Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: 1jp+m8Ckf9jKt/sysubaX+d8afI2WSx6GUCLcdAcEC0=
Subject key identifier: DA:BA:C6:6A:D8:83:00:9A:EE:DD:C1:9A:CA:B4:BB:8B:FD:E2:6C:D5
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 01A0D049382859300E0A59CEDA482C0206DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 1A70
Signing time: Wed 23 Sep 2026 22:00:54 +0000
Manifest this update: Wed 23 Sep 2026 22:00:54 +0000
Manifest next update: Thu 24 Sep 2026 22:00:54 +0000
Files and hashes: 1: SQCsFnrjeuZiVY1_BfYgIg4qi-k.roa (hash: 5RBF/vlBHGxON2JarwGOKKIBZfcvo+qjnXq8BAVhPwI=)
2: dPW253uLNkMC6hq3xNGknvYUUCk.roa (hash: lFOPNOmhkr/l52mg27uVNBuUyHirwJeRRAr2NLCO680=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: 1jXuqdCHKHbvyvx6u2/ZVquT7CvkZ0GCaYPLrqw2J4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:38:28:59:30:0e:0a:59:ce:da:48:2c:02:06:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Sep 23 22:00:54 2026 GMT
Not After : Sep 24 22:00:54 2026 GMT
Subject: CN=dabac66ad883009aeeddc19acab4bb8bfde26cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:88:59:5a:e9:a2:e9:0a:58:d5:1e:f9:d3:
96:61:8b:59:5f:bc:3c:be:98:0f:5a:12:7e:12:84:
0e:f9:05:30:a7:9f:14:80:1e:49:d9:fc:62:1e:3b:
2f:57:f2:ab:26:b8:ae:2c:e1:0b:6c:04:d7:68:9e:
fd:1e:26:95:8e:b4:da:a0:16:ab:89:c0:3e:08:b9:
8d:b1:33:ed:36:08:42:bd:59:ac:c4:ac:48:4c:ce:
fa:02:74:30:de:93:c0:47:ae:c4:77:6b:ee:01:ef:
7b:55:47:c5:03:ad:ea:f6:18:3d:11:1a:1f:62:2f:
f0:69:0a:58:32:2a:c8:47:bf:c2:f1:d1:9a:f2:fc:
93:9f:88:1a:5e:3d:36:b0:ac:d4:2c:d5:78:a3:e6:
8e:11:1d:02:9e:dd:f6:a0:87:e0:be:2c:89:de:26:
0b:b1:85:4e:a8:b8:69:24:75:ff:96:d4:27:cc:5f:
cc:21:9a:48:da:f8:2e:d7:f2:3e:89:f4:01:34:03:
b6:4a:35:de:81:db:6a:52:82:06:3d:e5:ca:5b:c1:
fd:03:39:8c:8c:8c:46:d0:53:88:b6:f5:7e:ff:39:
d0:c9:ef:13:49:82:21:80:a7:37:f3:b2:89:47:c7:
6c:21:a9:4b:ed:90:e8:af:8b:03:98:18:22:e9:7e:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BA:C6:6A:D8:83:00:9A:EE:DD:C1:9A:CA:B4:BB:8B:FD:E2:6C:D5
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5a:9a:51:f2:ad:b3:47:99:b3:b3:65:c0:e4:fd:54:ae:1d:
b7:b1:4e:4e:f4:a0:6f:a7:d3:c5:e8:91:12:e1:a9:a2:49:35:
ad:c6:a2:cd:03:35:57:c4:d8:2f:16:05:8c:ea:bc:a8:78:db:
4b:a4:ae:be:f8:07:c8:27:63:88:84:08:60:7b:e1:a6:60:7c:
68:81:67:f4:cf:61:07:62:71:0b:77:db:17:c4:a9:39:58:49:
1e:50:4f:09:f2:4a:29:4b:ba:31:99:35:96:eb:55:43:97:38:
36:9c:55:d6:16:c1:b6:2c:f8:5e:44:d9:4b:38:74:f1:09:dd:
b3:88:82:5e:ed:db:60:e0:0e:cd:12:32:f3:21:aa:97:ee:5a:
72:cd:d0:ae:82:8c:9c:76:5c:52:1e:f6:90:2f:6b:3d:58:8d:
73:ec:c3:c4:1b:f1:c3:ce:fd:a8:61:34:29:17:5b:e8:cd:d0:
b1:3c:34:f1:29:ea:7d:84:70:82:67:c0:12:85:97:b9:c0:a1:
f8:fe:85:3e:09:6a:ab:45:f6:f1:43:5e:f5:f2:98:04:e3:d6:
be:22:d7:b7:91:03:e0:02:ac:2b:82:66:d6:67:1b:93:b6:5a:
e9:b9:4e:66:1b:94:15:4f:45:51:8d:1a:ac:b6:ad:67:86:6d:
bd:87:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:35 2026 by rpki-client