Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
File: R0d5yAIJX230sqrPXc3F0z3X3m0.mft (raw, json)
Hash identifier: ynCXQsqGZ7aUJSar6fZ9Hcg1I4btcy4Ot8NrvGKk+/k=
Subject key identifier: 76:70:A8:53:58:F7:C2:12:33:F2:B8:CD:EA:15:0C:15:CD:5D:8C:FC
Authority key identifier: 47:47:79:C8:02:09:5F:6D:F4:B2:AA:CF:5D:CD:C5:D3:3D:D7:DE:6D
Certificate issuer: /CN=474779c802095f6df4b2aacf5dcdc5d33dd7de6d
Certificate serial: 01A0C7B41B4E81E6B28F017F8E2953B0D3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
Manifest number: AB
Signing time: Tue 22 Sep 2026 06:01:04 +0000
Manifest this update: Tue 22 Sep 2026 06:01:04 +0000
Manifest next update: Wed 23 Sep 2026 06:01:04 +0000
Files and hashes: 1: 8f2pZ-X2y_ewfA8UsP_aiBqv6-Y.roa (hash: jKbJJlR/1E8zbPr4O7EmtXI2miGTVc5tDs0R04lVjsg=)
2: GVMQ2GhaEdTKaWEvEP46NaINJpE.roa (hash: DuVK+9fHLleTlcN4pfvABl9Ywn2SnErQI65gsGkiRnQ=)
3: R0d5yAIJX230sqrPXc3F0z3X3m0.crl (hash: 9WalAlgyMMI32Qj6w8iunTLByjfpJh8oRaT3mTRoni4=)
4: UOevWPpBrse5WT2caWjU9GZEo-g.roa (hash: 0LSPg8ENwaB9oJ0jBUlwQU/hrSIv4vEXTwXy9LETBpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b4:1b:4e:81:e6:b2:8f:01:7f:8e:29:53:b0:d3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474779c802095f6df4b2aacf5dcdc5d33dd7de6d
Validity
Not Before: Sep 22 06:01:04 2026 GMT
Not After : Sep 23 06:01:04 2026 GMT
Subject: CN=7670a85358f7c21233f2b8cdea150c15cd5d8cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:c2:d0:a8:44:20:fe:b6:1d:af:17:72:b3:
31:98:96:d7:67:db:8b:f5:57:85:17:4c:08:b7:29:
39:aa:f6:58:57:b2:e4:26:36:30:c0:a4:3c:5d:15:
d1:68:2b:5f:ab:62:3f:27:65:1c:e2:1a:d0:1d:48:
30:88:e9:a3:4a:7d:14:30:ff:52:ce:f3:da:e6:d9:
af:d4:42:45:97:28:60:a2:95:d7:cc:a2:97:7d:e1:
c6:6e:e0:7d:18:ef:6a:9b:3f:5d:67:5d:58:38:7f:
56:84:61:53:a6:b8:7e:7d:7b:af:94:72:24:de:d6:
2f:cf:4d:84:c3:c2:99:21:2b:26:e2:f9:26:d2:8b:
02:ab:4a:41:39:d7:29:84:6a:bb:44:19:29:c6:4c:
b1:4c:60:05:85:8f:5d:7d:cd:b6:68:03:af:5e:c2:
de:21:a1:b0:27:d6:d0:2d:01:78:9d:9d:0f:29:b7:
59:85:bf:df:d6:93:39:f5:d7:b4:ac:a3:7c:e6:e5:
f5:eb:7c:e8:52:4c:19:6f:12:63:e5:ed:f1:59:ba:
40:0a:c8:b5:25:10:24:93:4e:45:b3:42:80:fb:b6:
d2:6a:90:62:83:f3:69:4e:07:64:34:57:ad:ca:46:
94:20:67:5e:a5:54:a1:54:d1:55:2d:1a:c7:f7:21:
70:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:70:A8:53:58:F7:C2:12:33:F2:B8:CD:EA:15:0C:15:CD:5D:8C:FC
X509v3 Authority Key Identifier:
keyid:47:47:79:C8:02:09:5F:6D:F4:B2:AA:CF:5D:CD:C5:D3:3D:D7:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e3:ed:8a:a9:67:5e:f9:62:fd:1c:58:2c:7a:74:09:cf:20:
dd:65:89:95:e4:93:9b:fe:4f:a8:04:f5:09:85:b0:44:74:dd:
9d:5d:4e:73:2a:0a:93:68:fa:02:aa:3c:79:20:e9:28:4e:41:
a0:9c:d8:a2:76:f3:b3:27:3e:ae:67:1c:3e:6a:3f:e3:87:75:
1d:23:47:0b:d9:6d:69:9d:ac:55:7e:05:d3:f7:64:26:ce:dd:
d4:fb:a9:9a:af:95:c7:40:45:f2:58:ac:dd:a2:66:31:e6:30:
3c:d1:26:6c:d9:3a:82:be:34:da:fa:9f:9d:09:27:18:f7:94:
ff:1f:1d:11:03:9d:ba:33:8c:ff:8e:47:28:ce:0b:94:5d:71:
b2:31:94:c1:01:a4:e8:ae:19:f5:21:20:e9:70:08:e8:fe:aa:
07:5d:07:29:18:9c:3e:68:57:93:84:9d:ad:f2:3e:49:76:3c:
2e:82:94:7e:7d:16:20:59:bb:2d:1a:01:c9:9b:21:d0:46:a1:
a7:87:67:56:85:cc:a1:f5:0a:8a:de:15:93:d9:49:e7:89:05:
86:55:03:44:37:42:6f:52:cd:00:46:bf:15:e0:8d:49:3c:af:
82:0d:c5:03:a8:77:39:51:22:7f:83:ae:ee:16:51:0b:c2:20:
03:6a:ed:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:56:10 2026 by rpki-client