Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File: 0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier: djU8Ui1YfY+ZxsuaduMkWGcd4zDvKFPQerpecOihH9s=
Subject key identifier: AA:2B:0A:C4:BE:20:D4:5B:C9:92:F6:D9:E4:74:15:80:6C:21:D2:B9
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 01A0BFF9E4B6477158FCA3AC8AB506C90490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number: 1A65
Signing time: Sun 20 Sep 2026 18:00:20 +0000
Manifest this update: Sun 20 Sep 2026 18:00:20 +0000
Manifest next update: Mon 21 Sep 2026 18:00:20 +0000
Files and hashes: 1: 0jE3hZkv3e72FXBQNOB1Z87I7hE.roa (hash: ufiFlOn3uZQmY7BK2PstScG7xVreKj7F3Ayx+q4ondk=)
2: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: 9eoC00pF96XagA+NId1awZMHPDC8As4pZcplzQqJsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:f9:e4:b6:47:71:58:fc:a3:ac:8a:b5:06:c9:04:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Sep 20 18:00:20 2026 GMT
Not After : Sep 21 18:00:20 2026 GMT
Subject: CN=aa2b0ac4be20d45bc992f6d9e47415806c21d2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:33:6c:ce:cd:cc:1d:01:91:05:8b:89:fa:
94:30:67:e2:80:8c:41:12:a9:ac:f8:84:26:5b:09:
75:db:1d:66:3f:ee:c7:7f:da:9b:ab:92:e5:23:ff:
6a:19:39:20:c5:9e:7d:7b:ee:0d:87:4a:14:01:ea:
c9:d2:cd:38:1b:d7:c2:7b:d6:a1:79:85:b5:cc:e5:
24:db:14:8f:98:af:a9:2c:75:a3:9f:16:30:f0:05:
35:d6:a5:c5:7c:4c:7c:f9:2c:e0:6d:97:3a:d2:32:
b9:33:ac:c0:aa:da:4c:e5:73:15:c1:47:65:f2:a6:
a4:29:f3:47:48:c6:77:4f:9f:fe:77:01:01:b6:32:
6f:41:fa:f5:32:b1:24:4c:62:d7:53:20:d1:71:73:
5c:22:2e:64:56:7f:3e:fd:cb:98:fc:7e:fc:1a:61:
e6:42:f7:4e:fc:b3:d7:49:3f:36:15:a0:d1:f7:49:
53:0c:6c:47:93:15:3e:dc:05:80:d0:35:2d:5d:5a:
12:33:91:b1:b8:7b:97:24:10:90:70:5b:00:eb:9d:
b1:c9:5a:c8:a6:f9:64:bc:52:d6:28:ae:87:65:2e:
9b:86:dd:91:91:44:4c:57:0a:55:fc:5c:d7:87:b1:
78:33:37:37:f5:9d:a8:50:ce:bc:17:f5:82:5e:43:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2B:0A:C4:BE:20:D4:5B:C9:92:F6:D9:E4:74:15:80:6C:21:D2:B9
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:87:a4:0c:19:54:af:07:c1:f8:5b:f1:89:cc:72:a8:dd:f0:
45:a3:4d:ad:35:98:4e:7c:ad:2f:0a:a7:0c:90:77:f9:a6:b4:
02:a7:24:ee:c4:d9:a9:d8:a0:e7:d8:a4:cf:85:d1:8f:c2:eb:
c4:ae:ea:a9:16:f5:5b:79:ef:e8:3d:92:59:33:7c:0e:4c:2f:
f0:7d:32:af:bd:3d:f3:6a:08:3d:08:e2:51:15:43:99:f3:e0:
38:f4:d1:53:80:5e:a6:4b:e0:a5:84:21:ad:66:fe:90:a0:d6:
db:b1:01:f0:e9:95:82:dc:b4:c8:22:c5:cb:66:b7:8a:ea:47:
0f:eb:8e:3b:6a:4b:16:57:98:2b:6b:b1:2d:27:0a:67:76:25:
06:71:48:fa:2c:13:1b:28:9a:76:ba:05:30:87:8e:ba:bd:d1:
ff:83:da:0c:62:63:e9:4d:e6:76:e7:57:f6:58:b9:26:be:6a:
ae:19:0c:ac:65:8a:fe:00:79:e9:55:cf:8d:29:1c:ba:e8:1a:
d2:89:5b:a1:c1:c5:21:c0:75:9b:1a:52:a2:55:4e:8a:f7:4a:
6f:2c:46:07:fe:91:8f:c1:19:cf:59:d0:b6:74:df:36:79:e5:
80:52:b6:62:b8:a0:47:f8:dd:b8:f1:23:af:82:bf:14:90:b1:
16:95:a8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:51:59 2026 by rpki-client