Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: hJgw8OVfGBHn21zVMG9zsL3VQpOjrsJL23GcXoWSGAU=
Subject key identifier: 87:DB:39:D6:E2:07:2E:0D:9B:EC:4D:52:63:06:AF:45:FD:88:87:2B
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 01A13E25D7F61B9603A75FBC8CCB4D71F8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 06:00:29 +0000
Manifest this update: Thu 15 Oct 2026 06:00:29 +0000
Manifest next update: Fri 16 Oct 2026 06:00:29 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: jpwtfO91Ui/go5e+NtY4gbBUKte9n25oApwpqWZOiGw=)
2: i7JFrF70bzBo-gwwIdRO8VszDSY.roa (hash: tGNZRPLTTkwJbCKJRv1gdNJVG7D13l/23dduFfdxkF8=)
3: j-RqQ-Jv6xwxZVAttzs0WSOfmLc.roa (hash: 8oVyr5bD2ep8rJ+/mCDqgEEEeQzSBWCENnyJGHUEE6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:d7:f6:1b:96:03:a7:5f:bc:8c:cb:4d:71:f8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Oct 15 06:00:29 2026 GMT
Not After : Oct 16 06:00:29 2026 GMT
Subject: CN=87db39d6e2072e0d9bec4d526306af45fd88872b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:68:68:6c:c7:aa:4a:c7:31:2c:9f:2e:26:
07:19:33:f8:22:5e:6c:73:32:4e:93:86:8b:3a:2a:
20:38:c2:52:8e:0a:b9:9e:7a:22:4a:9e:90:c8:5c:
61:55:77:3e:f2:03:78:bb:6c:6b:33:bd:f7:b5:60:
1e:b4:f7:d2:ae:f9:a9:33:72:c9:36:2c:1e:70:8d:
60:89:b7:ca:0d:b3:eb:0a:91:7b:d3:c1:f0:c7:f7:
6c:96:d5:4c:69:39:29:55:93:70:6a:d2:f7:1a:35:
0e:1d:39:89:fc:da:7f:cf:46:5e:eb:46:fa:2c:22:
a6:83:91:9f:39:c0:4c:10:db:d4:32:c6:15:00:2c:
9f:b5:7c:e6:c8:c9:02:3c:9a:6a:89:2a:a8:74:9b:
5b:5b:27:95:95:5a:5b:b7:98:6e:56:ff:85:f3:5d:
4d:87:7f:4c:1b:f8:fb:00:04:e8:a4:0b:0a:55:e1:
3e:3f:fc:18:67:ad:38:a6:c2:9f:13:cf:93:c6:ec:
23:03:4d:10:6d:c1:f7:70:e1:bc:e4:71:c3:ea:44:
ce:3b:9c:8b:0d:2c:1c:60:39:57:f9:c0:4e:bc:ad:
5a:52:fc:54:af:ed:e5:e4:36:8c:b7:66:61:62:04:
a6:74:ff:ae:62:2c:25:62:c6:83:65:a7:78:d4:31:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DB:39:D6:E2:07:2E:0D:9B:EC:4D:52:63:06:AF:45:FD:88:87:2B
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c9:4a:93:83:e8:ca:cb:9f:03:c6:0d:63:51:79:85:cc:0a:
c3:96:34:85:b7:c0:fb:b6:f8:ce:e0:d8:47:ae:48:e8:42:a8:
31:be:c0:68:b2:34:3c:32:de:aa:fd:04:5d:bf:b1:7b:a1:72:
f5:45:db:e7:07:94:cb:d1:65:96:7d:78:64:95:db:c4:1e:0b:
77:f1:4f:45:f2:9b:8d:63:b8:75:a7:c8:a1:87:ba:bd:c8:ca:
84:7e:3d:93:64:ac:39:2a:2a:cb:97:ed:13:67:8a:b7:4b:48:
32:a2:1f:9e:b2:9d:be:d9:59:a2:28:1c:75:02:87:b4:7f:64:
79:53:d8:e2:01:4c:40:40:5c:2f:f7:ad:c7:93:6a:c3:ea:44:
ee:75:e4:37:b3:63:06:97:6c:ea:74:28:ba:4a:4c:2a:9e:d4:
5a:84:86:77:f2:11:c9:bc:bb:56:62:3b:df:c6:06:df:c0:d7:
05:e0:14:29:2d:a0:b3:64:11:c4:0d:c1:3c:e0:f8:7e:72:05:
52:a4:1f:b4:3d:1a:d0:7b:2b:cf:12:23:11:95:76:55:42:4f:
94:1d:7a:51:2a:63:19:81:a1:d8:50:c9:12:66:ca:88:f1:52:
96:26:9a:0f:20:d1:59:03:28:af:2d:ca:fe:ee:3c:b3:14:77:
18:e1:17:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:26 2026 by rpki-client