Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: ykiSt8wb//uwgi39DW/e+co57+TDPxsNEalGbA9ZHfA=
Subject key identifier: D9:D5:DE:B6:77:28:96:D9:D7:62:07:62:4D:A5:93:4D:1E:C8:AF:B1
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 01A138242E8A2A01C5DF9C109E1641547608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 0D6F
Signing time: Wed 14 Oct 2026 02:00:57 +0000
Manifest this update: Wed 14 Oct 2026 02:00:57 +0000
Manifest next update: Thu 15 Oct 2026 02:00:57 +0000
Files and hashes: 1: 9tGzK-FCrgGlyf8btSGObHH6Jkw.roa (hash: NlammvVp7/v8P1KUtxpc69bkMW7FgZFFOJxxoLecI3k=)
2: NJAtBEz3Ixv_CCYeRvRJJECYvnk.roa (hash: 8VY+OH2qENoVZQA8QBMe/XGjN1hAsUDKuWI2emaWxMU=)
3: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: jIenABDd2XnQlpArKvFgDo11CRH2q9GLXJTbGKfBl4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:24:2e:8a:2a:01:c5:df:9c:10:9e:16:41:54:76:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Oct 14 02:00:57 2026 GMT
Not After : Oct 15 02:00:57 2026 GMT
Subject: CN=d9d5deb6772896d9d76207624da5934d1ec8afb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:19:19:2f:d7:15:34:56:08:e7:ad:22:2c:
13:f3:d6:20:f0:f4:d2:f8:de:03:19:d0:f9:41:00:
c3:a4:58:50:1f:2b:0a:bb:6f:e8:11:1c:e6:0e:1a:
59:d2:81:7e:e7:f7:07:52:c6:2e:f1:ed:34:21:46:
9b:fd:a6:ca:95:ed:df:4e:4c:ec:04:d0:0d:e7:01:
d3:53:7a:63:6d:f8:99:7c:2f:6d:c2:4e:c7:0b:ce:
16:6a:03:2c:e6:f3:f6:dc:7d:3a:58:e4:9c:c2:89:
c6:97:e5:d7:db:21:0a:e8:05:f6:4c:ad:03:3d:fd:
a8:e7:91:9f:0b:d3:bb:e5:7b:2b:9f:df:a9:69:38:
51:a6:a1:ac:e5:ba:ad:a7:75:96:6d:00:0a:48:69:
5b:f0:48:60:92:ab:c9:d0:e5:5f:bc:18:ef:da:69:
b3:04:ad:2f:a6:86:9d:90:27:3a:78:0f:c7:cd:b1:
33:5c:0a:b3:60:95:a9:79:95:1f:d5:95:c5:6e:e8:
8c:a4:c7:21:6f:c8:88:12:cb:b4:af:cc:05:0e:36:
d8:2a:36:b2:4f:09:90:09:07:94:07:d3:26:52:f9:
06:ce:d3:01:e9:2e:23:dd:d1:f2:1c:ea:92:93:ff:
bc:2f:6b:d1:be:2d:34:d0:c8:45:06:b4:c1:ab:f7:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D5:DE:B6:77:28:96:D9:D7:62:07:62:4D:A5:93:4D:1E:C8:AF:B1
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:15:ad:21:9e:9a:46:54:2f:b3:31:1b:62:a2:7f:39:50:e3:
c0:cb:04:46:51:ff:64:8b:26:a2:a1:44:3b:99:16:04:89:33:
21:2f:e9:be:02:0a:9f:02:92:a3:56:94:37:68:65:9f:c8:9c:
11:91:6f:09:c9:80:7d:d9:41:51:be:3d:d6:f8:f9:54:51:1d:
b2:d3:84:98:93:28:26:5e:b2:fb:76:59:a4:83:4e:20:02:0d:
8e:0b:6c:bc:5b:48:eb:07:bd:7a:bb:bc:a3:c3:4a:87:9d:bc:
77:01:b0:13:b9:ef:fc:b8:c6:5c:7e:f7:2a:d3:70:58:8d:d1:
d8:8a:84:56:93:77:4d:6a:72:49:d3:10:3e:b3:8f:f9:dc:7d:
a7:eb:73:99:a6:c7:2d:e3:36:23:0c:d2:f7:c9:a9:e3:55:ef:
c3:bc:e1:8f:fa:ed:0d:3e:14:3b:87:b4:e2:f7:c6:e4:84:d6:
2a:40:fd:3f:b9:f2:c4:89:ec:c3:f6:c0:c2:c0:28:38:3a:ed:
70:88:ee:ac:2f:62:4e:b9:e2:3e:6c:24:28:e9:70:3b:df:3a:
12:75:bb:e4:99:a7:59:8b:73:d5:30:9e:c5:18:0b:f5:d2:aa:
f5:1b:4c:fd:85:06:7a:15:96:e0:d1:95:0d:cb:05:f7:f0:50:
0b:02:20:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:31:19 2026 by rpki-client