
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
File: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft (raw, json)
Hash identifier: 7fG9BUadWuFRh0FJN8aQHsz08XtU+4I2ZPBNW/MCOkg=
Subject key identifier: BF:84:47:F1:B6:85:C1:07:77:A9:3F:05:59:0A:D0:BB:1C:A1:93:8C
Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114
Certificate serial: 01A10AA7143988D1D4FAF499D59CB0D9B705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
Manifest number: 0DD6
Signing time: Mon 05 Oct 2026 06:01:24 +0000
Manifest this update: Mon 05 Oct 2026 06:01:24 +0000
Manifest next update: Tue 06 Oct 2026 06:01:24 +0000
Files and hashes: 1: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl (hash: fZ0+EppxYbxovtefjQdfqRh76F27pLpQbPkln1/uBQ0=)
2: ZRtJ06zDF-x6e7hZrwH9g5MJ3wY.roa (hash: WcjDPDlk98u+n1T1FkRZjQvHjiER+xJZpFWL/kzuHtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:a7:14:39:88:d1:d4:fa:f4:99:d5:9c:b0:d9:b7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114
Validity
Not Before: Oct 5 06:01:24 2026 GMT
Not After : Oct 6 06:01:24 2026 GMT
Subject: CN=bf8447f1b685c10777a93f05590ad0bb1ca1938c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ee:2d:cf:a6:b3:54:db:bb:27:73:cc:43:24:
c4:39:eb:de:00:1d:9e:31:b1:45:00:2b:10:df:c0:
d4:56:24:ad:ae:9a:37:04:35:8a:77:b9:d9:46:32:
a2:2b:7b:39:2e:63:78:a0:b0:07:73:09:32:ae:38:
7c:db:2a:b6:4f:a5:6d:01:24:c6:46:0a:b6:b2:03:
59:d2:e7:81:27:1a:83:98:33:95:dc:91:c3:2d:5a:
8c:a7:00:c4:c8:02:3b:04:c0:23:3c:1d:ce:f2:b6:
0e:5d:4f:d6:db:6f:f9:57:42:19:fe:bd:cb:0d:d1:
ab:4b:7e:30:b0:f1:07:b3:b4:3c:89:e4:0c:5f:df:
4c:56:44:a1:9b:2a:9f:79:9c:5d:6c:e8:0c:9f:42:
61:1f:a8:7e:b3:3c:9f:f3:fe:52:7b:78:7b:dd:0d:
e5:1f:9c:70:84:5a:35:c8:c7:4d:e5:0b:c6:a2:86:
a3:9e:43:d9:8e:61:36:f6:73:22:aa:a6:7a:ec:58:
d9:69:e1:88:76:ab:74:d1:07:04:8f:45:46:ef:41:
55:c4:22:9e:6e:cf:17:1b:b1:fd:6c:f0:94:90:7c:
fb:74:b4:03:5b:cd:bc:5e:d0:52:f8:08:62:4d:b4:
be:96:35:a3:bd:f9:36:b8:3f:33:91:2f:19:4c:96:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:84:47:F1:B6:85:C1:07:77:A9:3F:05:59:0A:D0:BB:1C:A1:93:8C
X509v3 Authority Key Identifier:
keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:03:bf:a3:ba:71:3e:9e:e8:42:72:fc:6c:80:99:23:0f:bf:
10:38:66:aa:27:e6:56:ae:0c:4a:fd:42:cf:42:5a:01:7c:f1:
36:ac:2e:2b:e5:9b:be:c5:92:06:25:24:be:86:18:23:7b:a3:
4f:75:8f:f7:c1:d0:52:16:f5:63:7f:67:ef:e4:4b:77:3b:0a:
74:57:82:0f:50:21:d8:5b:09:18:11:3a:45:eb:c7:b4:93:87:
04:66:d7:6a:80:e9:ee:ad:5d:49:11:9b:95:52:ee:ea:d9:a9:
6f:4e:f1:11:48:40:93:23:c0:5c:9a:02:e4:50:a8:ce:af:79:
c8:f7:7d:a7:86:c3:1a:76:38:a6:d6:3d:cb:f9:07:56:1b:12:
79:3c:ef:6b:e5:9e:ed:13:8b:dc:6a:e4:32:f2:54:10:7e:b2:
43:ce:d0:8d:61:c0:f5:52:35:3b:40:25:b3:2a:4b:46:28:e8:
78:14:50:89:2b:45:c4:af:3c:61:65:03:f2:ee:16:b0:96:d9:
f8:5f:1d:79:f7:0e:3f:49:f3:5b:6a:c0:c3:43:4b:9e:a9:18:
3c:da:58:f2:33:35:1d:8d:32:cb:95:d2:ad:35:ad:ca:d9:69:
21:48:b9:c1:f5:40:a0:38:04:96:86:0c:73:45:ea:32:ad:fb:
23:f2:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:41:18 2026 by rpki-client