Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
File: r26u_xI8pnRG0OSUAeSVBXB44XQ.mft (raw, json)
Hash identifier: AhT9Q99VUYUYSJdfgnGByAfYQf4HBhPf2xnCf93GfvM=
Subject key identifier: BC:1F:3C:43:DA:42:5C:30:46:78:2E:E9:4F:26:9E:A9:C5:54:1E:18
Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
Certificate issuer: /CN=af6eaeff123ca67446d0e49401e495057078e174
Certificate serial: 01A182D0F6B028DCBA57BC79D6CCAB705240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
Manifest number: 0AF2
Signing time: Wed 28 Oct 2026 14:01:35 +0000
Manifest this update: Wed 28 Oct 2026 14:01:35 +0000
Manifest next update: Thu 29 Oct 2026 14:01:35 +0000
Files and hashes: 1: Toj2MXLv_0tnvaOa8SabyfyAH7M.roa (hash: LJgBJJsZvDC+Ue6FuF++Df+Q+t0hp3VFYM3vhkZt4FQ=)
2: liwxDT5LJpIXlKlVZ9n6p87PfOI.roa (hash: BOe25rjjRQ8tqwHFLqCfoig+Bv/rJP70vjeo2DPMR9c=)
3: r26u_xI8pnRG0OSUAeSVBXB44XQ.crl (hash: 8FqDhCYeXYbQ/ezqPxaVX7clqQkdv9p6XgMwy8pvPXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:f6:b0:28:dc:ba:57:bc:79:d6:cc:ab:70:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174
Validity
Not Before: Oct 28 14:01:35 2026 GMT
Not After : Oct 29 14:01:35 2026 GMT
Subject: CN=bc1f3c43da425c3046782ee94f269ea9c5541e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:80:7a:2e:17:47:37:f4:98:6e:e0:f5:70:
1e:4a:ec:7a:1d:d1:d6:6b:c3:80:8a:4c:5e:cd:f6:
14:c0:ef:c9:25:04:8a:f6:ab:16:72:70:05:70:67:
27:7d:23:25:58:d7:14:c9:8e:8b:db:11:20:99:85:
fb:1a:69:b3:7c:7e:79:b1:53:63:6e:c1:7d:61:12:
27:3e:92:cb:30:69:8c:7e:3c:33:89:0c:1b:7c:d5:
8e:93:0c:a1:9f:49:bb:e4:1f:d9:f4:8b:e5:e7:84:
63:b4:3c:04:1b:c2:87:39:f6:87:78:1a:2b:14:86:
ee:30:cf:66:04:b7:54:c0:e9:79:b4:69:fc:25:64:
26:bc:3f:1c:47:02:9c:b0:9e:ff:ae:db:51:d2:75:
09:29:6c:e6:3f:94:2f:44:f1:a8:d7:e0:aa:ba:a1:
68:35:17:b9:a6:42:54:a3:da:d0:2e:cc:75:35:ed:
ad:61:26:7b:2a:19:26:1b:21:e0:b2:a1:15:3e:b1:
f6:3b:da:a1:9b:b0:16:83:b9:0a:df:ea:21:03:eb:
cd:27:76:80:aa:c7:8c:24:80:4b:4e:ad:dc:7b:3c:
e0:d9:c6:32:a6:a1:75:57:59:52:fd:b1:e6:bb:42:
60:0b:3a:e9:00:b6:a9:29:dd:c5:8c:83:25:80:3d:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1F:3C:43:DA:42:5C:30:46:78:2E:E9:4F:26:9E:A9:C5:54:1E:18
X509v3 Authority Key Identifier:
keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d8:8c:94:08:ea:7a:a8:a9:82:8f:9e:4e:c2:3f:10:b9:a7:
dc:0f:29:6f:c5:7a:76:52:f6:92:bd:36:65:0b:a4:7b:a8:ea:
ee:da:31:ae:ac:c5:55:e2:9b:af:dc:2d:0c:fc:99:2f:b0:a7:
ab:b0:7d:ba:2b:83:4a:57:fd:89:92:4a:ec:8d:5c:81:3a:42:
d4:94:95:64:59:94:d8:af:8a:b9:53:59:66:9d:99:30:a4:27:
2b:56:76:e1:e4:86:15:df:29:f5:f3:01:68:d1:41:42:8d:4f:
0b:17:4c:20:ad:3b:c7:78:42:3a:48:a7:4d:c5:8e:37:61:ad:
ef:d6:7e:f2:f0:f7:bd:42:af:32:3d:91:63:4f:41:0a:5a:7b:
ad:16:b7:fd:98:51:38:f5:bd:d4:32:9d:68:cf:20:24:3c:a5:
01:6f:ff:10:d1:e1:6f:39:04:4c:0e:1d:e2:d0:b6:b4:2a:97:
5c:58:88:b7:8d:85:15:5b:f7:56:3d:83:b1:10:6e:4c:60:47:
85:5a:30:47:14:42:6c:62:94:d9:a0:43:04:5b:d8:42:53:86:
88:5a:af:70:09:ca:fd:0c:c1:db:bc:37:8d:89:13:a7:0e:4f:
e0:6c:0d:fb:31:48:e9:7c:fa:70:22:85:7a:19:d9:5d:45:ce:
14:38:7e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:21:22 2026 by rpki-client