Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
File: 0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json)
Hash identifier: 99+80SYG7tbSC7PM97V6UMaBAGMQNLFa/O5HlwUhOUY=
Subject key identifier: 18:BA:42:C7:30:90:93:F4:FD:04:11:32:DB:39:7C:6B:D1:14:75:1B
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial: 01A0C4B274AA9E41D3427F43F69C2239863F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 16:00:24 +0000
Manifest this update: Mon 21 Sep 2026 16:00:24 +0000
Manifest next update: Tue 22 Sep 2026 16:00:24 +0000
Files and hashes: 1: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: qTxtjvU/0QYClE0EUw4GzdyFU8eH5kfsUShi9HWpLuQ=)
2: Jkp9Zd26L_A1ZIR1VUq4tXYD330.roa (hash: T7Gs4XIXZkJFeMoCVwkPW3PWWFtLrEdzuDaxySqJtw8=)
3: Yd0ISItT25nHU31sDdFobBWtukM.roa (hash: BpfqZXiuQQu7xNd4WIEYwPFlxLRUFTvBsSR5u9ClQwA=)
4: _73P6T6R3O1x9vvtr2p4XPdIlxo.roa (hash: LQcRZBmXpQKqNcm08uPyPyuOJz2qTqd9JQZhTsJFO+g=)
5: eoJQmOi00RtisYT69k2lcfpvuTI.roa (hash: zyn9MIC0PYdNEQ/1NTEkC1cOqVRsDhiTSo2jAFn7xpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:74:aa:9e:41:d3:42:7f:43:f6:9c:22:39:86:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Validity
Not Before: Sep 21 16:00:24 2026 GMT
Not After : Sep 22 16:00:24 2026 GMT
Subject: CN=18ba42c7309093f4fd041132db397c6bd114751b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:06:b1:5d:9f:d3:b1:d0:e8:39:89:99:40:
fe:63:07:62:c1:40:e7:4d:d7:ff:21:af:91:7e:3f:
06:ed:3a:18:9c:a9:75:be:e5:63:c5:41:31:81:81:
77:04:fc:61:d7:e7:49:54:27:14:32:85:5d:78:76:
35:ae:d0:90:81:66:63:01:78:44:00:91:46:7d:0d:
6e:58:b4:70:68:f9:e0:8e:44:c8:a8:57:46:48:da:
42:c4:03:3b:19:fc:bc:b2:9b:7a:88:9b:9a:9f:85:
0a:34:bf:e0:80:8a:14:25:73:5c:62:da:e3:e2:64:
bd:df:cb:9c:15:4f:df:37:0e:c2:78:3f:82:15:f2:
8d:d0:31:46:62:ba:a0:9d:c1:42:3b:51:ec:da:51:
bb:22:f1:a5:64:1c:e1:bf:7f:86:65:a7:8c:db:7d:
a2:2b:0a:00:bd:1d:d8:f8:7d:18:3f:0d:6a:b5:04:
59:80:29:af:e9:4c:8e:26:62:24:fa:bc:ee:1c:26:
85:b0:3f:cf:2d:a0:77:c1:0c:db:6d:33:08:57:42:
d3:91:f6:a2:6c:d4:eb:3a:1e:61:ae:e4:f7:c8:95:
ba:b5:85:1c:ed:a3:5e:0e:34:f0:e8:72:bb:fc:36:
bc:79:50:4c:9d:fa:17:e4:aa:39:8d:d2:7d:f2:47:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BA:42:C7:30:90:93:F4:FD:04:11:32:DB:39:7C:6B:D1:14:75:1B
X509v3 Authority Key Identifier:
keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:11:db:d4:56:ce:ca:e9:93:d9:dd:fb:10:48:29:b0:8f:63:
80:1d:9e:48:3d:cb:b4:dd:53:c4:e5:82:83:4c:3f:87:28:7a:
e9:50:2c:50:e0:9d:d1:94:fd:5b:81:a4:b1:6f:88:73:de:45:
d1:ee:03:7b:ba:82:0d:b0:3a:c1:12:38:4b:be:09:05:3f:79:
d3:ba:aa:5d:2b:e1:7e:b4:8c:53:8b:e9:51:01:f1:5f:57:45:
c1:2b:f3:a3:11:b7:3f:08:4f:47:c0:84:03:7c:bb:99:98:37:
d9:91:25:5d:9e:f0:72:d9:5b:fc:6a:28:fd:ee:29:92:f3:9b:
d4:67:64:82:4d:ea:52:d7:42:4b:8d:6f:67:2c:3c:28:9a:01:
37:ca:65:a0:31:d5:85:74:6f:b5:f2:b9:bb:d8:6a:ce:7b:c2:
af:f9:96:20:50:7d:ad:80:9d:5b:14:7a:b8:69:a2:42:4e:ea:
bf:e2:9b:24:57:0c:ec:dc:9d:35:c4:9d:8e:8e:80:93:ec:d0:
f8:9a:27:73:f1:34:b4:e8:1f:25:36:5b:bd:30:30:70:05:d8:
8d:d9:c4:af:38:ff:c2:4b:7a:d2:d0:b2:10:0c:27:10:50:b5:
01:a1:ca:ad:46:a4:96:4c:68:9b:a1:b6:fd:39:d4:59:56:7d:
01:6d:ca:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:16:47 2026 by rpki-client