Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: Z7lZnZ3QS9KbgiREP0yhu9i62eOfq3l0QQXH3pQhPrw=
Subject key identifier: 54:DD:C9:47:79:14:DC:4B:DB:97:FB:B6:4E:E3:7F:3E:C5:33:9D:23
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 01A1043701F259D7ECC59874AE0A3E6594E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 0C2A
Signing time: Sun 04 Oct 2026 00:01:16 +0000
Manifest this update: Sun 04 Oct 2026 00:01:16 +0000
Manifest next update: Mon 05 Oct 2026 00:01:16 +0000
Files and hashes: 1: eodQO_QecDa9A4kfpjbm-rS0pPo.roa (hash: iUWofSRT9UHvNK/hkBEFkKulPRt3pBGPPSMNCjcW5Yw=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: HDrttI9dNqW7To+44cyuiZXE3BClPVdojqc8fYgPyuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:01:f2:59:d7:ec:c5:98:74:ae:0a:3e:65:94:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Oct 4 00:01:16 2026 GMT
Not After : Oct 5 00:01:16 2026 GMT
Subject: CN=54ddc9477914dc4bdb97fbb64ee37f3ec5339d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5a:6b:3b:8b:43:6d:14:d9:68:d1:d0:4c:4a:
7d:39:ea:fc:c8:66:e5:de:23:cb:bb:1a:aa:6f:97:
84:65:58:3f:8e:3d:41:04:ae:95:47:8e:5b:60:4d:
6e:ee:9b:0d:a3:13:7c:9d:3c:00:79:d8:f1:c2:a7:
10:c8:b9:23:c0:82:f4:f5:ce:6b:4f:76:a2:4b:d9:
3b:7f:bd:3f:83:89:79:f9:93:87:e0:00:30:2c:05:
a3:3f:68:51:4e:82:4b:b6:73:f2:8e:a3:00:d5:b5:
e5:f4:34:f5:3d:f2:34:ba:67:29:3c:3f:7d:d7:32:
5d:20:dd:17:92:fa:32:69:f9:31:16:4d:9d:ea:b8:
79:ed:4a:3b:64:3d:a4:00:9a:3e:43:11:43:8b:c6:
d5:ac:ac:8f:3d:c8:39:9e:75:f9:7c:38:5d:e0:a5:
83:aa:e1:9e:d8:17:62:62:0a:75:e7:c4:5d:6a:55:
ee:e9:ef:ce:e4:69:08:fd:d9:c0:65:d7:83:38:cd:
c4:db:d1:11:ae:7c:c4:49:06:c1:20:ea:62:d4:09:
a2:d9:f7:f9:06:f7:76:5f:d6:0f:ea:3c:61:5f:c8:
41:d9:6e:9e:ff:59:2c:02:d6:21:2d:fc:81:b7:5a:
04:93:0b:d4:9f:77:01:bc:d8:db:f3:65:23:30:50:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DD:C9:47:79:14:DC:4B:DB:97:FB:B6:4E:E3:7F:3E:C5:33:9D:23
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:18:da:60:53:e9:77:b8:87:8e:c5:11:bd:dd:bb:d4:c0:34:
17:bf:18:1c:49:c9:c5:2f:c3:c5:97:86:46:69:c1:b2:ca:43:
62:c5:6c:07:d6:c1:51:b6:f7:73:d3:25:b5:89:d4:72:82:3f:
56:57:b9:32:e0:90:0b:03:1e:57:91:42:61:03:4c:31:11:b5:
57:d7:62:ee:3a:6d:f7:b7:0f:ab:a1:ac:b6:21:2c:a2:e4:df:
ae:30:6a:0a:da:2f:0d:22:79:3c:6c:7f:35:98:05:95:94:62:
8d:50:96:b4:bf:d9:99:e7:57:29:35:a3:62:a4:28:f2:38:bb:
63:3d:36:11:61:1b:e3:31:94:7b:49:f8:7a:7e:09:e4:0f:9a:
08:b9:b0:9e:a1:ef:e0:17:0d:39:b8:42:5f:b6:e6:e3:b7:ea:
d0:d8:8b:41:de:20:04:13:66:a7:71:3e:49:ac:e8:d9:89:4a:
8e:50:20:b2:8d:09:59:b1:f5:4d:28:66:46:41:a4:80:ab:70:
bf:fa:59:42:8c:95:1d:0d:9b:26:41:a8:18:ce:31:1b:95:cb:
8e:66:a3:0f:76:9c:97:be:da:a8:d3:04:81:37:38:0e:eb:53:
fb:ca:28:1a:a7:3e:88:ab:d6:d5:4d:44:c5:a9:9a:d1:a5:76:
56:4d:54:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:10:56 2026 by rpki-client