Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: LYGljkjbJtadxJ0dLAENIs6gtsJK9cH9KLe01Oyu0Ho=
Subject key identifier: B2:76:10:1C:4F:D0:62:61:2A:CE:AD:D0:86:1E:1B:BB:50:38:92:34
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 01A1648F7AC1AF2112841FB5241E400E696F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 1AB8
Signing time: Thu 22 Oct 2026 17:01:26 +0000
Manifest this update: Thu 22 Oct 2026 17:01:26 +0000
Manifest next update: Fri 23 Oct 2026 17:01:26 +0000
Files and hashes: 1: OsxR7yFdFRenycaE_q8hld1AbUQ.roa (hash: Fufnasj3vyQ/2zEL9UqegZtuU29Utyi2U8r5NLTadZk=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: 6ecrCAN9Ia8/29s7vgA/g0enRahfbXiSxVxorjikZQ0=)
3: q1MdFgrztAHRD55dweODJfa4RK4.roa (hash: aZ5l1yMm02BT+qNFooS+z/TzrtnqLkZdfbJDBupopYk=)
4: v09tww-7oHxZ6sHFn1E1sm8TLy8.roa (hash: b5FXRSJZMeoKM16WUIwE96LX1QoLUNfwWW43UIqRREE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:8f:7a:c1:af:21:12:84:1f:b5:24:1e:40:0e:69:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Oct 22 17:01:26 2026 GMT
Not After : Oct 23 17:01:26 2026 GMT
Subject: CN=b276101c4fd062612aceadd0861e1bbb50389234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:61:87:e7:ea:8f:37:e6:8a:2a:fe:b1:dd:
8a:dd:ec:f5:2a:11:5d:57:10:32:93:cb:81:f2:30:
ca:dd:e4:e9:7b:89:94:9d:5d:5d:44:cb:c3:b5:8d:
31:70:dc:8c:ee:db:68:90:f1:4d:37:35:31:2d:cf:
ea:17:6a:10:97:bf:d2:6d:a0:81:07:71:68:79:b5:
27:1c:17:e1:72:5f:52:90:ff:87:ed:9a:18:1c:7d:
d9:53:45:ba:bf:38:9d:a2:35:e2:06:f3:91:9b:b8:
30:d4:a4:1b:7c:07:ff:13:26:04:1e:5f:d1:a5:98:
cc:7e:86:dd:d2:90:2e:37:63:7c:5b:6b:4c:8d:e6:
61:c5:17:5a:4b:6e:05:79:3b:5a:97:9d:18:5e:d5:
ab:13:d3:57:8b:a0:24:e5:d2:b3:c9:2d:37:7c:1c:
f3:c6:d6:e9:94:bc:13:c4:ea:13:06:74:94:07:8c:
a6:29:1b:a6:95:c3:61:f5:27:1d:f4:b7:72:57:c4:
cf:a0:19:1d:65:02:ba:e9:6e:66:4b:99:67:dc:20:
d1:51:9b:87:81:cf:68:d2:f6:16:b8:fb:20:70:89:
2f:9e:2d:f3:e8:06:61:11:94:8b:2e:2e:07:13:5c:
5b:b9:2f:f3:21:ae:70:7c:c4:8e:5d:d2:e2:12:58:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:10:1C:4F:D0:62:61:2A:CE:AD:D0:86:1E:1B:BB:50:38:92:34
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:85:90:a3:6f:98:37:31:06:f6:b9:ae:fa:eb:27:68:fe:01:
ea:87:33:ff:a6:28:87:db:cd:f0:6f:61:f8:1d:c8:15:66:d8:
68:01:cf:63:b7:07:c4:ea:fe:6b:53:04:09:7f:e5:8c:32:3b:
8b:f7:27:3e:aa:f3:5b:76:00:ea:f2:c3:0c:de:f3:32:69:86:
a3:6b:ee:bc:b9:4d:9e:3c:18:91:51:e8:1c:c9:30:e5:61:94:
f5:6b:22:f1:53:50:59:c1:24:c7:2b:a5:8c:23:be:71:30:7b:
c7:42:d6:43:ae:be:af:53:dd:6b:60:9d:ad:53:37:a8:c0:7d:
37:b4:6d:96:26:a9:25:8a:37:63:9e:28:b7:ac:f2:bf:0e:9c:
f0:09:7d:57:58:0c:b9:5c:37:95:54:dc:45:84:1b:53:1d:3c:
9d:b6:09:43:02:3f:61:01:f4:93:c9:b2:08:ed:c5:44:7d:59:
11:34:85:d8:7f:5f:41:2e:6e:df:28:7f:4c:9b:a9:fa:97:d5:
53:bc:86:56:a3:67:c9:f1:14:1e:fe:f6:4e:37:b4:7a:8c:d7:
29:8a:60:9b:48:2b:c5:9a:28:91:c3:f5:da:85:7b:80:07:ce:
d5:7f:90:90:15:60:ff:55:44:5d:62:fa:49:55:af:00:db:57:
89:7a:84:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:33:33 2026 by rpki-client