Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
File: p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft (raw, json)
Hash identifier: wGpEX89QAaUOagfCzQov7KcN0wviZjy7EQZTe/7w+9s=
Subject key identifier: 1F:4D:1F:58:D7:EC:43:3F:7E:41:AB:EF:CD:3D:57:D5:DA:3B:B3:34
Authority key identifier: A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
Certificate issuer: /CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Certificate serial: 01A1005A5147F8452A7309B882D2C53DC0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
Manifest number: FE
Signing time: Sat 03 Oct 2026 06:01:21 +0000
Manifest this update: Sat 03 Oct 2026 06:01:21 +0000
Manifest next update: Sun 04 Oct 2026 06:01:21 +0000
Files and hashes: 1: KnqLm83Z2hlavX1T4fc9lfOMzqw.roa (hash: r6PDB8P6tsiT5QQpwA2/Urm/y2YE3Dk/QLO59cu8riw=)
2: p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl (hash: 5+Qx/gNy+13+hJ0m+cv51JspCBXycu4F9W+7Z93ysoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5a:51:47:f8:45:2a:73:09:b8:82:d2:c5:3d:c0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b33aa27b6384622520a619a7999f34bbe1c9
Validity
Not Before: Oct 3 06:01:21 2026 GMT
Not After : Oct 4 06:01:21 2026 GMT
Subject: CN=1f4d1f58d7ec433f7e41abefcd3d57d5da3bb334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:9d:7d:00:14:ed:c7:c1:4b:b6:ed:39:1d:
63:79:4f:11:b6:1c:32:a4:87:2d:5c:f5:ae:46:1b:
ea:32:db:56:88:91:a8:05:18:91:0c:61:81:80:61:
d6:68:f9:dd:27:16:e6:a9:d2:0c:9c:d3:e0:94:d7:
41:68:78:4b:c4:6b:be:65:59:de:2f:e3:a2:f5:be:
61:3b:4a:cf:e6:db:b3:27:29:0d:8f:fe:67:a4:1e:
8b:55:b0:d8:7a:55:56:48:1e:81:2d:e7:0c:f3:b5:
1b:e2:dc:cb:96:f9:8e:85:63:34:4e:80:7d:8a:99:
e6:b5:3f:30:e8:37:e6:39:b1:40:04:e0:f4:e3:28:
2b:ca:c9:14:e3:57:6d:c5:94:fc:5d:a4:df:56:13:
08:3e:be:83:5c:0b:6d:7b:49:d0:0b:f7:86:85:7d:
b0:4f:93:22:aa:cf:17:d6:fc:f3:40:48:61:f2:56:
f1:df:76:fe:55:d4:cf:f0:26:5a:36:6b:58:1c:5f:
39:4f:e4:61:67:4e:a6:b9:64:10:c7:39:aa:d7:33:
8b:0f:16:c4:7a:0c:d0:2d:dc:f9:5a:40:a5:a0:35:
cd:66:51:95:57:cd:7b:3b:2e:24:4a:e9:79:aa:eb:
c8:e9:66:7e:73:44:7d:b1:1f:63:09:5f:fc:0a:dc:
5e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4D:1F:58:D7:EC:43:3F:7E:41:AB:EF:CD:3D:57:D5:DA:3B:B3:34
X509v3 Authority Key Identifier:
keyid:A7:53:B3:3A:A2:7B:63:84:62:25:20:A6:19:A7:99:9F:34:BB:E1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/p1OzOqJ7Y4RiJSCmGaeZnzS74ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:13:59:53:0b:20:72:f0:e9:d8:83:79:ba:ef:6d:be:4d:58:
b6:01:cf:30:92:c0:32:5e:d3:3d:6f:76:d1:95:18:ae:96:6f:
8a:6b:b1:e9:23:f3:81:76:c3:61:ad:3e:4c:92:f1:69:84:d0:
cc:92:00:dd:5b:68:01:74:e4:91:4b:e9:70:3f:34:27:36:69:
88:7a:2b:3a:84:3f:d4:6b:26:02:46:eb:69:83:6b:54:8b:fc:
92:c6:ef:13:a8:a0:89:46:12:b4:84:2b:e5:1e:b6:ad:7a:56:
2c:b9:44:c7:55:a8:2d:d6:24:d2:07:53:d9:f7:8e:aa:8c:96:
93:c8:5f:c5:87:05:f3:a9:25:0c:f6:92:3c:d6:a7:b8:9c:81:
d0:b8:8c:ac:23:04:2d:bb:ad:2e:1b:59:fa:96:33:62:d9:8d:
96:61:39:79:67:b1:d9:a2:38:7f:09:c6:b6:d9:8d:c0:15:bb:
2e:5d:62:87:e3:3f:e5:f3:af:e6:ee:86:8c:65:06:d8:d1:1e:
3a:2e:39:68:93:ee:c8:a1:4c:a4:6c:d7:3d:d3:ba:c3:dd:f2:
36:8a:b5:2b:84:19:8b:51:4b:f5:c5:b1:bb:33:d4:63:72:5c:
b6:fd:58:51:76:42:5c:49:50:e9:bd:7b:14:8c:12:79:98:ce:
9e:98:65:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 16:01:15 2026 by rpki-client