Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File: sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier: iyI98iZfXnDnAI/IUEZEJJNRseFFDKcl0Vu/y+Iz95M=
Subject key identifier: 96:11:A8:40:50:04:E6:9C:37:30:AE:88:8D:B6:24:21:0A:6D:DE:2A
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial: 01A0C6D8025FDE98FCF362FF5060D3B8B9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 02:00:40 +0000
Manifest this update: Tue 22 Sep 2026 02:00:40 +0000
Manifest next update: Wed 23 Sep 2026 02:00:40 +0000
Files and hashes: 1: YVVSxC4wbNTE6amPOj_aUWu9KmQ.roa (hash: jx8KSb9gYYltGS0dfqO/0sgILL/tPjue23+E+n9mHYY=)
2: jvfuzQB2Ic8Lkn_v-fU0vD7KZUI.roa (hash: wTQiDytgLASjhAyRpE2k4salmmSbcvPsNpIE4v8G2dw=)
3: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: 1po8aJ5PSgX2Bq8a8snTiltkHblsEyF0IE8VE+TPWWk=)
4: uZerU1VFymarw95eI6TPiaIDHis.roa (hash: C1hv+0PjM/vZjHfsuivW+vQVr2csnV+QB+NjMqb8++s=)
5: xgkVb7jGmrVMuFNZV5uC54rwBLc.roa (hash: U7zPiRVnuj8K+WrtUv0kblwys87NbJBaEKGAwaoWJcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:02:5f:de:98:fc:f3:62:ff:50:60:d3:b8:b9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Validity
Not Before: Sep 22 02:00:40 2026 GMT
Not After : Sep 23 02:00:40 2026 GMT
Subject: CN=9611a8405004e69c3730ae888db624210a6dde2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:9d:09:ff:68:8c:e6:92:05:5a:1d:d5:52:
3d:d5:f1:d4:6e:73:08:2c:06:05:ec:3d:20:47:dd:
e8:52:74:0b:0d:b4:b5:94:10:d0:a3:7b:6a:a2:b2:
4b:b7:85:e2:2f:52:a7:94:e0:e9:5a:bc:5d:39:ab:
02:f7:0b:1c:84:06:57:e8:03:68:5c:8d:4e:60:43:
50:18:c9:90:d9:c6:d5:b7:05:23:40:86:3b:59:ba:
9d:3f:e7:7d:80:e5:bf:47:81:4b:16:33:2b:f8:b5:
d3:29:a8:48:9f:b9:6a:4b:7a:5a:b2:3f:87:32:6a:
da:72:42:99:76:18:31:ce:21:5e:2f:55:0b:d8:3a:
1e:3f:da:a6:fc:0d:2d:9e:fd:ae:be:6f:c4:e9:56:
30:65:d3:65:92:89:2b:bd:c2:57:96:78:b8:a1:2e:
54:6d:1c:97:cf:12:ff:ed:a1:cc:0e:d4:63:e7:50:
a7:42:41:39:c2:0c:32:c8:95:fa:19:35:a3:64:38:
8c:4b:c7:f0:9c:40:49:08:57:8d:bd:0e:8b:eb:a4:
c6:39:13:47:60:b1:ea:1d:39:ff:c7:17:0a:90:05:
72:6e:74:fa:eb:23:f8:54:50:53:8e:c7:8f:fb:cc:
ec:07:58:d8:ba:64:29:b5:77:6e:17:07:d4:e6:09:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:11:A8:40:50:04:E6:9C:37:30:AE:88:8D:B6:24:21:0A:6D:DE:2A
X509v3 Authority Key Identifier:
keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:dc:2a:bd:cc:96:ac:4d:9b:81:ae:8d:76:05:3f:72:db:b1:
be:35:1a:da:76:aa:3e:b7:b6:9a:9d:a2:12:7e:d9:3d:de:31:
95:85:55:1c:b3:ad:e5:b6:c3:0f:cd:8c:64:0f:4c:af:8e:29:
57:8f:37:93:4b:2e:4d:81:e2:d5:a2:9f:e0:44:be:30:b1:19:
03:2d:46:f7:20:a2:30:11:37:84:11:42:dc:b4:9d:51:c4:e8:
22:cc:0a:55:ee:e4:02:13:1e:c9:20:e4:e5:87:38:00:10:fe:
3f:08:ff:f6:21:df:bd:19:f6:04:82:31:23:7e:80:cf:24:6b:
4b:0d:3b:09:4a:a0:d8:cc:c6:0a:f5:7c:0a:82:c7:ae:fe:40:
e7:62:c9:57:e9:69:eb:e2:c0:59:5c:30:bc:22:67:ae:a5:0c:
30:d2:74:88:ee:1a:62:37:7b:42:1d:47:9e:e7:c0:58:d6:28:
a1:3a:05:83:d1:d0:ee:aa:cd:fe:75:c6:26:af:9b:e9:27:ce:
e9:0f:79:f4:e7:45:e1:67:16:f9:16:d1:96:82:25:a0:e2:78:
e1:8a:18:b4:89:f7:ba:40:fe:11:84:f9:7c:97:33:94:df:65:
12:d3:68:7f:87:95:d8:7a:97:5d:79:d0:a4:06:9f:49:7d:e1:
ea:68:94:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:39:13 2026 by rpki-client