Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier: rJwICPqf1POwJ8EVPsbHGrmCcEs/uNj9qnPC0GBy1zU=
Subject key identifier: 0E:AC:57:1C:5F:9B:99:F1:21:83:35:6D:F3:F3:1B:9C:2A:E6:01:19
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 01A0F2D61B8F3E457557AC32FE162CABB850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number: 1A87
Signing time: Wed 30 Sep 2026 15:01:53 +0000
Manifest this update: Wed 30 Sep 2026 15:01:53 +0000
Manifest next update: Thu 01 Oct 2026 15:01:53 +0000
Files and hashes: 1: YEoEVaZZgvqaYQs0c-KsGpSetUI.roa (hash: skVAsfQ5Llg9Q4qr15jtmY0awC3+4GF+G11QXTFhMHI=)
2: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: bCNIQCoQN8zf04AOFjFKnP33ba3hQjydilgH4FvGP+w=)
3: q0hXo__MCYbBoR7iChz8rniPI6M.roa (hash: iTsszB/0K2SiC8hyLh2CRCMWHvU50TZNj9sPsIVxWo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d6:1b:8f:3e:45:75:57:ac:32:fe:16:2c:ab:b8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Sep 30 15:01:53 2026 GMT
Not After : Oct 1 15:01:53 2026 GMT
Subject: CN=0eac571c5f9b99f12183356df3f31b9c2ae60119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:ee:3a:07:a0:6d:4c:d4:47:e1:ee:d2:33:
fa:ab:15:85:7c:2f:1b:4d:c8:aa:5a:9b:b3:81:3e:
c2:e5:8b:46:67:8c:2f:90:5c:7d:20:7f:1b:3f:91:
e5:39:95:84:1f:73:9b:cc:be:91:12:8e:6d:8b:e5:
cd:89:65:28:3a:e1:73:cf:c4:d2:37:f5:b3:c8:a4:
69:2d:50:32:8e:d2:0b:fb:48:64:e9:0d:84:1e:dd:
10:83:b6:e0:32:6b:59:0f:c5:4c:fe:25:b7:0d:56:
47:f4:c2:e3:aa:10:c1:2d:68:b0:4a:00:54:97:66:
c2:f5:43:9f:cb:10:5c:17:ad:a7:c0:c6:8d:d0:48:
d4:e1:29:e7:0c:dc:ba:a3:d3:6c:d3:4a:3c:06:73:
01:9b:d6:48:54:32:c2:dd:2b:e3:ff:24:10:a2:1c:
c3:c5:1b:18:b3:82:1f:a4:f5:8a:f3:20:f6:be:81:
77:01:5a:ad:70:44:8b:c1:ee:98:3f:46:ad:71:10:
d4:c5:bf:5c:f6:9d:5c:fc:86:f3:61:a8:83:86:59:
7c:a6:eb:16:43:39:42:12:87:b0:5f:1e:dc:f3:7f:
b1:bb:05:a9:82:1d:85:d2:c4:8c:32:cb:59:df:9d:
6a:d3:0a:fb:bc:bc:4c:1c:9a:a7:6b:8b:c3:45:05:
c8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AC:57:1C:5F:9B:99:F1:21:83:35:6D:F3:F3:1B:9C:2A:E6:01:19
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e8:fe:1b:24:bf:38:a6:c8:97:85:26:10:c5:07:cd:21:72:
5e:c9:fb:af:26:ff:5b:1d:b4:4e:1d:ad:49:c6:35:46:9f:c9:
3e:c6:f2:3c:a6:ac:e6:70:7f:2e:39:c8:9e:67:26:83:2f:53:
5e:fa:ec:89:00:fa:fe:e8:52:15:07:6a:9e:5f:0f:08:3a:d8:
4e:dd:61:62:43:fa:04:c0:a3:6f:ca:db:5f:62:82:8d:8a:49:
f2:05:f3:f3:0a:cc:b1:d2:63:9c:67:00:a4:30:05:1d:f7:8f:
41:68:b8:75:f9:4f:a7:66:a2:9a:b9:be:55:4e:a5:b2:70:45:
1d:e5:58:6b:5f:98:96:56:9f:23:08:3b:3d:1a:8e:16:4b:24:
ba:86:db:52:6b:03:5f:2c:c7:2b:02:1f:5f:11:a9:01:55:7e:
3c:1e:4c:6f:6e:6a:49:39:40:64:61:3b:a0:b8:2a:e3:db:36:
b3:2d:5b:42:ba:99:6e:99:19:1a:ef:76:e9:4a:8a:ab:89:4d:
01:78:25:d3:0a:ee:47:2c:7e:42:bf:21:7f:65:ba:e2:f6:36:
fb:56:74:ed:c4:d7:0c:2a:f8:7c:b6:c5:bf:ab:4f:4f:08:97:
6d:56:32:fc:51:84:ba:10:9c:5b:27:6d:6d:04:27:bf:79:9d:
f1:bc:87:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:13:32 2026 by rpki-client