Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: +vwJ0ovxg55QIbXwF33CGAQ5H64jmKxUUF+d1MhGnhA=
Subject key identifier: 06:9F:AB:38:58:9F:C9:3D:0D:E8:6F:6E:5B:46:79:22:86:B4:59:07
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 01A0F2312F28FA3568BB78FFF24E70B59B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 1532
Signing time: Wed 30 Sep 2026 12:01:44 +0000
Manifest this update: Wed 30 Sep 2026 12:01:44 +0000
Manifest next update: Thu 01 Oct 2026 12:01:44 +0000
Files and hashes: 1: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: 3ohC+NLsghsVHC3kbMMAFKKWz4J47nkxfaCnXZktGbY=)
2: qJDNQCIShiElkTydihRoQ4bZNh8.roa (hash: boKmhzMkJFM950qaKYC/IewwayfQB6vcVhEgjzqGKmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:31:2f:28:fa:35:68:bb:78:ff:f2:4e:70:b5:9b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Sep 30 12:01:44 2026 GMT
Not After : Oct 1 12:01:44 2026 GMT
Subject: CN=069fab38589fc93d0de86f6e5b46792286b45907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:79:b5:96:9d:a2:02:cc:49:ba:40:c0:7f:2c:
df:0c:f5:81:09:eb:ec:4f:3f:24:f4:06:0f:32:9a:
ff:1a:f2:20:09:9a:c3:a4:2d:5b:1f:25:b4:14:07:
ed:c4:e5:e2:57:93:e5:ce:91:3d:77:14:2a:25:e7:
7f:b4:ad:78:23:9f:aa:df:f3:53:75:60:82:88:bf:
ce:9b:da:1f:75:e5:bd:a6:6c:8e:11:7d:e3:3c:d1:
cd:65:ad:15:a1:4c:97:50:ee:69:88:79:73:ba:87:
26:4d:96:a4:ca:3e:06:76:41:76:c1:2d:a1:c9:e1:
0e:76:98:5c:0e:e2:12:08:90:f2:97:db:f3:7a:b3:
77:8c:1f:3e:38:8f:5b:cc:a4:ac:bf:00:ac:0e:43:
ac:98:e4:c2:83:e9:90:e7:e5:a7:91:6f:ca:38:2b:
7b:d9:85:30:cd:a9:7e:d6:fe:2d:25:30:e8:e4:78:
7c:1e:e0:88:13:c0:4a:9c:7c:ed:3b:c2:06:92:34:
57:e3:f2:15:d9:8a:36:ff:16:4d:d9:9a:04:2d:39:
c7:d2:c4:f0:67:5f:87:7c:3d:d6:7f:55:d4:82:e3:
7e:7d:6e:fc:58:17:85:68:a6:fc:25:de:f5:a2:84:
15:d2:3b:94:5d:e7:90:9b:42:cf:76:3a:cc:64:fd:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9F:AB:38:58:9F:C9:3D:0D:E8:6F:6E:5B:46:79:22:86:B4:59:07
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:68:a0:1d:20:13:f1:49:38:ca:c2:5d:2a:d3:42:45:6e:da:
2f:2f:9f:b1:eb:dd:f5:ac:e2:03:1a:f0:b8:be:ea:53:71:0a:
df:0f:95:68:29:03:3e:af:23:bb:3d:ed:6e:e0:ee:97:30:d9:
46:a3:41:44:13:89:fb:42:b5:52:7a:55:49:df:53:3c:98:18:
41:ab:b6:7e:5b:ba:b4:eb:2c:9a:0d:92:a0:be:0f:f3:01:8b:
13:14:7d:69:5f:d1:00:b1:fa:0c:db:14:cb:cd:1f:e6:08:04:
6f:1c:59:19:b6:bb:9c:0a:ae:c6:e9:08:6a:09:c2:89:2f:43:
ea:72:58:fd:b6:80:48:83:db:3d:ae:98:8b:a7:0a:c4:09:97:
15:60:2b:af:b1:49:f3:34:e2:cf:ec:c3:aa:6b:35:61:a4:72:
2a:03:e7:97:31:b1:2c:d5:77:45:8f:cb:3f:45:cb:7c:12:93:
7d:3c:a7:6e:77:a6:27:7e:4e:da:b1:c1:a7:1f:1c:56:d7:cc:
51:31:64:06:8e:dd:69:54:5a:3a:b0:f2:5a:3c:d1:e9:07:44:
f3:83:74:e7:5d:3b:be:b6:75:0e:16:4e:57:eb:75:13:88:84:
ec:24:06:8a:4b:f6:ed:c1:e7:0f:d0:92:09:f1:60:dc:02:08:
df:2d:a4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:09:30 2026 by rpki-client