Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier: ropcZdJLIz3YNoymR8Whn9tEGPaAaFR5w7NwYI+guCU=
Subject key identifier: 68:1B:26:6F:BF:2E:F8:5B:DB:80:16:00:40:D9:A0:EC:CA:AE:95:09
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 01A125427D1ACA220046651A1CA475024502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number: 1A9C
Signing time: Sat 10 Oct 2026 10:01:16 +0000
Manifest this update: Sat 10 Oct 2026 10:01:16 +0000
Manifest next update: Sun 11 Oct 2026 10:01:16 +0000
Files and hashes: 1: 2RbeqdMiyrwCVLR5chpWY1wVXBs.roa (hash: FV2Q/IEBTvjzgG5NIpgTYEVedEVCT2bxukDMuyGlG3g=)
2: Lijwv8ed8pOLySWZZGE9d68r6MQ.roa (hash: 9P+vvVo2WGEbeXwE6ljHBigsAywfbwq49GCsuySXDx4=)
3: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: Qpnt+ZTStOpKQlfLjzHJ2lqUPP9RdFPxsS2CunjIcJY=)
4: g5j5FZkvMABlDgQ1VxUj3-qHrIQ.roa (hash: GDgyOidVPTAYf13W4o/hjNWE5JEbUK7OcD6kn+Y2gxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:7d:1a:ca:22:00:46:65:1a:1c:a4:75:02:45:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Oct 10 10:01:16 2026 GMT
Not After : Oct 11 10:01:16 2026 GMT
Subject: CN=681b266fbf2ef85bdb80160040d9a0eccaae9509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:bd:4a:88:17:43:9d:cc:5e:94:04:72:15:
66:ce:a9:5b:1f:1a:ef:e2:e7:05:dc:1e:65:5e:d9:
78:89:55:1d:34:74:a3:06:a1:0c:02:63:e0:5d:27:
1d:ce:59:dd:1e:36:b8:b1:6e:41:dd:f9:bb:b6:bb:
38:b9:0e:28:7c:ae:95:ff:b2:bd:39:e5:9b:2a:cf:
be:b7:48:93:81:b3:52:6d:55:0e:3e:cd:45:f4:b2:
14:c4:1f:a3:29:0f:90:b5:f8:aa:50:aa:98:ef:98:
c1:c0:43:32:63:4d:ff:28:75:77:62:37:bd:67:82:
dd:a0:88:65:0d:24:68:31:9b:fe:cc:39:dd:22:a8:
38:c2:77:b7:3a:36:e1:53:e4:58:bb:08:71:9f:43:
62:ac:23:e9:4c:55:87:23:52:55:c2:71:a3:14:ed:
db:87:b9:c1:6a:37:6f:5d:d4:fc:6d:5e:67:11:c3:
71:ea:70:86:05:b1:98:8d:75:94:9f:bb:0b:99:da:
20:5c:67:07:85:24:35:d5:6a:d9:44:57:89:50:31:
98:ee:8a:22:d7:5f:a3:c4:3b:5a:95:70:62:96:eb:
3d:bc:18:ef:ed:13:fe:3e:0a:30:ea:12:cc:3b:ed:
d2:fa:11:c5:09:d8:f6:0f:ad:be:61:2b:1c:87:31:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1B:26:6F:BF:2E:F8:5B:DB:80:16:00:40:D9:A0:EC:CA:AE:95:09
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:34:09:48:0e:d1:a3:fc:6c:a8:86:36:5d:41:67:df:44:c3:
d9:56:10:8e:03:a8:57:28:5b:c2:d7:70:68:e8:8e:12:c0:98:
67:4d:13:f2:d0:c8:39:80:83:ef:af:34:79:7b:55:9e:05:69:
fa:4a:d2:50:85:ed:dc:0e:48:01:4c:e0:73:f1:88:4a:e7:ab:
22:24:03:ee:d8:24:02:ed:85:74:43:41:3b:51:60:df:39:e7:
f1:56:0a:e1:d1:b1:79:97:83:41:66:2c:f0:54:f8:da:7d:9e:
be:22:68:cf:2c:60:cc:5a:f8:fa:e7:37:ff:15:36:61:4e:17:
b3:54:7b:55:32:7a:f7:b5:ff:fe:80:42:14:1a:18:f5:f6:cb:
ec:db:ec:05:a7:a7:b3:a3:44:af:83:a0:45:3d:1e:24:2f:a5:
7a:88:21:85:4e:f0:3e:54:df:d6:2a:d2:da:f1:f5:4f:d1:27:
af:76:2c:35:96:4f:37:6f:0e:86:60:5a:14:c7:06:a7:b0:12:
38:8b:c3:12:c7:2d:d7:a1:33:55:6b:cb:91:7c:0a:1d:4b:3d:
5f:91:dc:16:00:d6:82:b9:e6:8b:72:a6:92:c0:31:77:16:4f:
a3:e2:ad:8b:f2:1a:e4:f9:38:97:75:a7:f5:3f:01:2e:b8:9e:
58:e9:e3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:27:23 2026 by rpki-client