Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: MQVrpKVDcRJpSD+ZYLv5DUc9oCRrwVxB0qEVGjRLHX0=
Subject key identifier: 83:AC:D2:90:13:09:37:39:AB:06:12:A6:F1:13:A1:BA:CE:AE:B6:04
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 01A0D5DD8E1C6DE67F0368DD761F62539CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0F88
Signing time: Fri 25 Sep 2026 00:01:01 +0000
Manifest this update: Fri 25 Sep 2026 00:01:01 +0000
Manifest next update: Sat 26 Sep 2026 00:01:01 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: iSQYk5yMICl/WTLTyP0qmsFoZCuLwbvh41Awf9JqAuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:8e:1c:6d:e6:7f:03:68:dd:76:1f:62:53:9c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Sep 25 00:01:01 2026 GMT
Not After : Sep 26 00:01:01 2026 GMT
Subject: CN=83acd29013093739ab0612a6f113a1baceaeb604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d4:45:6e:48:ae:5f:ff:f7:64:af:f2:52:4c:
4b:8b:dc:26:e3:f3:60:ce:40:63:b4:0f:ed:1c:cc:
99:1a:37:02:0a:d0:b8:f1:2d:bd:bb:11:83:e5:6f:
b7:45:ea:e0:0b:1a:c4:a9:f3:c6:18:2c:1c:bf:28:
50:e0:86:81:a1:b2:77:f2:fa:a9:2e:63:bc:07:54:
3e:3d:45:ec:cd:df:00:a8:e5:6f:b0:a9:c0:cd:cb:
6a:f0:75:ef:83:33:f8:30:a4:31:83:f7:86:b5:29:
a4:1a:b8:52:2f:c2:74:a9:76:4e:a3:c2:ca:63:41:
2e:56:d1:99:42:99:ca:c4:ee:26:7f:b3:25:ab:c2:
e1:27:50:dd:39:cb:46:c2:75:50:ae:70:10:8a:11:
28:90:d5:40:68:8e:d8:60:2d:09:63:aa:99:77:a0:
c8:1d:0c:63:fc:f6:7a:a9:9c:a7:b7:ae:ea:81:2e:
df:cd:db:df:3b:b3:9c:44:e1:0e:a8:98:a0:a9:06:
b8:27:f8:1c:38:5f:d2:e1:cd:c7:43:7a:7a:0c:0d:
66:c0:71:2e:b7:4f:7d:c8:e0:f6:7e:59:56:95:54:
b4:d8:fc:9e:4f:4c:b2:80:4a:f4:25:05:7a:01:ba:
0d:5c:07:af:61:44:94:16:1b:04:40:fc:0e:82:7c:
f8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AC:D2:90:13:09:37:39:AB:06:12:A6:F1:13:A1:BA:CE:AE:B6:04
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e7:f1:73:c8:2c:36:25:c8:60:07:a2:2f:4a:93:82:c1:ea:
ce:13:37:20:b7:01:94:7b:86:f1:88:af:90:e5:68:04:0f:10:
81:6d:54:7a:dd:97:52:8d:f7:4d:00:4a:3c:da:14:ba:7b:7e:
eb:a0:49:49:97:3b:65:6e:4b:89:a2:32:0d:aa:33:f4:e7:e9:
85:22:bc:4a:1d:63:c6:b3:3d:c3:b3:d5:43:f0:23:00:a8:62:
e1:59:59:b8:2f:32:58:66:d7:a2:c9:86:93:09:1c:c4:a6:1a:
74:57:f3:e9:25:65:bf:de:0b:e2:bd:05:f6:7e:ad:a7:87:f2:
15:0b:6e:01:39:76:2f:c1:49:e5:33:3c:09:23:8c:97:03:64:
13:8b:ed:17:21:87:b2:ea:25:9a:b1:1a:24:f3:e5:5d:f7:0d:
30:ef:fe:d1:77:92:57:e7:f7:5d:31:75:c2:e9:34:e6:56:5d:
f2:8c:9d:75:15:78:b2:29:96:ef:5b:2b:68:a3:63:a4:45:2e:
30:49:c9:4c:81:94:de:c7:60:b1:4b:83:31:15:1f:92:40:81:
8c:a4:f7:22:ec:27:39:05:e5:80:11:62:dc:85:72:1a:ef:57:
32:9f:0c:24:a3:ff:ed:f7:22:d1:ba:0f:13:56:61:9f:4e:76:
36:a2:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:17:44 2026 by rpki-client