Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: ySLoZiUzTWh/UM6HRsScctFMFrIJ46LTmCrKWi500RI=
Subject key identifier: 2E:0F:48:EB:5B:7C:93:85:F0:B4:E0:82:9B:8F:AD:76:58:2F:31:98
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 01A0C40DA2D68A59FFD740B22B7DF23962BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 065B
Signing time: Mon 21 Sep 2026 13:00:23 +0000
Manifest this update: Mon 21 Sep 2026 13:00:23 +0000
Manifest next update: Tue 22 Sep 2026 13:00:23 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: rNpUT5xK2fuoE6sv3+8AbYrlUuA+0oKQyixSNkAHIlw=)
2: 94RSIfdi4Wu_3u_5Fxt7y2P-IZg.roa (hash: KQBiX0qPyskq77ewW4ksZcWfJF9WrYtw2Dq9ll73ZI4=)
3: nKSVCDWOLc_L-u8R349_O7dpE-0.roa (hash: 3mbBV8zfrwDYTj5UVPeGBqMVBLvBI0mE8QTCzzuoTPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:a2:d6:8a:59:ff:d7:40:b2:2b:7d:f2:39:62:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Sep 21 13:00:23 2026 GMT
Not After : Sep 22 13:00:23 2026 GMT
Subject: CN=2e0f48eb5b7c9385f0b4e0829b8fad76582f3198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:c6:1f:25:48:81:f6:49:7d:6e:a3:51:6d:
61:6d:0a:df:5d:e6:c4:6c:ff:aa:94:64:00:50:3d:
a1:43:9f:d8:3c:f2:20:47:fd:74:1c:ce:d2:7a:ec:
97:a6:71:12:cd:90:64:a3:22:28:0f:38:c5:0f:33:
de:bb:b4:f9:26:81:b3:cc:f2:41:25:63:62:92:a4:
b1:a2:05:79:ae:2b:0e:0a:7d:0f:bd:ac:03:d7:8f:
a2:fa:be:82:2d:b4:91:aa:05:9f:3b:c8:cf:d6:de:
34:0e:18:f0:8e:4a:e9:8e:fe:57:89:4f:e7:fb:35:
6e:18:c4:22:9c:76:e7:72:75:8e:88:7a:d5:5c:f5:
00:51:91:31:dd:5b:df:c7:ec:b9:c0:65:26:d1:a8:
62:f8:c1:ac:2e:f0:9d:ba:2b:6e:32:30:1e:3d:10:
f4:88:b1:0b:d7:66:59:de:67:ac:d8:b7:89:24:06:
57:ec:9f:ac:38:26:ba:94:7a:21:c8:c1:de:71:51:
12:3f:9b:c3:50:c6:20:e5:0d:74:42:07:d3:51:d2:
74:b0:02:4e:ca:9c:ff:16:df:29:5b:28:b4:a1:0a:
b9:43:17:1b:a3:42:3a:a1:78:6b:f4:90:71:cd:1e:
66:42:22:39:ad:40:01:ea:ad:dd:c7:94:8f:80:7a:
ce:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0F:48:EB:5B:7C:93:85:F0:B4:E0:82:9B:8F:AD:76:58:2F:31:98
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8e:61:95:d8:55:24:45:9b:f3:a9:58:35:f0:ba:e8:68:6d:
ac:f7:5d:9c:46:94:0d:2c:a9:77:e0:38:bf:0c:75:6b:ea:8d:
d1:b4:f7:c5:80:3d:17:eb:9b:96:f5:ce:ff:b2:8d:3d:bd:c5:
ac:83:5b:48:b6:33:c3:b5:88:c7:75:fa:10:72:4b:e3:42:ec:
fd:4f:e9:7e:b7:cd:6d:4a:70:bc:bb:1a:eb:fa:1c:56:90:be:
69:4f:15:08:97:af:a7:22:c5:aa:7c:36:b7:4a:91:0d:ce:e6:
0c:50:11:1c:af:73:ee:b5:96:92:8a:04:52:c2:ce:6f:b6:60:
c7:34:65:25:a8:f8:f3:0a:a8:cb:a8:8f:53:48:dc:47:eb:3e:
b7:b0:21:68:37:87:6b:01:a4:9e:b5:d8:aa:cb:9a:b3:52:0d:
62:cb:8d:c7:ae:28:c6:e5:e0:c9:f0:f3:13:fb:8c:63:24:a6:
17:f8:dd:b0:a9:f0:8f:61:dc:f0:b2:68:a5:12:2b:5b:8b:bf:
48:a8:76:dc:98:56:0e:a8:0b:9e:39:57:c7:5a:36:e1:3f:b8:
39:25:c5:2d:f5:59:da:b0:42:1a:fe:38:f1:d0:da:db:1e:36:
ba:e2:61:38:62:c3:dc:90:ef:a6:e5:57:d7:48:d3:93:65:eb:
18:12:62:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:47:32 2026 by rpki-client