Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: 7WXfXQR0M+TXDBuuwxAKPsnI775sjaKXgYPSMujntEU=
Subject key identifier: 23:B8:2C:6A:14:6A:45:26:9D:68:49:9B:57:A7:A7:C0:F7:CC:E6:58
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 01A17DE1DBEC3FCD10F924A8AEEC0A169858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 15:01:56 +0000
Manifest this update: Tue 27 Oct 2026 15:01:56 +0000
Manifest next update: Wed 28 Oct 2026 15:01:56 +0000
Files and hashes: 1: Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa (hash: Rmyhdy6TeiiXlYpWyq2MVfXDcJgMeLMhA0axqCrhBSg=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: oukBFv5/zkAOYswp1aMwIeny9wtcC7nVxQl2JA1lUwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:db:ec:3f:cd:10:f9:24:a8:ae:ec:0a:16:98:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Oct 27 15:01:56 2026 GMT
Not After : Oct 28 15:01:56 2026 GMT
Subject: CN=23b82c6a146a45269d68499b57a7a7c0f7cce658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:7e:66:75:cf:60:c7:09:bf:20:28:f4:b5:
31:cd:c5:75:d3:82:fd:7c:6a:4f:ef:64:c4:c9:91:
fb:1e:00:05:67:15:62:fa:9e:31:bb:70:13:3d:44:
49:ca:e4:14:1a:81:42:54:92:64:46:e4:f2:71:69:
a6:43:a7:30:a7:9c:dc:e5:0c:87:9f:85:5e:33:7c:
09:73:39:46:1f:31:32:3a:49:32:b4:5e:ba:ab:87:
c6:8f:e9:90:da:c0:2b:b5:ec:af:c5:1c:96:70:6e:
55:9b:48:e7:dc:02:c2:fa:39:18:82:e7:64:1f:a2:
e6:10:68:d6:51:17:30:b6:c5:50:63:37:df:16:66:
cb:9a:ec:6e:49:78:e7:dd:26:55:4b:a4:4e:65:e1:
fa:27:52:90:12:5c:59:23:e5:5c:c5:d5:fd:da:f4:
44:e4:80:1b:ab:4b:20:bf:6e:54:a3:93:ee:8a:1e:
a4:9f:45:50:f1:49:80:b6:8b:bd:7b:99:f5:4f:14:
ad:11:40:f6:1a:8b:ac:b1:36:d8:e4:e1:75:6f:97:
93:49:8f:64:ca:c5:78:ca:5b:7f:db:fc:b6:ad:07:
b2:57:ae:bb:11:34:60:08:9c:1d:90:8b:c9:9b:f8:
11:13:47:37:de:b0:49:94:9c:41:94:7d:7f:59:a5:
f8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B8:2C:6A:14:6A:45:26:9D:68:49:9B:57:A7:A7:C0:F7:CC:E6:58
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f4:45:03:9d:6f:9c:b3:74:de:27:2d:fc:34:08:0f:52:67:
9e:fc:23:dc:27:6e:58:c1:6a:11:7d:db:4f:09:10:1d:96:f7:
49:d0:38:6a:2f:7a:56:03:12:d3:48:13:64:e5:ff:79:de:28:
68:4d:0e:95:6f:10:36:d5:90:de:f3:c3:29:53:9a:4f:aa:6f:
15:88:ae:e5:96:f7:3b:cb:9f:c6:51:f8:ec:23:bb:3b:17:2d:
01:45:af:4f:4b:ab:52:fa:4d:b3:54:07:91:26:be:3e:20:19:
8f:b8:00:8d:8d:4c:6e:ad:f1:9a:87:c6:cb:f7:fd:4a:58:3b:
4e:30:13:0d:38:c2:35:87:52:07:54:ed:3c:3f:3d:24:f7:46:
57:7f:f0:d1:92:ff:88:28:32:6f:96:b6:8f:b9:cc:2c:5e:0d:
d4:60:c3:ba:bf:6e:91:68:5c:73:15:2f:07:c6:66:b8:11:c3:
7c:d6:8e:8d:9d:f3:be:8a:52:f2:4c:4c:83:ab:ee:5f:ea:3a:
23:24:8c:62:f6:c0:e9:ce:15:76:b5:47:b1:77:9d:33:87:6f:
73:34:6c:8d:fb:fc:77:70:d4:85:d4:d5:50:6a:90:3c:14:77:
50:94:ea:66:49:76:15:7d:50:a0:12:d3:6f:2f:68:f9:ec:7e:
08:77:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:51:37 2026 by rpki-client