Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: W83UA+ts4NZqjbS0k3hEmI+774k7FQGnkcRZe9NBoJI=
Subject key identifier: BD:42:ED:4F:81:46:9E:86:F2:94:04:BF:B2:19:F1:B6:45:A7:2A:78
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 01A0CAEB7559E0A02B6BE2E183AE6963790C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 1071
Signing time: Tue 22 Sep 2026 21:00:23 +0000
Manifest this update: Tue 22 Sep 2026 21:00:23 +0000
Manifest next update: Wed 23 Sep 2026 21:00:23 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: 5oGidBPWLaop/DFeo3CpfG3CozxmVYwe7slizwYRAQU=)
2: wx4jf3r0v_RD4WGbwjNb9_66YeA.roa (hash: Yg61lLQnPGGlaDhOZEVebkyWouHjvzVXcfasCV97MNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:75:59:e0:a0:2b:6b:e2:e1:83:ae:69:63:79:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Sep 22 21:00:23 2026 GMT
Not After : Sep 23 21:00:23 2026 GMT
Subject: CN=bd42ed4f81469e86f29404bfb219f1b645a72a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:cc:f8:2d:3f:b2:a5:17:5d:97:7c:14:8b:
ff:9f:85:87:50:59:04:cd:41:e3:e4:1f:82:51:08:
7b:20:18:82:df:a5:9c:31:32:44:98:56:14:ae:e3:
9f:1b:ee:a5:bf:44:65:7f:30:c0:1c:61:8f:66:80:
41:4b:01:7d:5f:61:d0:9c:f7:b9:05:93:dc:60:6d:
b1:b1:e7:90:2b:2f:1f:50:50:eb:6a:f3:73:a9:32:
d1:14:57:b5:e7:4d:ef:e0:cc:e9:d2:4f:01:e7:59:
6e:d7:c0:b6:c7:7c:03:9f:59:16:1e:99:64:17:80:
ae:9a:df:94:d6:0a:89:10:e5:ef:4a:d9:14:8c:df:
84:0d:9e:2b:8c:52:d4:26:99:42:34:15:d9:8d:85:
77:0a:3e:72:a3:ac:61:a3:7f:f9:fd:5a:8f:d1:e6:
4f:97:84:74:db:31:27:ae:51:1a:7a:b5:e9:80:89:
88:fa:b5:4d:f4:a2:67:80:88:61:b0:c2:53:4a:29:
e9:bd:7a:ba:2c:ad:13:fe:87:e9:59:00:9b:31:0a:
58:cb:74:fb:87:f3:89:91:10:87:fc:e3:3e:fe:18:
68:e4:92:41:48:37:01:18:8d:df:be:f8:73:a3:69:
59:9e:8c:bb:4e:ab:6d:8d:80:74:b7:55:c4:1a:cd:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:42:ED:4F:81:46:9E:86:F2:94:04:BF:B2:19:F1:B6:45:A7:2A:78
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4b:f6:de:97:32:8e:05:92:14:85:8c:4b:98:13:0f:a4:ce:
a3:e2:7c:3e:f1:28:b3:1b:69:b9:fd:69:08:df:0c:f4:d6:7b:
ee:a5:47:d2:a2:2f:47:dd:48:e9:8f:7c:33:66:bd:31:7e:87:
63:12:ca:23:b3:1e:73:b0:a8:6a:61:02:0a:64:1c:68:78:7e:
8e:c4:20:e9:c5:d5:db:ab:a5:37:61:58:80:a9:f8:6a:98:09:
3f:73:2a:c0:84:41:46:54:34:e2:d3:ca:1f:27:de:03:81:d6:
a1:86:9f:cf:d6:4a:5b:e1:58:77:7d:68:05:0b:5f:00:59:1c:
94:a2:ab:90:88:e8:58:ba:bc:1b:ba:c8:3c:5e:69:ef:9e:5b:
17:f2:fd:08:60:da:ff:58:92:b3:37:59:77:51:db:ce:7c:f1:
e0:71:6f:da:7c:1b:c3:62:ec:65:9f:9a:d8:54:cf:96:0b:d3:
1d:cc:9a:26:9a:a2:89:8f:2b:d2:c9:ae:ba:0e:7e:1f:d7:79:
6f:2e:5c:25:d6:be:f5:46:3d:c7:c2:a4:35:4e:80:19:df:31:
57:79:10:8e:9c:29:68:dc:c2:4d:56:9b:88:7b:3f:b0:df:e6:
74:c7:b0:63:99:ce:40:c1:b6:85:aa:f3:9d:ba:a4:74:02:df:
ff:d1:c0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:25:47 2026 by rpki-client