Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier: 0MyTmDSGczzZfs3y9S3RHcjMUu8PjW0SRfqiytSW9G4=
Subject key identifier: 8F:8C:0C:54:09:7E:7C:B9:95:D9:44:FE:A9:9C:A3:7A:ED:73:F1:D2
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial: 01A08F0DFB8D318D63015C1EA637903BA47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number: 0988
Signing time: Fri 11 Sep 2026 06:00:53 +0000
Manifest this update: Fri 11 Sep 2026 06:00:53 +0000
Manifest next update: Sat 12 Sep 2026 06:00:53 +0000
Files and hashes: 1: 6jji6GeuDi-28zZLjTZ0rqsVQ5g.roa (hash: jhgAVRcRyQTR4kfw/aMMXP8njp+EzzXJbfCtIYZkQOE=)
2: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: JK5cv7rycIEcEH7rFVErrMtGmTBFsHFiLvn1ECf3GWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:0d:fb:8d:31:8d:63:01:5c:1e:a6:37:90:3b:a4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
Validity
Not Before: Sep 11 06:00:53 2026 GMT
Not After : Sep 12 06:00:53 2026 GMT
Subject: CN=8f8c0c54097e7cb995d944fea99ca37aed73f1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:1c:bb:21:93:d3:fc:47:1b:1c:1b:70:8e:
2e:60:b3:6e:b2:d0:31:41:24:4d:28:46:82:e2:e4:
9f:b2:70:64:6d:f0:ca:91:6b:2e:29:41:82:7e:ce:
db:70:e7:1e:ee:aa:52:db:dd:52:c7:8b:4d:be:3a:
47:25:ed:fe:73:8a:a3:e7:33:49:0f:40:47:93:65:
32:c1:37:91:cd:15:58:6b:96:a9:21:d2:37:78:89:
2b:25:6b:17:f6:ba:f8:9a:12:39:d4:96:bf:cb:df:
27:a4:0f:df:ce:b7:1b:d5:50:6e:b4:30:e5:97:bd:
e5:1e:ae:31:39:ad:b8:da:48:f6:36:da:22:9d:b2:
c4:78:c0:f7:04:11:27:3d:56:df:22:36:10:94:d2:
af:77:11:6a:b0:3e:b0:66:76:a7:f0:73:e1:b4:e3:
e7:b5:fa:3b:bf:6c:2d:8f:f3:b1:5a:e6:8c:ca:a0:
f0:d7:2f:d4:b8:65:c9:55:fd:1a:f2:c1:80:ea:38:
80:3b:93:53:90:11:ca:1a:d1:54:be:49:eb:51:f3:
cb:59:68:76:62:09:6e:57:4f:9c:a8:d7:7e:15:a2:
07:1a:fb:7d:d3:fb:bb:8a:ec:f4:d3:66:6c:a0:29:
47:c2:8f:45:8e:16:25:ce:db:c5:25:9d:4e:ee:1f:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8C:0C:54:09:7E:7C:B9:95:D9:44:FE:A9:9C:A3:7A:ED:73:F1:D2
X509v3 Authority Key Identifier:
keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6a:bd:11:3f:06:68:28:24:6e:fc:b9:7e:95:e6:fb:00:ae:
8f:78:d0:f7:2d:f4:e9:a8:12:3a:77:e6:4e:ee:95:43:4b:5d:
3b:ae:1d:cd:6f:9f:7c:56:10:4e:34:58:43:d8:19:a1:98:7b:
42:85:e5:16:dc:df:8e:ca:7c:d6:ee:e1:be:a4:7b:1b:4b:f9:
fc:e3:a4:d1:a4:25:f8:7b:14:2a:f2:5d:5f:bb:7f:23:99:f2:
40:a9:07:01:17:26:66:b3:a8:8b:ef:6a:2e:2f:85:d5:56:7b:
06:d2:07:fd:36:fa:c5:d0:60:bd:45:d2:d9:fd:e8:58:39:1c:
50:7c:ca:36:5f:6c:15:11:0e:bd:fd:23:5e:37:4f:e5:d6:72:
7f:72:19:57:6b:14:55:64:39:7e:f4:90:6c:1a:54:04:e6:12:
af:3e:ce:8d:bb:5b:f9:ac:80:bc:1d:17:a8:dc:0e:3e:2d:af:
e1:77:ec:11:4b:df:f4:15:0f:fc:90:c6:bf:da:cd:38:5a:2e:
7b:37:64:1c:35:49:9e:54:04:71:9e:08:b8:74:da:fd:08:01:
02:13:e0:0c:b8:b1:14:1f:39:ce:e9:e8:07:1f:e7:f6:f2:c8:
84:41:d8:f5:fa:b7:a3:8f:f9:47:88:5f:95:a5:de:f6:01:15:
92:e5:5f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:09:38 2026 by rpki-client