Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File: 0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier: 9P923LF9eaRT5/UHNmc/OQfGpwZ/k/YD6+QDXWm545s=
Subject key identifier: 66:34:88:2B:8B:C0:27:AE:8B:66:0C:DC:60:BF:8C:50:B5:31:AA:03
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 01A0CD7E76ABD2617EFDA695E1B2ED435D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 09:00:12 +0000
Manifest this update: Wed 23 Sep 2026 09:00:12 +0000
Manifest next update: Thu 24 Sep 2026 09:00:12 +0000
Files and hashes: 1: 0jE3hZkv3e72FXBQNOB1Z87I7hE.roa (hash: ufiFlOn3uZQmY7BK2PstScG7xVreKj7F3Ayx+q4ondk=)
2: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: 76Lt2ypXz9+d/GsV9WXTaMd2eEPlWQPw46o6b66/i4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:76:ab:d2:61:7e:fd:a6:95:e1:b2:ed:43:5d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Sep 23 09:00:12 2026 GMT
Not After : Sep 24 09:00:12 2026 GMT
Subject: CN=6634882b8bc027ae8b660cdc60bf8c50b531aa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:2b:c0:03:0e:f0:c2:f1:eb:f1:d0:57:9d:
db:d8:cc:0b:83:5e:4f:65:90:56:a6:3b:12:d2:1d:
48:2a:7d:db:97:ca:44:6d:19:60:ac:62:d7:e2:d1:
89:e9:04:cf:a6:f8:26:c5:78:80:8b:9f:10:99:a4:
f7:40:6a:eb:18:62:86:57:24:f7:f5:59:3d:ae:80:
eb:d5:82:d8:0f:b1:bd:fe:b2:d1:00:30:d2:c2:8f:
09:06:c1:9e:e3:e9:e1:9f:62:81:6f:71:e2:4d:9f:
ca:08:2e:f3:79:40:d1:c6:bb:b7:cd:46:a7:3a:f7:
75:20:2c:b1:e8:9e:88:64:4b:af:7a:3e:ba:bd:00:
c4:03:6a:9e:d3:42:97:ba:dc:33:03:bc:ee:74:09:
b4:7e:10:dc:6a:aa:63:23:39:c0:33:8e:81:5a:f3:
c9:c4:f9:4f:be:02:c1:c4:9b:fe:c3:d4:72:f3:ae:
38:7b:67:7d:d1:2c:f5:b0:fd:20:8a:e4:2a:10:17:
14:a8:82:3f:e4:b7:49:09:e8:e7:d0:d4:15:ad:16:
e6:af:e4:ab:63:78:6b:e3:28:f7:87:aa:cc:7b:f9:
6d:3a:1b:ee:84:57:de:e4:27:d1:94:d7:c9:8b:da:
76:ab:b9:60:c4:36:4e:5a:a4:bd:be:53:61:27:ab:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:34:88:2B:8B:C0:27:AE:8B:66:0C:DC:60:BF:8C:50:B5:31:AA:03
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:07:cc:6b:ec:f2:03:64:1a:e3:0d:c1:e8:c3:c0:54:ec:d5:
74:07:39:3b:34:08:35:41:52:f5:5f:18:7f:86:14:53:ac:6f:
32:5e:fe:66:65:7c:59:23:2c:e2:68:3e:a1:23:98:72:68:82:
1c:b5:48:38:65:24:40:6a:2d:e7:19:08:cf:13:f8:d6:44:81:
72:e6:46:5d:3d:e5:08:ee:2c:13:e4:75:43:be:00:4a:e6:15:
a3:06:62:3f:d3:a8:74:66:5c:c9:fc:23:29:c9:d4:c8:45:7a:
8d:40:ee:ee:69:6c:70:ff:1a:50:5b:fe:4c:46:21:06:d9:ee:
7d:a7:de:8f:8c:19:8e:db:7a:d5:5f:01:20:65:13:66:32:22:
f7:1d:bc:98:e3:f5:21:1e:6f:dc:33:8d:2c:74:9b:9a:f8:42:
6c:5f:15:44:37:53:e8:1a:1c:f8:a7:66:4a:d7:5b:70:87:86:
5b:9f:b5:a4:b9:d9:f7:09:49:6f:c9:15:c5:90:3a:3b:37:99:
54:90:b5:e3:cf:a9:d6:55:f2:9e:9e:59:e8:b9:74:b5:ea:6d:
98:08:3d:e1:60:e5:c1:18:09:f1:96:99:c0:4f:4a:e4:6a:7e:
7e:d6:97:fd:84:bf:42:35:53:b6:68:9d:fa:2c:ee:bb:ce:71:
9c:f6:e5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:59:58 2026 by rpki-client