Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: GQFdCq0PTmAXpIIH9OqKgfKRqgyK/jEFZhbllQB3G40=
Subject key identifier: 06:10:52:98:FF:2B:7A:83:94:68:3B:65:16:1A:0D:4A:FB:4E:83:88
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 01A1291F29D2D649FB73929827BF34A9956D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 1AAE
Signing time: Sun 11 Oct 2026 04:01:10 +0000
Manifest this update: Sun 11 Oct 2026 04:01:10 +0000
Manifest next update: Mon 12 Oct 2026 04:01:10 +0000
Files and hashes: 1: _Hegz1VVkQxT8dMR4TPbzXidnGo.roa (hash: wCUCX/ENynsQM4yWKSMGJBVSMGdPMxR8qubJ5kFNMNc=)
2: rBaBGD3me64LECmMKa6dKRV8Yy0.roa (hash: K+BptzFvZJeOeMKzMOMTcV3487VC0j+Wsdpi6o13OCY=)
3: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: JfeErV7yL1OBV2r+4duPBULd7DyBmTL8IjqfSzHk/Lk=)
4: vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa (hash: B0okjC7PiUjc05N96TAWbJ82kV+SDnSQSBLWFMRkR/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1f:29:d2:d6:49:fb:73:92:98:27:bf:34:a9:95:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Oct 11 04:01:10 2026 GMT
Not After : Oct 12 04:01:10 2026 GMT
Subject: CN=06105298ff2b7a8394683b65161a0d4afb4e8388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:36:1f:d0:33:7a:5b:c9:e3:8a:78:ea:4c:
da:d6:a2:25:34:e9:3e:b8:bc:e4:78:78:e4:a6:09:
37:22:3f:af:ba:92:39:f3:d9:5d:5d:da:62:e6:ef:
0d:03:75:04:3f:b4:5f:9a:34:91:c7:4d:89:51:7c:
97:32:2b:83:e4:a6:de:76:9d:a7:44:3e:b4:72:6a:
88:71:d4:ec:ed:91:e8:d5:1d:3f:33:d5:6d:5c:d9:
d3:b7:fa:84:85:f7:af:54:18:4f:51:f4:4d:0d:af:
8a:39:a0:18:9b:59:a4:ae:8a:74:a3:17:7b:52:ec:
95:16:73:66:e1:09:d8:6f:10:09:98:a3:80:ec:22:
72:dd:fd:5a:95:f0:f6:55:02:f0:d0:84:04:ca:c8:
e8:bd:d7:bf:97:86:63:53:0a:12:50:b0:85:1e:b3:
0f:b9:27:a5:fd:fe:5a:84:08:38:64:ec:91:c6:77:
3f:36:c0:ca:54:40:33:78:d2:08:d3:f3:e1:a1:11:
06:e9:79:5b:b4:22:0f:79:f1:cd:07:75:07:14:98:
ef:67:7c:e7:c1:c1:8d:a8:18:3d:03:d8:51:c2:7c:
cb:bb:e2:06:af:71:ea:01:0d:66:70:32:b4:1e:4a:
ec:17:19:75:ce:91:d4:94:81:3c:53:cc:40:a8:4b:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:10:52:98:FF:2B:7A:83:94:68:3B:65:16:1A:0D:4A:FB:4E:83:88
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6f:0a:6c:f6:ee:45:10:2b:0f:4f:03:cc:cc:76:04:c4:10:
d9:04:76:0f:72:83:63:d6:25:8b:00:1c:25:c8:c1:c4:fa:35:
64:18:5a:11:b2:35:b7:a7:76:4b:27:cf:d7:34:d5:4f:e0:8c:
68:c0:ab:77:88:f9:af:8a:9c:e3:1c:0e:3e:f3:b8:45:51:9b:
fc:31:87:45:04:d5:95:84:51:11:94:0c:75:d1:34:42:3a:8b:
39:fb:19:b6:53:1e:85:5a:01:1f:b4:ca:05:38:e0:ea:81:73:
3f:f5:a6:28:4a:6f:cc:0d:75:3b:06:1c:71:a4:0e:1f:f8:22:
b1:74:59:47:43:3f:ec:e1:d9:11:2a:b6:8b:c1:4d:4c:ea:f0:
ee:8e:ff:fb:9e:fa:40:99:dd:c5:27:36:77:ea:39:c2:00:22:
93:d6:e1:4d:f8:c9:35:43:11:f7:00:6d:f2:c4:3d:1a:ef:6a:
db:49:e2:5c:3f:3c:c8:d3:6e:40:bf:27:00:46:97:1c:3e:c5:
a7:17:ae:f2:1c:cb:a6:f8:f5:12:bc:3c:2f:b2:f2:dc:29:28:
33:94:26:f5:af:17:82:cc:c5:df:7c:0c:1a:aa:df:18:57:c9:
9d:56:53:9a:a0:fc:0f:e1:91:44:cf:0a:08:3f:7d:f1:ce:c7:
8f:cb:9d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:05:49 2026 by rpki-client