Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File: Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier: UK3sqpEcX4P7WexBCKPH3Wmx23z2Ead9DMtmED//MMk=
Subject key identifier: FD:C4:AB:65:73:BF:4C:63:C3:F9:62:CC:FF:E7:57:F7:12:B4:7D:42
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 01A10700E094023B47A96007F5EE3BFA6DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number: 1A9A
Signing time: Sun 04 Oct 2026 13:01:00 +0000
Manifest this update: Sun 04 Oct 2026 13:01:00 +0000
Manifest next update: Mon 05 Oct 2026 13:01:00 +0000
Files and hashes: 1: 0MnT-Cev0aWfox9D3TA-NvqEMlk.roa (hash: JJLpUG+0ObMqR5bxSAi6saPQ/DL3PUHcYLY29JhBmbE=)
2: 1-LbhNdw_AJV43onNE0QCUpCX6so.roa (hash: dSYVcw8EiYO4/PAbhwcAgMdvgRcG7f4kUZi0vNXjJIw=)
3: 4BHAHtAhc28ZrQwUD5OHuec1Ir8.roa (hash: 0iGZlpXjvTxGNf9N3a9R/JttWSb6ffwtMSks1EBv2mQ=)
4: 4qWGLPeV9cfuGGpVtJBLff_UhD4.roa (hash: fsCbic0Uc+tcg0uG7d9ay2R7taJTtXFIv1SOgaMPRbM=)
5: 9h9M7PjhCe5Xzh52sY19F_HCfoo.roa (hash: dKnlXAO85KhguToJuoLLUtMZOEcwIkloXdGeaFlciRA=)
6: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: GyljL2yjoB8l4QgLsESJ6kqnjlPLadmtLorphKe9vlE=)
7: jLoeQ1ou0WBg9J7CvjX-GemJzOc.roa (hash: l5EAwU3ekmbrZBP06TeMqr40qf//w4QSp1sb+SkDG2I=)
8: kHyEvJhu_w11Kx9L4McOAF2P03o.roa (hash: jmuEXw0e3wCECNG5mj5zMNmwosrMAavIJYnu60jwGTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:00:e0:94:02:3b:47:a9:60:07:f5:ee:3b:fa:6d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Oct 4 13:01:00 2026 GMT
Not After : Oct 5 13:01:00 2026 GMT
Subject: CN=fdc4ab6573bf4c63c3f962ccffe757f712b47d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d3:8b:a5:55:a3:0c:f9:99:2a:58:14:32:f4:
21:df:1f:c9:71:84:72:0b:28:b0:93:50:c4:c1:04:
fa:d4:89:94:16:77:34:40:a8:b2:e4:a8:3d:79:b4:
20:35:0a:79:68:51:a3:30:3a:aa:e3:11:01:de:7c:
bb:85:e7:1e:98:d0:02:07:70:80:45:1e:4a:a8:53:
46:f4:b1:bc:f5:36:31:15:50:60:ce:ec:57:bf:bd:
e3:3b:fb:eb:36:8e:e3:76:61:3f:6d:3b:a6:3f:8e:
cd:56:e7:a2:46:e6:e6:66:1b:36:71:58:0e:1a:20:
64:df:4c:e5:0f:13:db:3e:af:68:08:76:ca:bf:1e:
de:ce:e0:01:9b:d1:32:f4:32:8f:66:1d:ab:89:df:
fd:cf:bd:3a:42:92:6b:c4:0f:b2:c3:80:9e:8e:db:
f9:40:aa:12:f5:d2:09:8a:7c:71:58:63:f0:bf:e3:
51:5a:3d:61:f8:84:81:0c:ac:82:df:2e:81:40:38:
ca:f5:f9:c3:c1:fb:e0:54:1f:c6:8d:f6:e6:75:5a:
d4:6e:7a:78:5d:5e:65:15:8d:e5:bf:f4:c8:f3:4c:
d4:b7:c9:d7:68:75:4c:95:1f:45:6b:97:6c:4b:f0:
6e:b3:e4:35:11:8a:cb:f3:9a:2b:8d:c8:c8:72:c4:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C4:AB:65:73:BF:4C:63:C3:F9:62:CC:FF:E7:57:F7:12:B4:7D:42
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ad:ee:b0:14:00:e4:2e:91:ee:ec:6a:6a:c1:70:3b:a5:47:
54:22:99:7e:3b:7a:f0:ec:03:a2:00:04:4b:e4:eb:9a:a7:92:
7b:78:0a:ba:a2:08:b7:57:c3:89:d5:18:cf:d3:fb:c4:7e:82:
5a:3f:db:da:45:4f:a8:fc:0f:44:2a:55:0a:53:8c:9a:37:48:
76:e4:3a:e5:36:56:d2:7a:12:d8:53:37:fa:08:e9:3c:d4:0c:
ab:68:5d:8f:4d:03:b7:dd:77:5c:65:da:ff:ef:70:d0:04:71:
9f:63:65:e3:b0:30:58:4b:fe:7e:29:16:34:5e:46:e8:c1:cf:
eb:a3:9e:ee:ea:ab:7b:f0:1e:93:25:91:34:bf:fb:f6:2a:7f:
b1:4e:83:58:54:19:58:38:75:e5:0a:99:96:38:ca:a5:23:f8:
92:a3:6c:bf:f3:d2:a6:39:fb:6e:9c:4c:11:f4:ea:ad:6c:26:
30:6c:00:ec:8d:ef:ce:33:14:53:50:a0:35:c2:57:00:64:fe:
20:74:09:e4:66:4f:a2:21:1e:8e:fb:a6:d4:65:83:f9:08:a5:
83:fe:80:bc:a6:2f:dc:31:00:ce:40:98:24:d5:fb:64:67:8c:
ec:2d:65:f6:ca:82:b4:e5:d0:a1:d0:08:2d:a5:4f:61:b9:10:
92:30:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:51:38 2026 by rpki-client