Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: W5Ez44N24Oa8qpGBm2aaQDv6MUughIDnfMJJ4tero3E=
Subject key identifier: 24:08:EA:4A:99:2A:2B:7F:25:FC:DA:F5:17:84:DA:A4:9B:51:13:49
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 01A16C4844925907BC0F3B715EE4BEB5DF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 1ABC
Signing time: Sat 24 Oct 2026 05:00:37 +0000
Manifest this update: Sat 24 Oct 2026 05:00:37 +0000
Manifest next update: Sun 25 Oct 2026 05:00:37 +0000
Files and hashes: 1: OsxR7yFdFRenycaE_q8hld1AbUQ.roa (hash: Fufnasj3vyQ/2zEL9UqegZtuU29Utyi2U8r5NLTadZk=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: nGVmKd0ltW51GxsoUSN3cY1Dm9/XlC52qid/rtpKnRU=)
3: q1MdFgrztAHRD55dweODJfa4RK4.roa (hash: aZ5l1yMm02BT+qNFooS+z/TzrtnqLkZdfbJDBupopYk=)
4: v09tww-7oHxZ6sHFn1E1sm8TLy8.roa (hash: b5FXRSJZMeoKM16WUIwE96LX1QoLUNfwWW43UIqRREE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:48:44:92:59:07:bc:0f:3b:71:5e:e4:be:b5:df:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Oct 24 05:00:37 2026 GMT
Not After : Oct 25 05:00:37 2026 GMT
Subject: CN=2408ea4a992a2b7f25fcdaf51784daa49b511349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:cc:e0:0d:ba:3c:c0:7b:1f:ed:b2:2e:e3:
26:80:42:a1:e6:38:a7:a3:45:0a:43:6e:b8:a1:38:
4a:e7:ee:e4:e3:fb:e1:63:64:c5:0c:38:59:0a:52:
f1:d5:a4:b3:77:75:ad:8e:40:75:50:49:c6:e1:fa:
c7:9f:31:f4:4a:8d:3b:c5:27:a3:e6:59:47:d4:4f:
46:74:e0:48:ea:c9:db:1c:44:d4:79:28:d0:e4:88:
fa:bd:fc:6f:d6:3f:c0:cb:a1:db:07:e2:9d:ce:cd:
f3:20:9a:42:61:94:95:10:aa:b6:9f:02:a3:0c:eb:
7b:87:07:ac:7e:3a:7e:53:05:ba:e1:93:74:c3:a5:
40:11:fd:12:0a:9e:49:fc:90:83:83:98:4f:d9:2e:
b9:4c:6f:cc:ca:39:35:b7:c7:6f:97:50:e5:6e:5a:
ec:0c:61:14:74:40:ee:68:e4:c6:ce:f7:65:4f:db:
4e:c3:b5:e7:6a:a6:35:bc:d9:48:dd:5e:45:03:65:
24:f2:3d:7e:42:e4:5c:cb:58:b3:13:f9:1b:0f:2d:
d1:11:e5:ec:4d:85:b1:bd:9f:59:97:7c:e5:fa:61:
cd:c4:ab:f5:cd:fc:d0:2e:f4:82:2d:3f:d9:b2:84:
da:98:d1:b6:39:fa:bf:59:2f:e3:9a:46:9b:a7:c7:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:08:EA:4A:99:2A:2B:7F:25:FC:DA:F5:17:84:DA:A4:9B:51:13:49
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b9:37:6d:84:02:2a:7b:4b:0c:88:9d:3b:c3:b3:90:56:d6:
21:85:de:21:d6:f7:a6:e1:42:5a:52:6b:86:a6:b2:82:d7:4e:
dd:13:99:f7:78:45:d3:8f:db:08:d3:f7:bb:71:f3:f3:b3:83:
0e:2c:90:3c:87:7a:02:3b:83:05:75:fc:6c:fa:59:7c:f3:56:
bf:f8:0e:7a:6f:9b:6b:cd:35:37:1c:5b:98:63:a3:14:07:c5:
ca:fb:bb:d6:69:bc:f8:d9:4f:a8:74:33:f9:f6:41:6a:a7:4b:
05:ae:45:36:51:95:ba:72:e4:66:ea:e0:a9:26:b4:99:fc:25:
31:3d:d5:94:fa:7e:74:a9:b1:81:f9:3f:ec:0a:d6:d4:46:b2:
fe:a9:56:a6:43:45:dd:92:de:97:da:b1:f9:a3:bf:7a:5d:5b:
8d:ee:21:78:35:81:07:00:45:ae:58:c9:d1:87:20:56:4c:21:
bf:c0:1a:5f:da:9e:ce:81:c0:28:49:51:a9:7a:35:fa:e2:4d:
00:bb:da:be:44:80:0b:47:83:66:25:ce:28:5c:8c:80:58:68:
f7:3d:dd:b6:b9:29:5d:27:e0:05:25:8f:b4:68:31:9e:e3:f8:
cc:fa:5c:aa:17:b0:59:47:81:dc:66:d9:96:be:ce:e9:d0:31:
48:3f:53:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:35:57 2026 by rpki-client