Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: 7ASX6uIT+trtVIWK4YkJNumOU9k+zuW9tvmG+rVX9uo=
Subject key identifier: 0D:8E:6E:A9:64:5F:18:5B:89:07:61:6E:D7:EF:58:FF:D6:D1:87:02
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 01A0D56FE9A5D24346AC835EA530B90F80F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 22:01:16 +0000
Manifest this update: Thu 24 Sep 2026 22:01:16 +0000
Manifest next update: Fri 25 Sep 2026 22:01:16 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: COiI94Oa9pZrV0zKRdX2D9rigfJ71IM+rsMsUR1y+Pk=)
2: iyOoKbcuiPTHCLxMCiy7DxXr5rk.roa (hash: PXqcza2cwz/3mR448+fTEDzYFSGuytoJUnD8yJR22Mo=)
3: rjqoaksN8bIK2O4SRzuLcMffaQQ.roa (hash: YtctfngTDGfahIUPg5R6y0N3cZYKDE1Tr+6r4LZlIhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:e9:a5:d2:43:46:ac:83:5e:a5:30:b9:0f:80:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Sep 24 22:01:16 2026 GMT
Not After : Sep 25 22:01:16 2026 GMT
Subject: CN=0d8e6ea9645f185b8907616ed7ef58ffd6d18702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:1a:63:a5:1f:70:ba:93:e5:94:34:3c:7b:
b7:d4:d1:ee:94:0d:16:4c:64:7f:5f:81:58:e3:86:
61:99:9f:49:96:be:a5:5c:3f:68:05:c2:80:a1:be:
09:9a:eb:7b:a9:8e:cf:4e:e9:f8:a1:4a:c6:fd:09:
3d:00:d7:90:91:6d:75:54:17:38:8b:84:75:74:25:
84:47:15:ff:92:4d:e2:24:f7:ac:6b:1c:a5:bd:e7:
8f:78:16:d9:a6:87:a3:a8:94:89:56:4f:98:c7:c2:
c1:52:af:ee:89:16:2f:84:00:aa:1c:7c:24:02:5b:
12:95:3b:e6:51:05:4d:89:c0:b1:74:13:b0:bb:51:
19:37:fe:54:61:8f:9a:f9:8e:9a:e4:c1:38:be:0f:
32:6c:7c:42:1b:a6:ee:c8:99:e9:97:c1:a1:d1:10:
f1:a3:58:92:5f:60:63:3a:16:76:18:70:a5:49:9b:
5f:52:a8:6a:ef:c8:b8:35:14:b6:8c:9b:a5:2d:99:
4b:b4:86:f6:8c:eb:d7:a5:28:a1:44:05:60:7c:27:
80:92:98:e8:9e:bb:98:85:f2:4d:4a:31:51:23:9e:
1f:3d:22:38:a0:07:51:27:6e:7e:1b:f7:b9:7e:b5:
cf:18:35:d3:34:35:ea:ef:61:ad:20:2e:cb:ce:cf:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:6E:A9:64:5F:18:5B:89:07:61:6E:D7:EF:58:FF:D6:D1:87:02
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:98:e9:b2:95:8e:17:f9:95:e4:de:21:a7:28:10:cd:7e:e5:
bc:29:80:05:20:3f:74:a7:24:44:37:b6:e6:56:ff:79:b2:af:
4f:79:6c:ea:08:f2:67:72:88:5a:73:af:2d:0b:9e:03:46:a6:
f9:d6:6b:8e:35:da:3c:1a:00:a0:99:99:fe:f8:b7:3f:19:18:
a8:f4:b1:7b:75:bf:44:81:99:06:a3:00:e4:98:83:c2:7b:9f:
81:8b:8c:23:35:c3:a8:4f:74:2c:34:14:79:75:94:cd:d8:1b:
d9:96:ff:a2:1c:79:d5:1e:e8:f5:2c:7d:1e:b5:a9:09:86:22:
18:f2:1a:af:b6:9d:9f:aa:c9:ed:09:2a:6c:44:48:64:8f:50:
eb:30:5c:fe:2a:2b:8a:38:88:e0:4d:9f:37:d1:ca:7a:14:3a:
6a:54:a3:60:73:b6:e5:80:b3:60:80:1b:53:78:0f:1c:03:68:
88:40:9d:86:3e:8f:ad:e2:4c:75:9e:19:e3:e0:9f:dd:49:d9:
11:50:5b:be:ac:cf:90:98:88:ef:60:3a:83:0a:8d:54:bc:52:
ef:e5:2a:05:c8:b4:15:44:08:37:64:8c:d5:57:88:c6:d2:56:
ce:21:0c:4b:d5:cf:ec:2a:20:72:da:8a:94:81:79:0d:7e:b6:
7f:a6:75:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:45:37 2026 by rpki-client