Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: rYNB+J8Ec8ipk0hg65K6QmkAzdZKPgAI8i3YZ9O4aio=
Subject key identifier: 93:85:5D:5D:9B:FF:23:D2:2E:9C:F3:06:0E:FB:EA:F8:4F:60:17:DC
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 01A0CFDAD328D42AE04DDF1EB2AC6265B97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 20:00:19 +0000
Manifest this update: Wed 23 Sep 2026 20:00:19 +0000
Manifest next update: Thu 24 Sep 2026 20:00:19 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: pnyGM4gd2kF8EJkO5gWZ9jeoyF0.roa (hash: 6XnmhOJq3GAmn5wQEuoQfthOvhyAwUf459ZiJFQdrrM=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: Mw9c3jxKBbGL2tKMG2Xuwu3NoENjwkB0aJ+SLGDzuDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:d3:28:d4:2a:e0:4d:df:1e:b2:ac:62:65:b9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Sep 23 20:00:19 2026 GMT
Not After : Sep 24 20:00:19 2026 GMT
Subject: CN=93855d5d9bff23d22e9cf3060efbeaf84f6017dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:68:b7:51:97:ef:36:46:27:c5:b4:8e:1a:e7:
78:28:16:61:b6:03:39:c7:54:8d:c3:3a:b8:9a:79:
bd:cb:f5:12:70:ab:a0:1e:2c:e3:66:3f:93:b2:70:
fe:b2:ea:33:c3:d9:b0:a7:b1:79:89:76:77:8b:6f:
66:2c:08:e0:31:04:03:95:34:46:63:06:ac:9b:c6:
cd:ec:72:95:f3:06:6c:51:e7:37:06:e6:32:5e:86:
e1:1d:d2:a1:b0:2c:18:6b:12:42:83:be:e4:10:1c:
14:92:a6:f2:ec:ec:cd:c0:7e:c5:56:1d:a6:1b:46:
ea:69:c0:34:b8:74:d0:47:db:e4:a2:98:c8:b2:aa:
cb:8a:99:86:82:ae:4f:02:cc:d4:a3:5f:d2:30:fa:
21:12:64:0f:24:c3:29:4f:61:d8:14:58:9a:58:eb:
05:35:a3:ad:1a:83:13:26:95:9c:be:8e:38:85:00:
ad:f9:e3:a7:b5:48:bb:26:2c:33:9f:28:5e:79:85:
ad:8f:08:8d:6c:e1:56:f7:df:41:3a:fd:2b:b9:e6:
80:2b:a2:34:7f:70:22:18:99:0c:03:c4:3a:6a:20:
21:a4:ac:25:fc:5a:41:d9:bb:71:23:ee:42:d6:e4:
21:de:fe:e8:4f:05:01:eb:16:51:26:f7:b7:ea:16:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:85:5D:5D:9B:FF:23:D2:2E:9C:F3:06:0E:FB:EA:F8:4F:60:17:DC
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:26:3a:6c:34:b1:ed:7e:fe:ce:91:7a:ba:fb:e0:9a:38:0a:
2b:ff:4f:f9:ab:c6:b4:12:67:cf:4c:1f:f7:55:35:e2:4f:78:
04:fd:6a:74:26:a0:ae:36:a6:9a:95:bc:a1:b8:ef:86:ee:97:
08:76:db:8f:aa:bc:ae:81:b9:3e:73:54:f9:df:ea:cc:cc:89:
16:f2:73:1b:aa:46:47:98:d2:dd:20:bb:9e:e1:b8:4e:71:b5:
fb:37:a8:b3:c8:c2:85:70:64:c5:6b:9f:c8:53:ba:9e:8f:31:
c0:af:59:6c:81:f4:58:fe:1d:d8:b6:be:de:27:46:67:e1:d7:
08:b8:33:fd:80:61:b0:91:83:05:10:61:06:72:5d:16:fd:44:
6f:9d:00:56:74:96:b1:00:af:db:38:72:78:06:e4:b1:13:43:
88:e6:49:5a:b4:e8:30:bc:fb:37:5f:cc:b0:fc:5c:90:42:7c:
a6:ce:97:c0:54:7d:e5:30:98:de:40:f1:c8:3e:43:31:ac:c2:
74:8d:fd:a0:1e:81:05:a1:af:68:fc:10:13:37:94:cf:7f:21:
e7:1a:1b:d2:72:32:9e:c4:9c:e5:b6:2f:76:52:71:3f:9c:14:
a2:20:f3:90:41:59:57:4a:b6:e2:40:6a:c5:60:46:26:05:bd:
c0:9c:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:50:43 2026 by rpki-client