:63:72:6d:e9:53:4f:fb:e6:18:
b5:fd:03:dd:d9:02:e4:7d:c6:ee:a7:c2:21:8b:cf:
57:8b:e1:c0:a4:1c:4c:60:29:2d:a4:c7:db:18:0f:
30:f6:56:84:86:da:71:ad:df:18:46:72:91:5e:3d:
c5:c9:51:12:60:c5:f0:11:e4:8f:cb:04:48:40:ec:
27:0c:82:29:56:54:86:de:8d:17:3a:12:d2:ce:78:
8b:73:15:d7:59:17:df:d6:8d:4c:86:01:4a:31:e7:
4f:f6:58:c7:d9:a9:d5:37:32:0f:80:a3:0f:b6:db:
4c:aa:e4:e4:c5:60:06:60:5c:36:e3:8c:34:c9:d1:
fd:cb:ad:bf:e1:ef:09:9c:a0:1c:fd:bf:f9:b0:0f:
01:93:06:02:37:05:4e:ab:5f:37:da:1c:d3:cf:25:
b0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0C:53:CF:FE:C3:DF:5C:DA:CA:89:70:B9:E0:C3:6D:1E:C3:14:E6
X509v3 Authority Key Identifier:
keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:91:1d:7f:4e:03:05:2b:63:b2:0c:0b:26:e7:4d:08:f0:51:
2b:cf:4a:23:92:12:ca:bd:c7:ae:0b:a4:90:15:61:73:64:5e:
15:fd:19:0b:37:e5:da:fe:c5:02:12:dc:9b:b9:c9:32:a0:bb:
a0:74:cc:7e:dd:e2:a9:b9:0d:78:5b:c5:fb:db:39:94:bc:97:
ab:b8:a8:96:0e:3c:ea:8f:d8:ef:f4:a9:3e:29:37:c7:5f:0c:
d4:d1:87:20:e7:44:e1:6d:e0:7f:7f:ca:09:d6:e3:bc:3f:f5:
fb:e4:53:ef:07:d2:e8:8d:30:c8:cf:77:2b:74:0b:8e:79:c6:
4b:74:49:eb:a1:a4:9a:3e:f9:87:db:b4:54:7b:a0:36:f5:ac:
36:97:20:5d:b5:26:4b:99:0f:93:e0:f1:3c:e4:fe:5e:05:9d:
33:70:24:2d:ab:2a:fe:70:6d:08:0e:b4:8a:4b:e6:b2:da:2f:
60:3f:4e:68:4b:43:f3:16:b4:31:75:60:7a:30:8e:e0:d5:47:
51:1e:16:58:45:5a:01:4c:0b:15:6f:5d:36:ae:fd:1f:08:cf:
8f:c0:a9:56:90:61:1e:60:51:b6:a6:f3:7b:da:34:fe:29:1f:
27:d3:fd:8c:2d:06:94:2c:6d:6c:1d:3f:28:83:96:68:3b:7b:
07:04:39:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:21:12 2026 by rpki-client