Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: zu9CXdovggQKNEmzdzsHvNmhOAqno0ATW8bTWzA05RQ=
Subject key identifier: 0E:B6:F7:D3:A5:3D:14:A5:0C:73:BE:29:CA:2A:57:D9:69:9D:C8:55
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 01A13E947782785A83D8D875FBFEB54B0474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 08:01:19 +0000
Manifest this update: Thu 15 Oct 2026 08:01:19 +0000
Manifest next update: Fri 16 Oct 2026 08:01:19 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: tbqEtfDPC9YHQKYCzauOQDCgWzTOxXLFk/h1yg/qWls=)
2: sGfgaW1LiewBhrOBJvsdriioaTU.roa (hash: op9iNN949E3VNzRYyQTY+5GgLdt3CTSRD0WZrCE+fbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:77:82:78:5a:83:d8:d8:75:fb:fe:b5:4b:04:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Oct 15 08:01:19 2026 GMT
Not After : Oct 16 08:01:19 2026 GMT
Subject: CN=0eb6f7d3a53d14a50c73be29ca2a57d9699dc855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:bc:32:c8:e9:2e:c3:be:a0:24:56:64:e8:
40:d7:70:c4:18:b2:15:d9:b0:94:6f:6a:49:7c:87:
79:62:fd:ce:90:ff:f8:a3:3e:4d:76:a0:f7:d6:10:
3f:7a:d2:bf:05:b9:5d:e0:25:e9:ee:ca:ca:e6:21:
78:47:5f:f8:d1:31:f1:05:15:82:1e:b1:61:b1:f1:
eb:e2:74:36:a1:23:4f:fd:3a:b0:f2:7e:25:f8:ff:
e7:0f:fd:34:54:97:c4:d5:ba:8d:94:f6:a3:46:11:
2a:2b:84:7e:0f:cd:b7:fe:70:1b:80:39:24:d3:64:
11:1c:47:89:ec:41:da:6f:b7:d9:7a:70:98:c4:95:
3a:af:25:ed:71:27:e0:e3:d6:31:64:60:39:8b:57:
b9:ee:e1:4d:f9:75:a0:94:7e:00:7d:af:d1:ee:75:
bb:c4:00:de:9b:19:9d:a3:45:1e:90:94:8a:59:3d:
29:15:cf:ae:93:80:b7:7d:e5:d8:3e:43:a7:ca:53:
28:3b:02:7d:62:2c:02:ea:46:8b:c5:10:a7:dd:c6:
23:01:db:aa:a3:be:3f:82:c7:da:61:04:0a:97:76:
5a:0b:39:f7:4b:6e:b1:82:76:4e:4a:e8:9c:04:d6:
72:3f:eb:3a:36:d5:cf:8d:c1:f3:10:2c:ba:c1:90:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B6:F7:D3:A5:3D:14:A5:0C:73:BE:29:CA:2A:57:D9:69:9D:C8:55
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8c:a0:b2:73:b0:d3:e3:7c:d8:cc:7a:45:c7:9e:71:6b:01:
76:4d:e1:dd:68:77:49:b2:22:ca:0e:57:84:47:78:9b:39:64:
d8:9d:03:06:61:26:10:6d:f5:c8:0b:c4:3b:c8:4e:e1:7d:a4:
87:d7:27:50:dd:a9:cd:da:42:4d:99:a3:fa:6d:f6:f6:b7:a4:
ea:f6:95:e8:69:0b:a7:f3:41:7e:22:99:9a:e0:61:49:ca:5a:
95:2f:ec:69:27:10:ac:f9:cc:f5:2e:82:52:1f:9b:e9:cc:9b:
18:df:25:12:91:a7:fe:56:f7:80:f6:47:be:69:5b:79:87:b3:
7f:51:6e:54:4b:cb:8e:c5:ae:91:98:90:79:f1:ba:e6:32:b9:
34:e8:f7:cf:d1:5c:5b:95:a8:9d:2a:46:62:4d:2e:f5:45:72:
41:54:bd:7b:9d:70:9e:94:4a:a0:7c:f3:2b:a7:4a:57:0b:b4:
bb:9c:fe:7e:7c:43:bd:4d:7f:fe:83:e6:42:34:65:85:1f:f6:
a1:dd:91:98:6d:09:71:74:e8:f3:e7:12:1c:5e:cc:c9:0b:f2:
2d:a5:cd:05:b0:04:a0:11:ed:7e:31:19:a1:81:ca:d6:6c:a5:
90:06:57:af:b6:9e:00:cf:90:b8:b2:d0:45:82:bc:0c:dc:63:
b8:5d:f1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:47 2026 by rpki-client