Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: thuBbwyu713CrF5T0F1ULxJYcCnL1jk/Fo8RBeSQpeM=
Subject key identifier: 09:F6:E3:F4:EE:85:5D:71:01:09:9F:0A:E9:64:76:4C:A7:D0:69:59
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 01A0CA7E269D7CCBB7811B456B9923723E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 19:01:00 +0000
Manifest this update: Tue 22 Sep 2026 19:01:00 +0000
Manifest next update: Wed 23 Sep 2026 19:01:00 +0000
Files and hashes: 1: SQCsFnrjeuZiVY1_BfYgIg4qi-k.roa (hash: 5RBF/vlBHGxON2JarwGOKKIBZfcvo+qjnXq8BAVhPwI=)
2: dPW253uLNkMC6hq3xNGknvYUUCk.roa (hash: lFOPNOmhkr/l52mg27uVNBuUyHirwJeRRAr2NLCO680=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: dhrlV+RSY7+c5V8toz+rVBQrNGXmjCSgLrBd5s7RVoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7e:26:9d:7c:cb:b7:81:1b:45:6b:99:23:72:3e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Sep 22 19:01:00 2026 GMT
Not After : Sep 23 19:01:00 2026 GMT
Subject: CN=09f6e3f4ee855d7101099f0ae964764ca7d06959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:f4:a1:8e:f6:52:59:38:f4:a8:45:fe:e8:
22:05:a2:e7:76:5a:ab:dc:c2:84:5c:f2:86:19:51:
87:72:73:46:9b:0a:03:5e:f1:3d:76:ff:35:34:50:
a6:9c:b0:a5:64:03:ed:a0:51:3b:44:df:70:17:73:
b5:c9:33:9d:7d:d3:82:76:f6:5b:7d:2c:df:37:46:
9e:f2:d1:12:05:9b:58:ab:d7:07:d9:09:f1:e7:9b:
43:c1:90:31:2c:2b:4f:8f:1a:8e:b3:24:14:ce:53:
d4:37:4a:db:44:ed:2b:57:20:f1:f8:9a:79:d1:0f:
38:8e:8f:1b:03:06:90:e9:f4:26:68:44:53:b1:a3:
ff:a6:80:c5:16:1c:81:47:a2:97:16:61:8b:31:77:
2c:c1:dd:42:78:aa:30:27:9a:e8:f4:e0:a3:be:38:
ac:48:de:7a:d4:40:1b:bc:23:26:07:ca:35:0e:bc:
0f:8d:40:6e:58:35:1e:dd:25:ee:29:bc:3c:3d:f1:
c5:90:0c:11:29:8e:a6:f1:dd:79:04:a3:14:8a:0d:
c8:b0:8b:e5:a8:04:c6:f8:6c:88:5b:f4:1d:1c:84:
c7:91:b5:d2:ec:c0:a6:d7:65:82:f8:e8:06:5f:4f:
13:4f:19:49:86:0a:0b:b7:4d:b2:0f:ee:cd:f6:06:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F6:E3:F4:EE:85:5D:71:01:09:9F:0A:E9:64:76:4C:A7:D0:69:59
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:21:ae:47:0d:ba:cf:7e:96:e2:f9:9c:94:73:ef:92:52:5c:
a4:15:62:fb:1a:b0:7f:1c:5a:75:b5:4d:5f:89:76:05:47:bc:
c4:52:5b:af:8a:5e:63:39:d8:94:1e:82:db:87:c5:28:1f:ff:
12:c9:c8:40:5e:60:bd:2a:17:1d:14:4a:e6:91:f5:d9:2c:15:
23:9f:ee:c5:0d:e0:70:5f:46:df:b0:42:3c:59:ba:67:74:0d:
d1:72:3c:82:f3:d6:d6:86:b7:99:ec:11:64:82:06:11:68:8f:
ec:7d:54:47:3a:3a:c3:a5:8e:99:e7:cb:17:f8:3a:33:c3:01:
00:1a:43:16:56:64:b7:72:51:9e:6c:3a:40:50:d8:2c:9e:3a:
b1:39:90:70:f3:1f:77:66:4f:b2:a1:2c:ea:42:7d:f1:03:27:
a9:47:f8:f7:c1:ed:d4:2b:55:9c:9b:d0:4b:8d:7d:42:4b:c9:
61:8d:eb:66:6a:58:ab:1b:07:cb:e2:65:f9:e1:03:b8:cb:d4:
66:d3:9e:e6:8e:1a:b2:d6:37:9f:04:c9:ba:da:c5:5f:56:b4:
26:df:a6:2c:26:98:78:40:0e:12:e9:0b:d2:b4:97:3b:1f:be:
63:2a:59:b1:25:08:99:9a:17:c3:6c:03:00:22:3b:78:90:c7:
cd:a2:82:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:58:18 2026 by rpki-client