Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: 92oamouEjWqI4U0UBeOHC92+m6lvlekwYPrXS6zw0F0=
Subject key identifier: D6:6B:05:54:DB:8F:71:E0:64:00:5C:04:5B:B7:4F:0D:90:85:4A:4D
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 01A0C7B3BFE1F8B47A1D8D6F90334ED2A55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 06:00:41 +0000
Manifest this update: Tue 22 Sep 2026 06:00:41 +0000
Manifest next update: Wed 23 Sep 2026 06:00:41 +0000
Files and hashes: 1: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: Bh/brVmzgXJQAe0diK6wrXV758b+tKuVeT6UkD4pen4=)
2: 4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa (hash: TQ+KC3G8+QaJHhu/9P7uxzpoVECiZV+fna31NmwlOi8=)
3: bPoEfZam0GZUvE1xltgIVPM2UVA.roa (hash: oJcgAX3KB1YWr1arABvCqWuGMGK5eGcGXJDWs9BTX6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:bf:e1:f8:b4:7a:1d:8d:6f:90:33:4e:d2:a5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Sep 22 06:00:41 2026 GMT
Not After : Sep 23 06:00:41 2026 GMT
Subject: CN=d66b0554db8f71e064005c045bb74f0d90854a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:27:b3:9b:59:49:fd:7b:81:a1:cd:6e:55:
ca:28:3c:50:a3:95:6b:46:2c:38:dd:7b:39:7a:1a:
f7:7c:73:b6:60:ad:80:08:8b:44:e2:6d:a3:42:ea:
7c:b4:cc:8b:1a:03:fd:c0:01:6a:93:0b:1e:0d:4f:
49:e1:88:14:a5:fa:96:17:09:c7:c2:a2:b5:d4:aa:
b1:89:6b:95:fa:68:54:6d:ae:7b:4d:08:02:5b:df:
7f:fd:56:83:73:73:45:cf:23:51:8b:11:39:33:4e:
f7:67:7d:7f:4b:11:91:9a:d2:a2:a9:4c:4c:75:3a:
d2:59:26:48:6e:28:48:67:0b:73:99:e7:4a:cd:88:
d0:82:c3:c4:5a:72:b8:20:7b:fe:56:5f:54:fb:dd:
f3:49:09:eb:35:c3:79:b8:1b:d6:36:9c:56:0d:88:
51:06:49:4f:8e:ba:c5:44:24:23:5a:e3:ed:39:fd:
4f:aa:7c:ab:73:89:46:c9:f8:0f:4b:09:e4:06:1b:
7d:f0:41:2b:a4:5f:0a:b4:d0:32:e8:49:d8:b9:60:
f6:e8:28:71:ef:0a:74:b3:58:0c:28:7e:01:5c:51:
d3:5c:d1:ae:b1:47:a7:81:d6:4a:ef:eb:65:11:5a:
2f:32:68:ab:1c:0a:3d:4a:0b:d6:14:cd:60:de:3a:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6B:05:54:DB:8F:71:E0:64:00:5C:04:5B:B7:4F:0D:90:85:4A:4D
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:73:d2:b9:06:9f:c5:85:23:3c:f0:9c:80:b1:fd:c2:dd:c0:
58:a7:34:cc:a6:a6:40:7a:ff:c6:51:04:75:91:e8:88:08:0a:
5e:96:bd:8a:3e:46:25:2e:35:11:bd:d5:01:89:1d:10:33:1f:
0b:7a:b8:75:b8:79:8d:38:af:83:e0:2c:17:fe:9b:ea:2f:a7:
84:c5:66:e9:3e:79:c2:99:5d:85:fa:27:94:b7:97:06:5e:69:
64:ca:fc:75:ae:5a:3e:91:45:9f:cd:e3:20:d4:c3:df:b7:e6:
39:7b:3a:be:f4:e1:cd:c0:8f:7c:17:c6:7b:c5:a1:ea:e8:68:
6c:42:8e:2b:b3:d3:f7:62:40:ef:ad:11:b7:5d:8f:63:2e:74:
1c:57:55:e7:f5:9e:1c:88:71:f1:81:a0:5e:b6:18:5c:9f:23:
6d:b4:32:5b:b9:1a:b1:ed:e4:06:29:20:a1:55:45:77:be:ba:
42:f0:0a:8a:93:42:d9:4f:21:f0:1e:97:b4:b1:7b:c6:49:a3:
d9:43:e5:1b:b3:cd:51:3b:b1:b7:54:35:1b:cf:09:02:48:26:
c1:8c:d7:5c:47:c3:a3:ee:b5:e3:92:4e:9f:62:9f:12:f2:b6:
e6:96:54:2f:3f:90:ff:67:fe:62:d1:02:62:2a:0d:fb:82:8b:
c9:48:b3:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHs7/h+LR6HY1vkDNO0qVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODgwZWQxMDIxZDBlY2FjNzEyMDU2NzNiMDA0ODEzYjM5
ZGZjOTkwHhcNMjYwOTIyMDYwMDQxWhcNMjYwOTIzMDYwMDQxWjAzMTEwLwYDVQQD
EyhkNjZiMDU1NGRiOGY3MWUwNjQwMDVjMDQ1YmI3NGYwZDkwODU0YTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS0ns5tZSf17gaHNblXKKDxQo5Vr
Riw43Xs5ehr3fHO2YK2ACItE4m2jQup8tMyLGgP9wAFqkwseDU9J4YgUpfqWFwnH
wqK11KqxiWuV+mhUba57TQgCW99//VaDc3NFzyNRixE5M073Z31/SxGRmtKiqUxM
dTrSWSZIbihIZwtzmedKzYjQgsPEWnK4IHv+Vl9U+93zSQnrNcN5uBvWNpxWDYhR
BklPjrrFRCQjWuPtOf1Pqnyrc4lGyfgPSwnkBht98EErpF8KtNAy6EnYuWD26Chx
7wp0s1gMKH4BXFHTXNGusUengdZK7+tlEVovMmirHAo9SgvWFM1g3joFbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZrBVTbj3HgZABcBFu3Tw2QhUpNMB8GA1UdIwQY
MBaAFNeIDtECHQ7KxxIFZzsASBOznfyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUt
MDQ3NzdjMTk4ZWYxLzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUtMDQ3NzdjMTk4ZWYx
LzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnPSuQaf
xYUjPPCcgLH9wt3AWKc0zKamQHr/xlEEdZHoiAgKXpa9ij5GJS41Eb3VAYkdEDMf
C3q4dbh5jTivg+AsF/6b6i+nhMVm6T55wpldhfonlLeXBl5pZMr8da5aPpFFn83j
INTD37fmOXs6vvThzcCPfBfGe8Wh6uhobEKOK7PT92JA760Rt12PYy50HFdV5/We
HIhx8YGgXrYYXJ8jbbQyW7kase3kBikgoVVFd766QvAKipNC2U8h8B6XtLF7xkmj
2UPlG7PNUTuxt1Q1G88JAkgmwYzXXEfDo+6145JOn2KfEvK25pZULz+Q/2f+YtEC
YioN+4KLyUizEQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:55:11 2026 by rpki-client