Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
File: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft (raw, json)
Hash identifier: maxl7w0kB4jDQUmlneSmdBQd16Wig3rxW2GuemAalL8=
Subject key identifier: F6:E1:03:4F:44:F9:8F:8B:92:D0:FC:F8:98:3A:9B:F1:68:FB:12:1F
Authority key identifier: D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
Certificate issuer: /CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Certificate serial: 01A0E9D2C0055FDEBD9768277B03E1EFBB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
Manifest number: 1A77
Signing time: Mon 28 Sep 2026 21:01:37 +0000
Manifest this update: Mon 28 Sep 2026 21:01:37 +0000
Manifest next update: Tue 29 Sep 2026 21:01:37 +0000
Files and hashes: 1: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl (hash: 2BtKspYqdHR6fNi1MuHE8vSNt6SwJvK91fYdVpmSCdk=)
2: qB-yYmmoZAETKywXU4O90SMz9p4.roa (hash: zSfrh0GvpLorIoRjiLIdctGLnu0vrYxfcdrku/RI+Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:c0:05:5f:de:bd:97:68:27:7b:03:e1:ef:bb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Validity
Not Before: Sep 28 21:01:37 2026 GMT
Not After : Sep 29 21:01:37 2026 GMT
Subject: CN=f6e1034f44f98f8b92d0fcf8983a9bf168fb121f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:72:8c:6d:31:ce:de:f7:44:4c:95:58:9e:
25:c4:7b:66:1e:bd:6e:56:c7:87:55:1a:2c:6f:bc:
ea:89:19:cb:cd:01:83:b0:f8:76:8f:52:50:45:7f:
a7:95:1e:bd:f4:2d:e9:5d:aa:5d:eb:c2:f9:56:d4:
9c:6c:98:f2:07:cf:21:6c:31:08:10:e9:b2:24:97:
cb:a3:0a:54:89:cb:bc:d4:79:1f:11:95:2b:89:85:
dd:af:7b:54:c4:be:b3:11:13:bb:78:d7:ba:7c:43:
9d:b0:6c:e1:81:68:91:8b:d4:4c:72:85:71:25:9b:
c1:47:b2:2a:a8:18:29:49:9e:c3:a5:e2:5f:22:ce:
98:82:bd:cc:a6:1a:0e:6c:98:03:83:04:a3:75:5c:
4c:dd:7c:75:0d:5e:0f:87:f7:10:dd:78:1a:b5:64:
0a:33:43:86:4f:72:15:4c:4e:af:ec:f4:38:23:34:
08:7d:29:d7:c4:2f:4e:35:e1:4f:09:70:f3:9c:27:
40:44:af:ee:71:47:54:df:bd:90:23:d8:2b:af:1e:
f1:db:12:ae:57:f2:52:15:cc:77:4c:72:74:5e:46:
b5:15:b4:db:8e:8a:c0:98:c5:38:26:1a:cd:95:09:
16:eb:2a:66:09:35:f6:9d:5b:ad:43:c4:c9:57:39:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E1:03:4F:44:F9:8F:8B:92:D0:FC:F8:98:3A:9B:F1:68:FB:12:1F
X509v3 Authority Key Identifier:
keyid:D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:64:4f:c8:0f:4c:61:c4:4d:48:3c:f8:c9:cf:b4:81:76:c5:
df:84:b8:cb:2f:e9:29:fa:18:a2:82:f8:c7:c5:78:b6:cb:88:
af:ec:0c:c4:8e:d4:7c:d1:b2:9a:7a:c0:b0:b0:ce:92:34:ab:
c7:12:d8:0f:75:7b:c9:b7:f4:be:95:c4:28:17:44:cf:3f:6b:
5f:36:db:d1:23:ef:1f:00:d5:9c:18:ad:c0:f5:c1:c2:0d:e4:
ca:ab:2e:1b:ea:b7:39:ac:36:90:cc:57:e8:90:99:8a:eb:b1:
b0:47:f1:53:08:f0:2b:c3:a1:51:1a:ec:30:f2:d8:a5:1e:4e:
7f:3c:d1:b2:3a:da:6f:dc:57:23:59:c1:69:77:33:47:5c:61:
28:f4:23:8b:4e:d9:64:5b:6a:9a:8a:6e:ce:50:88:17:3e:0f:
24:36:02:73:c4:13:c1:d0:46:73:d7:22:21:b9:7a:b5:43:cd:
f0:3c:e5:50:1c:64:8f:b0:e0:13:de:c1:67:e3:34:68:94:e4:
67:bb:fe:c6:ce:75:90:40:c8:57:61:83:dd:94:0a:79:bd:a1:
4a:97:f1:fd:80:75:f4:c9:58:51:03:02:a8:75:d5:75:52:54:
47:0d:c0:f2:0c:c8:c2:a4:7f:e8:59:20:68:c3:97:a3:73:17:
5f:03:e1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:36:13 2026 by rpki-client