Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier: 1mRX6oSl1YHdCFwgl5vy1VxgQ35FvnWoGxyJb2MGNSc=
Subject key identifier: 86:80:4C:AD:3D:A0:4E:1C:9F:69:79:5F:A8:C7:94:F9:6F:44:2B:4A
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 01A1DCB8ECF9D458910B4D4DA9982BF3C2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number: 142C
Signing time: Sun 15 Nov 2026 01:01:09 +0000
Manifest this update: Sun 15 Nov 2026 01:01:09 +0000
Manifest next update: Mon 16 Nov 2026 01:01:09 +0000
Files and hashes: 1: 1-_jpSCMph4YEFnDVZXKeinAa4rs.roa (hash: koPlDtTY0MG8fOQfuLdRSQ8TOcKCr1znZMqSXkyLo5c=)
2: 1AjCxB6TkTjdHZOvofHm6NOOWfo.roa (hash: d4r+30BMgqiFQp0F8pzgKQ5i8LeY9r3mXEVd6tCLHak=)
3: 4iLxM73eLW6tqIqIEVi5DZshAX8.roa (hash: 5ekQWavsM+QKT46VPj3wV4euAzrbD/nttRzyJzRT1UQ=)
4: KHpN6RsIT8Yzm-xw6bcYpCXAZOw.roa (hash: Gk34if2dhZULdLD9MtyJCGYKzpai4oG9h76wWHnC34Y=)
5: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: 2PPabAgrSCijHSLLjizHK0k7Ym9Jv7sTnCpYX7YNCsE=)
6: oc6e_YKg8912v6VDvH8ngDmsWfM.roa (hash: 41DdsXilU15WJYeBRPmAhAA7JB/24PpGTu8+VCcE5nM=)
7: s_Ocb5RzyDecMqmMmwcXEkDS5kY.roa (hash: zD3icNxMD7rBY0nFB8uq8qwc1AnBefPqnwojqYvDvKo=)
8: xi1lzXnyUQddIBg_g1qFVgVU2YQ.roa (hash: DDQgV9tAfdW2zCM78ncjHvng/XT4BDa4M2SGgGiDpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:ec:f9:d4:58:91:0b:4d:4d:a9:98:2b:f3:c2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Nov 15 01:01:09 2026 GMT
Not After : Nov 16 01:01:09 2026 GMT
Subject: CN=86804cad3da04e1c9f69795fa8c794f96f442b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:98:58:b1:0a:67:09:be:39:3a:21:e6:b4:
bc:9a:b3:b3:35:6a:6c:2a:cc:4d:81:fb:27:60:3a:
c9:6c:51:8a:09:90:9d:b3:0e:98:8f:eb:a4:53:40:
91:a8:35:05:b0:38:5d:b1:63:6b:fc:6b:23:c6:f3:
47:41:8b:ff:98:24:6e:94:62:3a:69:e2:23:8d:2c:
99:9f:75:ea:96:a6:8b:3a:74:f2:d5:07:fc:24:4a:
be:f8:b4:9b:08:47:61:7a:8a:85:32:e6:8e:54:da:
fa:12:57:19:b1:cb:f3:02:e6:9a:da:d4:96:be:bd:
17:1f:c3:44:16:36:f1:a1:ad:79:72:fc:b1:1e:85:
8a:ac:48:de:cc:eb:7f:de:17:bf:f8:ca:99:f5:2d:
82:d1:28:fc:ac:e7:a4:a2:dd:43:5e:13:bd:67:e1:
c1:30:78:f4:29:34:d6:bb:00:03:50:4f:99:50:68:
b0:70:2b:63:40:10:f2:b3:ca:ab:1e:65:20:9b:27:
8e:42:5b:ac:3a:98:c5:fd:c1:19:bf:3d:9d:ea:05:
24:70:87:73:0b:45:1b:28:28:b5:2b:ad:ec:44:06:
a0:6c:f2:6a:b9:75:d8:87:4e:75:78:7b:b9:f2:73:
08:3e:a9:b5:3a:03:ff:2d:d6:ba:9e:7c:6b:b5:65:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:80:4C:AD:3D:A0:4E:1C:9F:69:79:5F:A8:C7:94:F9:6F:44:2B:4A
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b3:ba:1a:fe:8d:c6:0b:f1:18:6a:dc:92:2b:92:d9:2f:b9:
a2:b7:40:32:bc:2c:95:f5:52:d5:7f:e0:f4:63:27:a1:0f:ce:
02:4c:27:b5:ae:21:84:cb:75:2f:70:17:fc:86:25:07:52:1d:
77:49:44:b5:a0:34:6f:25:96:b7:3d:ae:f6:2e:41:1a:80:7d:
6b:aa:3d:43:23:2f:fc:10:56:2a:ce:1a:c6:48:4b:30:66:a6:
4e:ce:d0:8f:13:fe:31:93:55:06:76:83:01:08:1d:09:87:5d:
dd:3f:89:ee:c7:ac:f9:86:5d:1d:ec:ed:0b:ec:5b:a0:f0:31:
ac:01:45:66:56:d8:82:cc:01:5a:9f:ea:cd:1f:20:88:fd:28:
d0:4d:97:cf:85:11:35:ca:09:1b:fa:ec:c1:31:84:91:4a:0e:
52:44:d7:e3:b3:61:5f:d4:38:c8:a9:eb:11:e3:75:46:b5:13:
47:4c:bd:a1:b0:f9:a2:32:5e:00:e6:12:d8:be:83:b1:10:d1:
11:89:3b:10:1d:04:c1:51:c5:23:a9:64:d8:e6:a2:8a:5e:de:
44:70:35:ae:12:4e:70:0c:db:da:06:0d:82:f0:dd:7c:3c:35:
b2:8b:80:32:b4:45:0d:87:dd:2c:a5:0e:1e:da:c5:3a:d1:4d:
c3:f9:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:37:29 2026 by rpki-client