Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
File: ND2aiq7MjjRw4ShmzmdE256WEVA.mft (raw, json)
Hash identifier: 4R5f4T3syd5Q6fFHeqeyV+qUFz7HXhONgCvBR/yhTj8=
Subject key identifier: 86:A4:40:77:9D:71:33:EF:AB:5D:70:43:99:C9:0D:F8:B8:BA:15:49
Authority key identifier: 34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
Certificate issuer: /CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Certificate serial: 01A17BF1E2E7D9D3BF78EACDDB806DA03F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:00:12 +0000
Manifest this update: Tue 27 Oct 2026 06:00:12 +0000
Manifest next update: Wed 28 Oct 2026 06:00:12 +0000
Files and hashes: 1: ND2aiq7MjjRw4ShmzmdE256WEVA.crl (hash: ZktcpnRLFDUa75xg67f1LlMgVRbI06yq5xTh8E7fsQE=)
2: k8BbPKe3zDaEG8erTcVGfXUzWz4.roa (hash: FGXIVoVE914VJSU7fecgdSgEJFlK859BoDPJSA3aMsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f1:e2:e7:d9:d3:bf:78:ea:cd:db:80:6d:a0:3f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Validity
Not Before: Oct 27 06:00:12 2026 GMT
Not After : Oct 28 06:00:12 2026 GMT
Subject: CN=86a440779d7133efab5d704399c90df8b8ba1549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:80:5a:75:c7:81:42:76:60:60:39:3a:00:a4:
89:ae:35:81:c7:b5:36:83:17:bd:6c:56:70:d1:20:
7e:c0:c7:dc:4d:d4:6e:f7:81:c9:24:13:75:04:8d:
f2:d3:11:d1:2d:c3:92:c1:6e:8f:b8:44:8b:5c:bf:
c3:20:d6:e1:07:fa:d0:64:cd:fa:d5:14:04:25:8d:
71:30:fc:a9:63:e5:32:2e:3c:d4:60:b7:49:39:06:
1c:02:39:33:73:23:ec:3e:6d:a2:ed:6b:05:c9:f4:
c9:f4:22:b5:02:1f:cb:f4:e9:13:53:11:85:94:e5:
01:3b:8c:00:65:90:13:fc:7b:a4:ea:8f:54:11:a9:
cd:cf:21:5a:7d:cf:17:6a:01:21:c5:78:18:a5:8d:
4a:4b:10:7e:30:c4:d6:50:6d:07:2a:9e:8e:70:d9:
b7:79:1e:a7:93:a5:80:91:23:7b:53:f6:7e:58:79:
3b:c4:25:e0:e1:56:f4:24:aa:46:33:85:0b:eb:46:
f4:32:6d:e6:5a:33:6e:ff:94:8e:48:39:9e:27:eb:
1e:09:17:b6:34:5d:14:37:ba:5d:0f:8b:b0:84:f0:
b3:13:47:28:8a:0a:ea:eb:3c:81:f0:b6:6a:bc:62:
a5:87:49:ce:dc:86:31:5b:62:c3:2b:99:04:77:75:
46:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A4:40:77:9D:71:33:EF:AB:5D:70:43:99:C9:0D:F8:B8:BA:15:49
X509v3 Authority Key Identifier:
keyid:34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c7:86:ad:f9:66:0f:7f:f6:53:f3:17:39:10:14:e0:9a:f7:
da:df:ae:00:0a:b7:89:bd:40:de:0f:1b:61:a1:ef:04:4d:07:
97:6a:07:f2:0a:a9:07:06:16:16:8c:dd:d0:67:5d:e9:e0:ea:
57:1d:67:cc:bd:8b:30:2d:93:0a:46:da:8e:31:14:2b:1b:20:
07:10:12:2a:9a:77:da:4d:3d:bf:ab:36:eb:e5:c2:bc:77:3d:
b0:e7:4f:32:e4:f0:41:66:5a:86:27:26:95:04:60:8d:46:a6:
f0:e2:3a:f0:7c:1c:fe:21:bd:a6:d3:de:10:92:32:f0:8c:89:
26:fd:3b:78:7e:52:85:6c:09:70:dd:b4:7a:d4:7b:af:8c:3b:
b3:69:f6:57:80:a0:5a:18:c4:33:d0:31:4e:32:81:2e:8b:dc:
c9:79:a3:07:06:4a:3b:63:17:cb:e5:f1:54:35:ca:bb:2e:d4:
75:fe:44:e0:0b:60:8b:1c:4a:4f:11:e9:5a:3c:79:af:b6:1e:
16:98:71:01:bb:83:74:e8:fe:c6:76:37:9a:29:f1:07:fe:a6:
d4:c7:68:ab:5e:ea:64:d6:8e:c6:f0:1a:7b:5e:e9:72:1c:44:
69:9c:a7:3c:61:28:e5:aa:84:99:df:3e:5a:a0:14:5c:36:29:
80:cf:8f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:55:56 2026 by rpki-client