Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
File: d27ATX5nmIYhbQe8cijbUo88hv0.mft (raw, json)
Hash identifier: RRMiuFw+9uL3qmJGTDXBwO6NZmPXBaxYNWDPcUHbamI=
Subject key identifier: 60:DA:FB:FC:DA:AD:E1:BF:F8:E6:1F:C6:69:E4:0B:A4:63:E4:AB:2A
Authority key identifier: 77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
Certificate issuer: /CN=776ec04d7e679886216d07bc7228db528f3c86fd
Certificate serial: 01A194D6BBCA9FA2B0064557747E5F125363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
Manifest number: 0202
Signing time: Sun 01 Nov 2026 02:01:03 +0000
Manifest this update: Sun 01 Nov 2026 02:01:03 +0000
Manifest next update: Mon 02 Nov 2026 02:01:03 +0000
Files and hashes: 1: Lpu_4CJjjRoRpBzZuN-ljfAmj3g.roa (hash: LSyaosWcUjzb0ZpO921H3XJwm8c6SUFJDG48MYaBQZU=)
2: d27ATX5nmIYhbQe8cijbUo88hv0.crl (hash: xh2K3MIZSzlbPChgsiza9XsiLY2A33nd3UK2soC1dSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:d6:bb:ca:9f:a2:b0:06:45:57:74:7e:5f:12:53:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776ec04d7e679886216d07bc7228db528f3c86fd
Validity
Not Before: Nov 1 02:01:03 2026 GMT
Not After : Nov 2 02:01:03 2026 GMT
Subject: CN=60dafbfcdaade1bff8e61fc669e40ba463e4ab2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:9f:d3:d4:0a:79:6d:36:b8:bf:17:1c:bd:
3b:8b:a6:51:dd:fb:6e:fb:cc:04:e8:28:24:71:4f:
8d:2f:59:b3:a6:55:c6:4c:e3:15:f4:cb:1f:eb:02:
10:9f:62:91:7a:24:80:ae:ff:05:4b:5c:a3:26:be:
be:58:bc:fc:3c:4b:a4:4b:ea:15:aa:74:c6:79:88:
b4:5a:79:78:b4:0e:fa:ef:b3:c1:32:d3:d8:2b:15:
85:1b:6c:f6:ac:5d:79:32:55:6c:e9:77:10:a1:c1:
e0:68:a2:22:f7:70:65:b8:15:e4:65:40:97:9e:44:
f9:5e:0b:fb:5b:f6:09:c1:53:0c:a7:7b:84:02:aa:
0d:70:46:73:ec:9c:91:e1:54:08:36:75:4c:c7:32:
13:12:2b:d3:0e:3e:08:f9:12:f5:14:13:01:1f:61:
97:36:42:23:53:e9:72:8f:54:f4:96:38:72:f9:b7:
e5:6c:65:c0:40:75:93:79:7f:d4:15:40:52:6d:c4:
ab:96:86:06:df:17:b1:ef:4f:3f:57:c8:60:53:7d:
29:a9:da:72:32:0e:9f:dc:a5:13:be:e7:ee:e8:27:
4d:c2:ea:94:d4:45:88:ee:0d:cb:9f:89:62:c3:59:
00:75:83:47:1d:d0:8a:65:66:b5:63:93:9a:11:77:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DA:FB:FC:DA:AD:E1:BF:F8:E6:1F:C6:69:E4:0B:A4:63:E4:AB:2A
X509v3 Authority Key Identifier:
keyid:77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b1:1e:76:b1:c5:1f:e3:4d:4a:dc:64:6f:07:e1:ef:d6:26:
9a:86:43:0e:f6:e6:d3:3c:6a:9b:30:0b:fe:15:ae:95:f3:12:
e9:b7:e3:18:2b:02:2b:6b:f5:2f:c5:5b:a9:bf:b0:23:3b:1c:
e2:6d:57:de:5e:c8:2c:e4:a8:45:c5:ed:2e:dc:0b:ca:54:1b:
26:0a:74:45:6b:69:45:33:b2:7c:d6:8d:65:97:07:67:84:05:
9d:a3:66:5f:72:a8:6c:a6:07:e1:49:1c:e7:a7:a0:4d:b5:55:
bd:57:8d:27:bc:b8:a6:35:3d:dc:40:2f:25:e2:29:e0:79:bc:
d2:b4:8c:a7:ec:60:b6:c2:c1:14:54:84:93:84:08:13:9a:59:
fa:48:11:73:09:31:75:97:44:66:84:4a:6c:1f:6b:33:85:2e:
7c:31:19:d4:cd:01:86:75:f6:fd:f1:79:26:23:f6:40:0c:41:
84:b0:4e:52:4e:b6:db:90:ba:89:97:15:98:1e:4e:65:b2:f8:
cc:89:48:61:85:f4:34:9d:fa:5e:1d:04:fa:63:cd:57:75:8d:
88:f1:fd:a9:81:4a:63:62:10:b4:1b:2f:9d:76:82:27:6c:71:
33:3b:cd:78:cb:4a:65:74:af:eb:06:d2:93:ba:1f:d9:c5:18:
1d:f4:d3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:52:05 2026 by rpki-client