Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft
File: 0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft (raw, json)
Hash identifier: vT92VdxcSGBV6ZypRJSjyFoiSEkEgPfzLBCNQu8V/0Q=
Subject key identifier: 14:68:F8:48:AD:7E:E1:54:C3:08:B5:E4:0A:6B:9F:1F:C6:1A:A5:68
Authority key identifier: D2:D8:5F:55:9D:6A:FD:3F:7D:64:1D:59:A0:BF:9D:44:03:B6:80:09
Certificate issuer: /CN=d2d85f559d6afd3f7d641d59a0bf9d4403b68009
Certificate serial: 01A15B1EC26BE1206BFA60DB0F5DAEA7FCE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft
Manifest number: 62
Signing time: Tue 20 Oct 2026 21:01:44 +0000
Manifest this update: Tue 20 Oct 2026 21:01:44 +0000
Manifest next update: Wed 21 Oct 2026 21:01:44 +0000
Files and hashes: 1: 0thfVZ1q_T99ZB1ZoL-dRAO2gAk.crl (hash: H727yXr3RaBQ9rV7Xvm7rdEoKX6zsGtNV/0CdVBfRZE=)
2: MHgmAaHalMHKwpPJPQFgKqFWdjM.roa (hash: RClo5fDOGBqxAoQCa1Pl8X75q2Nvy7FYruNsUuh0Z+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:1e:c2:6b:e1:20:6b:fa:60:db:0f:5d:ae:a7:fc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d85f559d6afd3f7d641d59a0bf9d4403b68009
Validity
Not Before: Oct 20 21:01:44 2026 GMT
Not After : Oct 21 21:01:44 2026 GMT
Subject: CN=1468f848ad7ee154c308b5e40a6b9f1fc61aa568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:ad:eb:b1:20:be:62:f6:52:02:d3:63:c1:
cb:18:ac:a2:99:66:6b:1a:6a:ee:da:43:7b:d9:50:
d0:45:ac:a3:26:0b:88:3c:c1:8b:77:d7:78:54:41:
52:10:98:53:b0:dc:e4:85:16:c5:5e:95:92:bd:bd:
ab:2c:33:ce:c2:e3:ab:df:bf:f1:4c:a6:e7:b8:7b:
58:af:65:41:23:db:b7:25:87:73:aa:d6:ea:fc:0b:
3b:17:e2:b4:23:ad:9f:37:d9:35:08:61:ec:ef:ae:
ed:ef:6d:ad:58:9b:66:0a:5d:93:c4:84:9f:bb:d9:
00:0e:22:2d:c5:52:79:62:52:32:df:95:75:41:d5:
b6:86:cc:92:e6:50:4c:a1:c1:bf:cf:c9:0e:da:14:
ac:5d:8d:7f:a9:4f:6b:50:4d:29:f5:0a:3f:7b:37:
d2:2a:cf:67:3c:9a:a9:11:b2:f9:10:ce:76:16:3d:
72:d9:22:d5:ee:b9:bf:c6:d3:7d:76:29:2c:9b:36:
2f:53:7c:72:24:f9:6c:79:6d:b3:cc:87:7d:0c:e5:
26:0c:36:72:f0:22:d0:c1:2d:ca:72:07:cf:95:52:
7f:28:cd:ef:5e:6b:e7:88:85:7a:66:80:05:8c:3d:
2d:20:c3:4a:62:03:c9:bd:8c:19:5b:33:c0:03:f8:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:68:F8:48:AD:7E:E1:54:C3:08:B5:E4:0A:6B:9F:1F:C6:1A:A5:68
X509v3 Authority Key Identifier:
keyid:D2:D8:5F:55:9D:6A:FD:3F:7D:64:1D:59:A0:BF:9D:44:03:B6:80:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f7:83:fa:85:7c:c1:4d:af:1f:f3:d5:2c:23:75:ec:ea:97:57:
af:5c:3c:59:a3:50:a3:c3:9d:23:ea:4a:3c:c9:51:f2:19:7d:
ca:5a:ca:d7:7e:53:0c:99:aa:83:58:9f:17:a4:87:82:65:dc:
3d:38:9c:3b:9d:39:55:9b:3f:0f:d4:0d:48:50:a0:0f:9e:82:
53:a7:be:e4:f0:f6:5c:84:15:3a:d6:ab:0f:db:b9:e7:a7:28:
51:14:a4:23:e2:50:a6:99:11:7b:1a:29:04:14:7b:25:ed:87:
2f:0e:a2:f4:ae:16:58:b9:db:7c:1a:61:77:16:b4:14:5e:2d:
46:2f:a6:12:6f:78:2f:00:43:13:30:c7:97:03:fb:30:a6:3e:
53:98:af:f4:57:97:e8:13:a2:51:f2:96:71:5a:60:a2:fb:5d:
2b:43:11:15:38:bf:80:90:a3:be:dd:90:f3:77:ed:1e:61:6a:
aa:fd:ff:c9:5c:7e:2c:52:50:94:4b:15:7a:59:98:26:d3:20:
61:8b:bb:5a:2a:82:29:39:bf:5d:69:e8:3c:c5:ed:8a:b2:f9:
d0:cf:2a:b3:81:11:f8:cd:7b:74:ef:eb:88:e8:a0:da:35:78:
30:63:f2:28:30:8f:ed:5b:18:45:80:a4:45:12:43:68:dd:40:
fd:3f:97:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:55:44 2026 by rpki-client