Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: ohMv+gyJl5kFf7DmB2mYIznjknMJuMKJ3ob2P3BdQ+A=
Subject key identifier: AD:C4:7D:B6:B3:E6:D9:B4:23:10:1C:DF:DE:2A:B5:17:29:E1:36:D0
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 01A17695653BFEBE64BE40599162D2401889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 1AC1
Signing time: Mon 26 Oct 2026 05:01:04 +0000
Manifest this update: Mon 26 Oct 2026 05:01:04 +0000
Manifest next update: Tue 27 Oct 2026 05:01:04 +0000
Files and hashes: 1: Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa (hash: QbDgZoN3ZU6/bS/m4FLoXm7lSijDZPcbyRN3YX/mppU=)
2: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: 8WVuLQJqNb6bNr0LAbYpY8ZIA7VfbgXmCUR3WdZ8CTs=)
3: hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa (hash: ZhalI/LOgKiAuv67zXxSUEKRpEQkU7//oKdzXd9ydyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:65:3b:fe:be:64:be:40:59:91:62:d2:40:18:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Oct 26 05:01:04 2026 GMT
Not After : Oct 27 05:01:04 2026 GMT
Subject: CN=adc47db6b3e6d9b423101cdfde2ab51729e136d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:10:ec:b6:6e:23:b2:84:b5:58:e5:99:ed:
ab:c5:60:e5:35:d0:ab:9a:8d:19:77:c8:46:99:67:
e9:42:bb:32:73:a7:bd:2b:88:aa:2a:e5:7e:43:03:
e9:c3:42:91:60:13:41:e2:43:6d:9f:38:36:d6:4a:
b5:87:b2:3b:82:fd:f9:43:61:92:9b:37:5f:be:93:
8b:80:8c:81:b7:30:16:11:22:43:31:a7:14:a0:51:
ed:6c:27:d0:7f:a7:05:97:51:35:c0:5f:52:45:34:
a7:d2:d2:57:7f:ea:41:1d:9e:77:ea:4c:4e:f3:9a:
8c:e3:9f:6a:72:7b:ad:79:fe:24:42:a2:82:02:ea:
bc:ef:4f:3c:07:69:cf:07:26:a1:e8:e6:3b:f9:b2:
c4:25:54:7b:02:b9:01:73:61:af:74:ae:61:dd:f7:
a9:21:a6:c6:b5:a5:02:f9:45:6d:6e:61:b4:79:c9:
2b:54:d5:6f:70:e8:9b:96:63:e6:78:ed:57:7f:71:
cc:f4:93:05:b5:4c:4e:c5:6f:6e:b9:54:de:8b:6a:
71:d2:e9:17:3f:69:09:dd:17:71:ac:4c:b6:f4:aa:
3c:ba:91:55:f8:0c:0f:77:81:32:19:38:9c:30:91:
1c:f6:cc:14:3d:b1:0d:0e:35:7d:f6:a9:0f:fa:59:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C4:7D:B6:B3:E6:D9:B4:23:10:1C:DF:DE:2A:B5:17:29:E1:36:D0
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:16:00:12:6d:e3:8f:94:6b:1e:56:7d:79:17:64:01:d1:55:
65:7c:e0:77:b3:b3:8a:de:af:7c:e2:aa:b3:2c:ea:b3:c2:65:
1d:4e:9b:a3:1b:cb:69:be:d3:81:22:f7:57:25:63:10:24:de:
f9:09:3d:b4:1d:0e:d9:ea:a0:00:19:0e:71:38:cf:59:af:c3:
01:b8:69:1f:1b:09:f7:86:65:23:a4:e8:a7:8b:d3:45:3e:76:
a7:b0:fe:14:e0:a5:91:30:c6:63:87:13:16:1a:32:e4:e9:1a:
75:b7:13:86:2e:7d:a9:88:4b:5c:5f:37:7a:b6:4a:ac:8b:62:
7e:44:3c:37:e9:c4:e1:70:12:a8:ee:eb:e6:9e:64:6b:e3:c8:
64:db:2a:65:58:45:bb:37:1b:5f:2a:09:f0:39:78:50:77:d8:
79:ef:7e:d8:ed:82:38:4f:22:72:f7:01:c4:6f:24:75:4b:33:
c2:dc:b4:03:32:c1:9a:68:31:fc:9b:6b:aa:73:db:1a:13:e1:
01:cc:12:26:6f:86:2b:59:0a:88:21:d8:e7:c9:8e:15:b2:5f:
b5:22:ac:7e:0d:43:23:fc:b1:2d:cc:31:c9:76:f9:93:4d:e1:
5c:44:39:fe:db:d6:ca:2a:a3:fc:2f:34:c0:55:a8:77:60:af:
41:90:32:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:42:36 2026 by rpki-client