Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier: iHKAAx2+HfwRQKcKA8TU0z10ZKueGpUseTKnDevv2m0=
Subject key identifier: 4B:CE:B8:4E:3E:04:C7:8F:C6:64:40:9F:CC:EE:49:C5:88:9E:14:68
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial: 01A19D6BDE624F8758E1479F0C8A9A8364E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number: 0A14
Signing time: Mon 02 Nov 2026 18:00:54 +0000
Manifest this update: Mon 02 Nov 2026 18:00:54 +0000
Manifest next update: Tue 03 Nov 2026 18:00:54 +0000
Files and hashes: 1: 6jji6GeuDi-28zZLjTZ0rqsVQ5g.roa (hash: jhgAVRcRyQTR4kfw/aMMXP8njp+EzzXJbfCtIYZkQOE=)
2: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: y5fNIWLtoxSrcQg/MZxR4ZJ78nHyE5o5UbWPhNypERQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:6b:de:62:4f:87:58:e1:47:9f:0c:8a:9a:83:64:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
Validity
Not Before: Nov 2 18:00:54 2026 GMT
Not After : Nov 3 18:00:54 2026 GMT
Subject: CN=4bceb84e3e04c78fc664409fccee49c5889e1468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fd:88:38:1e:07:b1:7b:81:98:d3:f6:39:8a:
aa:5e:3c:e7:94:7f:58:1f:7f:d6:c0:f4:05:f6:6a:
1b:2d:6a:de:10:16:0d:1f:ef:e6:2c:10:6b:c3:6b:
63:62:27:6c:b6:cc:34:ea:be:cf:7e:91:c4:3b:1b:
99:2a:10:b9:17:55:78:38:d0:d2:05:48:4a:a3:36:
20:fa:60:7a:09:43:24:5f:b9:fd:8f:61:b0:df:16:
1d:db:a1:a8:04:c4:f0:fa:c1:47:05:03:c2:4a:1b:
d4:0b:4e:40:67:dd:0f:d9:cd:d1:39:c9:d1:20:7b:
e5:40:f5:fd:25:ff:71:1d:d4:90:f5:e4:31:72:90:
9d:a4:35:dc:22:95:1e:49:1a:b5:a1:ce:55:db:69:
b2:3f:24:2c:3e:6d:af:21:d3:50:ff:9c:83:be:5c:
26:83:34:b7:7a:b2:df:ea:64:df:3d:d6:bd:9a:c4:
d4:48:05:a9:c8:a5:99:39:ae:cd:3e:8a:94:f0:08:
70:0d:4b:a2:24:9a:bf:e1:4a:43:b8:e0:86:8a:c8:
e4:82:82:70:1b:6e:21:e5:d5:82:2b:2c:8e:15:f5:
51:e0:0b:99:63:99:3d:18:d2:b2:4a:0d:b6:5a:54:
29:ad:91:66:84:c3:1a:ea:64:b4:13:c3:64:8e:98:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CE:B8:4E:3E:04:C7:8F:C6:64:40:9F:CC:EE:49:C5:88:9E:14:68
X509v3 Authority Key Identifier:
keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:23:25:8c:b2:9a:6a:c3:b6:0b:55:b5:31:34:bf:12:f8:05:
e3:ef:62:d6:47:62:99:aa:1f:b8:92:67:ce:29:ad:78:c3:c3:
77:7f:36:b1:e7:41:5d:06:39:b9:8c:ab:2a:b4:49:de:a1:9d:
39:33:77:6d:4d:60:fe:5c:cc:6d:82:6d:be:c5:ae:fa:ff:77:
84:e3:fa:57:87:a3:65:45:54:d6:44:e5:76:55:86:0c:dc:b8:
08:19:4c:16:d3:2a:44:19:65:42:87:0c:41:4f:2f:90:74:5d:
f7:6e:eb:80:23:2e:a2:43:28:11:2b:48:57:e7:32:2d:ab:01:
63:53:c6:5d:df:86:bd:f6:bc:ba:f6:b3:0b:82:e3:1c:8d:db:
53:5a:f4:a9:52:74:41:36:28:02:c5:72:02:ab:61:58:50:87:
ce:2e:8b:e3:b1:66:c6:74:9c:bc:a7:00:b1:78:e2:db:dc:45:
ea:66:fc:4e:8d:4e:de:3d:1a:9c:85:91:50:af:31:76:bc:fb:
50:67:c4:d4:01:48:51:02:67:b3:09:6a:d5:64:75:94:1c:49:
2e:3a:cf:ac:2a:8f:f4:f1:ae:d7:c4:f8:a1:8d:f8:4a:9c:ce:
31:9a:ef:8f:22:26:c3:24:cf:d5:e9:ac:16:2e:f8:ff:13:e0:
05:08:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:47:21 2026 by rpki-client