Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier: OjfQDmY/mtRjvPgH82ILgYLvVbgs+Oe6pCiONEoAHdI=
Subject key identifier: A4:D9:63:E5:18:97:BC:DF:5F:C5:A4:A7:49:1A:BA:22:AC:3E:83:67
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial: 01A16AFEF41581CD80C35078F6C29FB6241A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number: 1ABC
Signing time: Fri 23 Oct 2026 23:00:55 +0000
Manifest this update: Fri 23 Oct 2026 23:00:55 +0000
Manifest next update: Sat 24 Oct 2026 23:00:55 +0000
Files and hashes: 1: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: 0RNe06CGilyV9wRf6XA+whYdNfS5/JTxwffcOLNLacY=)
2: cQbewkFEZ4acO97jlQJ5WKuKd7A.roa (hash: nw0VsiavZiymn/xF8CuU14khn+rz47RFDCWUotkUcgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:fe:f4:15:81:cd:80:c3:50:78:f6:c2:9f:b6:24:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Validity
Not Before: Oct 23 23:00:55 2026 GMT
Not After : Oct 24 23:00:55 2026 GMT
Subject: CN=a4d963e51897bcdf5fc5a4a7491aba22ac3e8367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:53:be:c0:05:1b:2a:d1:8d:db:d0:b4:08:
19:63:d5:af:0f:e9:ec:33:3e:26:8b:8d:85:5f:60:
7f:e1:dc:24:c0:2f:b9:60:a1:1e:45:0b:4b:a0:60:
2a:76:51:7b:55:5c:d5:5b:f1:1a:3e:62:48:a6:10:
cd:14:13:ce:74:82:1c:c3:7c:03:c0:bd:ba:c4:69:
fe:1b:8b:ae:69:98:63:3d:4d:68:97:6f:2f:31:60:
2a:59:0d:5b:c9:10:df:35:e7:0b:c9:80:2a:87:90:
31:a1:9b:d0:53:13:41:b4:30:6d:fc:21:b8:8d:f7:
d9:d8:64:07:cb:34:53:f9:68:61:ce:bd:4a:82:19:
2e:fe:2f:51:7a:fb:b4:11:f1:9a:10:c3:9e:ad:c6:
92:25:0e:bf:d3:6a:cd:36:05:88:01:67:83:6a:8a:
31:aa:9f:12:48:9f:9c:58:10:ab:65:3c:73:95:36:
05:dd:ce:ab:39:77:85:41:bb:fe:51:8b:95:93:5a:
38:2c:34:01:56:41:3f:21:bd:ae:ee:59:fb:a7:57:
39:b9:3c:80:f3:4d:e8:6e:7c:53:59:3a:f6:f4:1d:
c8:b1:d3:8a:b8:2d:bc:c5:c4:3d:fa:ec:09:62:9a:
1d:b1:c8:aa:8f:b6:66:c2:3f:c3:05:ba:07:22:40:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D9:63:E5:18:97:BC:DF:5F:C5:A4:A7:49:1A:BA:22:AC:3E:83:67
X509v3 Authority Key Identifier:
keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cb:34:3d:42:f0:82:7e:74:0c:dd:9e:fe:25:8f:64:e7:eb:
0d:7a:07:a3:c9:ba:68:57:5c:a7:71:ea:ca:0e:81:82:40:71:
42:e0:ae:39:f7:ef:89:ff:7b:bd:f0:46:ad:9e:5d:0f:d5:f2:
e2:3f:83:49:f8:e7:e6:ca:83:4c:66:a5:1a:b9:27:48:4e:ba:
f2:8c:d3:f7:b9:fa:65:f8:9a:7d:27:ca:8f:66:18:b4:4e:ff:
19:51:8d:f0:6c:f4:d5:88:57:61:6f:e8:ec:a1:77:b0:1a:17:
e8:a9:1d:d5:7a:41:ef:67:19:35:f1:e4:37:a9:ba:25:08:fa:
43:97:08:d3:08:0e:35:ff:ea:9e:6e:6f:69:13:76:4a:00:ef:
e5:42:ac:91:6f:67:40:7a:5a:08:6f:80:ce:f2:28:52:e5:8b:
13:10:93:d1:1e:56:2a:e6:7f:13:58:c3:25:14:10:2a:86:16:
83:6e:77:53:f2:9f:19:c1:39:61:a5:09:03:d7:02:4a:c8:a8:
a8:83:49:bc:54:db:16:ad:a0:cc:ec:5e:f6:7c:9d:6a:fd:8d:
6f:fd:97:da:d0:da:28:0e:d7:95:3f:46:a9:9e:67:38:cd:5e:
2d:8a:53:28:1e:25:a0:3e:f7:a5:91:bb:bd:e1:a0:52:a9:ed:
5a:e0:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 06:56:51 2026 by rpki-client