Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
File: 0RIqXLBkP3NsfseWGAmiWThmjw4.mft (raw, json)
Hash identifier: 5SGtgRaKlk7EFX4d3ZyAxy8uibiyr4aUWR/Zs4PIzKA=
Subject key identifier: 55:D7:B3:47:67:E1:34:C3:50:57:DB:FC:D7:0F:E9:10:AE:6D:75:C9
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 01A119E28E4ADDBBF3C91485DCFEB8CD7028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
Manifest number: 1A96
Signing time: Thu 08 Oct 2026 05:00:40 +0000
Manifest this update: Thu 08 Oct 2026 05:00:40 +0000
Manifest next update: Fri 09 Oct 2026 05:00:40 +0000
Files and hashes: 1: 0RIqXLBkP3NsfseWGAmiWThmjw4.crl (hash: v2r98+9IetnmhEwNREQw2LHU3Xajim75B4nIUFaucNQ=)
2: ZKAPBlDYrEd2yjmsfMSMceCY9TA.roa (hash: F0+H6qDixU/03vN/UlEJN6xAxFU7ewgK1yqAztFgQS4=)
3: fSmn7fdIQV-BhV-TX9ikmCr8pz0.roa (hash: aPwivrJczNCFzMJcf0LFQLamq3ppdLsG7e6V+tPBFE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:8e:4a:dd:bb:f3:c9:14:85:dc:fe:b8:cd:70:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: Oct 8 05:00:40 2026 GMT
Not After : Oct 9 05:00:40 2026 GMT
Subject: CN=55d7b34767e134c35057dbfcd70fe910ae6d75c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:58:04:0c:a1:62:93:f8:80:b6:b5:e8:dc:
8d:0d:13:c0:cb:6e:e9:b7:51:30:ad:80:71:ec:52:
80:fa:fe:cc:3f:03:d7:12:f0:6d:bf:a5:11:03:c1:
c4:8f:8d:1b:69:51:cf:80:91:44:21:1a:53:e2:2b:
f3:4c:52:79:a6:ec:97:a3:75:03:6a:bc:ac:81:0c:
94:53:b0:22:b4:0f:49:ff:41:fd:a6:7e:4a:89:b8:
a7:f7:7c:55:70:86:19:45:ca:16:37:cc:c8:c1:57:
f4:60:4d:58:7d:ec:99:37:d1:12:70:68:6d:a1:a1:
13:3f:95:77:17:c0:1e:08:6e:ad:37:c5:d7:ca:e4:
71:d3:bf:c2:b5:fb:31:60:40:e5:9d:c8:7d:10:3f:
06:4f:0b:22:48:ee:17:7b:32:e7:89:ad:56:cd:3c:
43:33:36:d6:72:e6:b8:8d:64:0f:c3:75:a7:53:a8:
3e:6b:70:54:8b:08:30:cd:5d:61:de:74:b8:13:d7:
24:e0:c2:1d:8f:65:2e:1a:cd:93:b6:28:c7:4a:bc:
0b:1e:b3:37:d8:af:19:4c:86:d7:d2:37:85:4b:c8:
6f:d2:10:c8:af:23:0b:ee:2a:0b:fc:c1:1d:34:46:
04:89:c2:23:a8:f3:8c:04:5e:f3:fd:6f:c3:59:f6:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D7:B3:47:67:E1:34:C3:50:57:DB:FC:D7:0F:E9:10:AE:6D:75:C9
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f5:48:84:6d:6d:2c:19:3b:fb:1b:05:a1:b6:06:e4:5a:bc:
a6:62:36:ef:94:44:74:9b:88:23:a3:a0:e6:e6:9b:82:31:0d:
f6:2c:f9:41:95:11:ed:35:4b:ea:d7:52:3b:67:1e:5f:0e:95:
f8:79:59:a2:4d:be:97:37:bf:ab:7d:19:21:be:5c:c7:9c:5a:
e1:4a:95:37:68:46:24:3b:18:3d:25:41:db:2a:ad:7f:e6:68:
5d:ae:98:da:70:38:22:b7:e5:8f:b7:07:83:6e:bd:e1:02:ad:
91:26:c0:80:86:63:ca:02:c5:4e:78:f2:7c:f0:5b:29:ba:e2:
4b:b3:a9:06:d3:d1:f5:61:e3:31:c8:a1:c2:16:47:30:15:00:
29:86:17:68:7b:22:9a:94:ac:8a:3f:68:7f:5b:b2:e1:76:9b:
5a:ec:f9:ca:3c:fa:19:f6:35:04:5a:1d:68:6f:e2:e6:8e:21:
7e:84:87:79:26:9c:62:5f:b7:f2:10:08:61:1d:dd:83:c0:83:
73:c9:cd:6e:99:21:53:f8:30:6d:6d:54:19:d7:95:e9:51:78:
41:bf:ce:4d:3a:7e:69:a0:c0:9a:40:f0:31:52:3e:22:5c:7c:
e3:40:8b:9d:8b:6e:bf:02:20:a6:ac:17:12:eb:4d:9e:ee:d4:
dd:e0:61:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:18:48 2026 by rpki-client