Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier: pETHiDYWcTViRXf/2fIPEvfXeXggqVdP6O8YiN8/ve4=
Subject key identifier: 39:51:B4:4B:32:6F:6B:C4:7F:84:8B:31:D4:F6:47:F4:0A:E7:18:60
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 01A0EAAE46BD6906D18DDFBC6A030092267A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number: 1A9E
Signing time: Tue 29 Sep 2026 01:01:24 +0000
Manifest this update: Tue 29 Sep 2026 01:01:24 +0000
Manifest next update: Wed 30 Sep 2026 01:01:24 +0000
Files and hashes: 1: 1Jxi3AriRg31UMXbMH3OPiY-5HA.roa (hash: 3Mxy5Zs+xxbHjoz6LYDQ1mtzuO64bgmhPoqFp9H+W6U=)
2: 1lCX43rfgrd3UwSra2DvMolB2ko.roa (hash: HlEmjVnlqK6TJjU1qHHjaKYAoLJQkw56SG1ALNLBa+I=)
3: 2PolrAOhRQsrhDYmFoZ8Hf2dqko.roa (hash: Xq71zocml0mTHu8vbp5x/HrEbiwcbUVeA+bdWsQ2Clc=)
4: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: ZwetwswLwnWXCWoEL70TgHT/XR8MsgPGbdiCgQHUFKk=)
5: EOQ5V0kDXyQ1FQ6B9-AVHGPqlCs.roa (hash: yS629cFjQWViH4uxLDi0K/sJNglxdC9RFtjY2YesInI=)
6: Rew-UH93UALzUyPxo4xaqs1RMv0.roa (hash: otpEuqhi4Q6jIERTfwB4XyfDwmL1emaLm3YkERpgegQ=)
7: SSpWF7_mFd5aLq1v7cUlO_7MUeg.roa (hash: sS4G3ab1K8SPkh8ckCRuErQYvrEjmRohAAhZp3pf6ig=)
8: VIHswKloBTz_t9AoHJWNnNEBMUI.roa (hash: WAmtMAhBc13uGgrmDPdaVCQ0HLUvc9oHeQeyCGtDrss=)
9: mJmloBqH1ccv7pf7_dE3WxThQ58.roa (hash: L0vhterDlOQyvmoADd6+0joQnbdSLqt2I9Yyqwk+Dl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:46:bd:69:06:d1:8d:df:bc:6a:03:00:92:26:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Sep 29 01:01:24 2026 GMT
Not After : Sep 30 01:01:24 2026 GMT
Subject: CN=3951b44b326f6bc47f848b31d4f647f40ae71860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:bd:fd:88:22:c6:76:eb:26:f5:0b:4d:d2:
1d:fb:65:0a:49:c4:cc:3d:b2:63:8f:af:0f:b9:de:
1d:8d:b9:7b:f8:2c:d3:8d:12:f7:57:cc:6f:ff:b1:
77:4c:c9:f7:6f:44:50:0a:75:dd:f0:64:51:45:c5:
b4:55:94:b8:4d:8a:b7:8d:eb:a4:12:95:40:a8:4b:
ed:92:47:8a:cd:81:0f:02:8d:f9:20:94:df:8d:5b:
90:87:7f:e3:19:e6:a5:a8:ef:13:74:50:9f:39:0b:
89:40:23:06:91:37:06:a5:d0:82:b1:b1:4c:46:09:
21:53:5b:21:2f:d3:02:e6:4d:9d:05:cf:44:02:c2:
a9:31:b1:81:e1:32:d1:e7:d3:a0:64:55:a6:f6:4a:
4b:8b:bd:23:1c:62:aa:7e:e7:21:67:6d:1a:6e:f6:
a9:c7:0d:3c:7b:91:82:af:ab:36:de:39:f1:e9:90:
2a:95:2e:1f:56:58:c2:55:2f:87:f1:b6:cf:4f:97:
0b:be:fc:5c:c6:bf:ba:af:33:a4:69:84:da:9d:ff:
32:88:12:02:b2:89:ad:14:da:a2:74:e9:15:1e:d7:
0b:8b:53:b8:e4:4b:e1:87:3b:79:41:51:3b:c2:90:
59:4a:f5:b0:8d:0c:ec:f1:bf:57:c3:a8:12:77:5f:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:51:B4:4B:32:6F:6B:C4:7F:84:8B:31:D4:F6:47:F4:0A:E7:18:60
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:78:37:ef:5d:de:9e:db:96:4e:d0:92:1b:6a:cf:50:a6:90:
be:89:e8:b7:4c:50:7c:c5:b4:3e:8a:4c:0a:53:a3:ec:76:2b:
cb:c9:a6:db:5d:ff:22:a6:e1:19:e7:50:06:38:e3:d3:ae:61:
ca:a9:52:10:0b:11:cb:ab:91:dc:a1:93:a4:ce:f7:ff:8a:85:
9b:57:7c:34:7e:7e:17:58:08:87:42:8c:26:e6:b8:2d:b2:ec:
55:97:d1:e0:79:5a:1d:dc:89:71:0f:12:d9:b9:54:54:c9:78:
e5:78:77:4e:0b:1f:96:83:83:a2:6f:dc:37:5f:08:60:57:6e:
02:a7:4b:2b:5e:64:5e:35:fe:9e:41:6e:4b:31:4a:c8:ea:37:
bc:cd:31:cd:70:4f:2a:1a:a6:e7:55:fd:9d:cd:e5:e4:08:90:
fa:93:6d:36:bf:33:e4:74:7c:7c:7f:dc:35:11:26:cd:97:de:
27:ab:9d:ca:8f:36:f4:75:f7:ab:d1:7a:cb:68:b3:d6:2b:14:
b7:89:63:4b:be:83:d1:a9:e0:a7:e7:a1:fa:9b:11:29:6b:10:
b6:2d:21:cc:fc:c2:bc:ec:cf:07:1c:3f:c1:bb:f0:48:21:f9:
08:5a:3f:0f:b4:c4:fc:7f:61:c8:18:62:12:e4:f1:bc:e9:e3:
87:20:92:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:12:46 2026 by rpki-client