Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: /ELsq/BL3NktNkrlSNkTbLYIZmzG9ixPWhZ8RCDpcGc=
Subject key identifier: F8:39:2D:7C:0F:77:B4:58:F3:57:8E:84:55:D2:DC:21:34:32:DF:31
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 01A1BAD1035F6C6919C4616B98C4CBF52E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 13AB
Signing time: Sun 08 Nov 2026 11:00:22 +0000
Manifest this update: Sun 08 Nov 2026 11:00:22 +0000
Manifest next update: Mon 09 Nov 2026 11:00:22 +0000
Files and hashes: 1: E1QbVJAayOHXybvvykh2_z_eoYk.roa (hash: Ne00sRp1K+wq4QIkqT2qcjKHyHlHGzP3FNyY8RockCE=)
2: JYQlbQJEy0sPqACuaQ0ZNKP0_kA.roa (hash: 9Mf/IBP/vEnvOsH8GvnEXV1QapAzMWJM6lph3xsak/E=)
3: Ov83ySv3sFV7M88SSWflw9--a-0.roa (hash: SVhdkcQVattKFVMXSZeL1xJo615LAy5BBiDbcYL9ck8=)
4: We9JlhRC7AnuKdXNeDiRVJR3cSQ.roa (hash: aCm3hVdiPu8wrcYehfXy6dGkmo0BNiZb3dnL5cg7bd0=)
5: dNqWn8LLbtUjse_iEIk0LyE_w9U.roa (hash: pyT41frLnr8b4Y4mOhVh340WexYxDekl72v7q/1e+g4=)
6: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: ApTIN6J/KPZ0WSc9dYxWKsRYH3mqMOLauHWgN1zUyHw=)
7: pzkAsevaRgjEYyiE9vP5vLFmiuQ.roa (hash: nO/grxvmKZkvhDphy8GQW/Icm/R4FkLHljLabsv3llQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ba:d1:03:5f:6c:69:19:c4:61:6b:98:c4:cb:f5:2e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Nov 8 11:00:22 2026 GMT
Not After : Nov 9 11:00:22 2026 GMT
Subject: CN=f8392d7c0f77b458f3578e8455d2dc213432df31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:c7:ab:16:6b:2e:b8:38:29:62:c5:88:a0:
69:0c:6e:cc:94:cf:5d:0b:a8:be:ec:bc:69:38:a5:
e6:9d:8c:93:6b:b7:46:85:98:ef:d2:4d:b3:c6:15:
af:aa:8c:f3:c2:5a:85:de:76:57:99:c7:e3:74:b4:
50:3a:b6:37:51:a5:bb:6a:ba:bf:1b:49:1c:ed:72:
00:8a:5e:77:ea:7d:ca:23:57:00:20:cf:01:9c:2a:
32:c7:fc:50:e0:2a:06:d6:c1:53:34:66:9b:3f:52:
86:bc:83:79:e3:a4:b6:10:33:78:37:5e:a6:da:a3:
f0:b2:8a:ef:d4:ce:c7:96:ee:b9:be:5b:d0:7a:ba:
ee:3c:4c:f1:99:32:39:65:27:f3:a5:76:c0:3a:b0:
a3:70:9c:0c:4e:70:20:92:6a:9f:28:91:d7:e5:78:
8c:0a:4b:50:f1:67:57:77:ca:27:c5:a5:3b:56:2b:
b5:0e:3e:0e:ba:bb:28:29:ab:77:fe:bc:7b:31:17:
62:52:7b:3b:59:78:1a:09:fa:d7:c9:41:06:dd:4f:
d9:4f:16:b9:67:d0:0e:e7:22:77:ec:71:41:be:73:
27:74:bd:e3:d1:a8:3b:65:c9:22:7c:12:88:fe:03:
e4:8a:12:4a:4f:6b:54:19:48:13:7a:db:7a:14:ba:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:39:2D:7C:0F:77:B4:58:F3:57:8E:84:55:D2:DC:21:34:32:DF:31
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:93:e3:a8:61:25:96:38:60:28:35:61:58:82:89:7b:59:3e:
8d:6a:14:f6:01:d8:a9:e1:24:97:db:e5:1c:5b:9f:0d:51:b9:
64:24:5c:52:a8:33:1a:19:2d:ef:96:f7:7d:b5:b9:8b:1b:17:
4b:e7:32:20:5a:29:4e:c8:53:c9:3c:3e:be:6b:18:87:72:c1:
26:b2:08:e3:0c:a9:c2:a9:32:5f:47:44:65:92:cf:0e:4f:dc:
63:a5:f6:90:34:bd:5e:55:39:2b:f7:48:42:a5:14:db:10:3a:
54:21:06:9a:bf:a6:e8:33:6a:1d:61:71:8e:66:96:8f:bb:d3:
e9:0e:b8:b5:cf:30:0b:6e:c2:2f:7f:a4:af:ad:d6:76:b6:79:
f6:5c:37:5d:e0:df:0d:c8:4d:f5:f0:15:f2:5d:fa:c7:3e:1c:
f8:1d:a7:9a:d2:38:9d:23:5e:39:d6:d1:60:e6:2e:1f:ab:7a:
92:0e:6f:fb:dc:74:04:14:fd:ed:97:d3:2d:15:61:19:e7:79:
f8:26:17:ee:d0:8d:cc:99:cd:d0:71:c8:1e:4f:b6:ca:3b:86:
2e:0d:30:c1:94:c6:a9:7b:27:fb:5b:fe:63:57:5c:9a:6d:5e:
61:89:22:66:7d:9c:ef:f8:89:2a:c8:77:5d:c9:b2:a4:e9:82:
6c:2e:fb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 19:04:30 2026 by rpki-client