Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: RNiU8REsaXGuttEzgpFEWrdlm6EY3dhBHxkE4Vsv2Eo=
Subject key identifier: 62:10:8F:A2:70:CB:66:1F:BE:9E:01:02:36:24:64:6E:8C:0A:66:F3
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 01A06E0369D6CAC26AB05071B202D3F381E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 1A38
Signing time: Fri 04 Sep 2026 20:01:52 +0000
Manifest this update: Fri 04 Sep 2026 20:01:52 +0000
Manifest next update: Sat 05 Sep 2026 20:01:52 +0000
Files and hashes: 1: Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa (hash: QbDgZoN3ZU6/bS/m4FLoXm7lSijDZPcbyRN3YX/mppU=)
2: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: iO72t3k0jotmfRPp5zWNF3XUHwU5uzie0lPj3sKpZ10=)
3: hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa (hash: ZhalI/LOgKiAuv67zXxSUEKRpEQkU7//oKdzXd9ydyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:69:d6:ca:c2:6a:b0:50:71:b2:02:d3:f3:81:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Sep 4 20:01:52 2026 GMT
Not After : Sep 5 20:01:52 2026 GMT
Subject: CN=62108fa270cb661fbe9e01023624646e8c0a66f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:98:b5:b9:8a:3d:34:d5:e0:87:f5:08:61:
bc:15:e3:bd:ab:46:8b:a8:b0:53:5f:e2:60:2d:00:
d6:d8:22:b7:37:ab:33:38:83:bc:21:c4:47:8b:fa:
67:ea:af:74:91:5a:7d:af:0a:44:50:2b:fa:2f:0f:
7f:cf:fe:88:ee:41:8c:aa:0e:1f:ee:e0:4b:12:ca:
90:a4:48:0a:fd:d9:cf:0a:a6:1d:c2:a6:82:af:6c:
c7:e2:0b:df:c7:42:a1:0e:9d:6e:97:7d:f5:2c:ce:
3d:72:91:29:3e:5d:c3:bc:07:07:b3:51:d6:07:1c:
8d:e2:6e:d3:ec:d9:5e:d8:45:26:8a:f5:14:96:98:
74:18:4f:6d:d6:02:fd:b7:1d:41:df:87:f7:5f:5f:
fb:57:88:ba:12:46:4b:cb:b7:56:5c:dd:99:a7:83:
2f:88:1c:bd:8d:ab:ef:37:5e:ad:81:6a:ff:6d:ac:
5a:41:f8:f3:da:b2:7a:96:ca:74:8e:11:8d:5e:12:
05:80:09:08:7e:16:58:83:11:83:98:ce:53:c7:9d:
2d:3a:00:9a:da:82:1f:14:a6:f9:29:a5:7f:7b:02:
16:70:5a:4c:6c:10:0d:05:70:7b:d5:1d:7b:24:19:
8f:99:89:a6:a1:fa:b3:86:91:95:01:ac:8e:ed:45:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:10:8F:A2:70:CB:66:1F:BE:9E:01:02:36:24:64:6E:8C:0A:66:F3
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b3:06:48:0c:61:67:49:39:e0:42:3a:d4:76:5c:11:64:42:
6e:62:ea:0f:9f:1d:7b:9e:d3:0e:82:8e:68:41:1a:ee:12:2d:
ab:8f:e0:72:5d:b6:e1:6f:c1:fb:47:25:8d:f7:f9:40:33:01:
50:37:91:38:98:da:48:24:fd:14:65:bd:26:bc:d6:fb:1e:32:
e4:d7:a2:51:8c:4d:67:99:89:f8:6e:21:21:16:29:0c:76:58:
d8:1e:78:16:db:ec:dc:3d:f8:ee:05:ea:3f:cd:df:ef:91:ae:
b0:00:16:78:de:ea:4a:94:02:72:56:fd:ab:c4:53:d2:44:c3:
26:9e:14:3b:bf:b5:63:9f:ab:aa:3a:a0:0e:d8:c5:c7:44:eb:
54:67:af:a6:e0:81:56:35:d5:7f:a5:bc:91:d5:80:05:87:08:
bd:01:00:92:58:33:9f:c3:2e:5c:d9:01:da:6a:81:e5:be:0c:
b7:f5:de:37:3e:d4:05:d1:22:98:a9:bf:2a:40:c6:fc:06:76:
af:97:f0:62:7c:24:ba:d2:41:c8:62:28:88:20:50:e8:e3:66:
5e:5e:d3:1d:33:e7:3b:a6:fb:6c:43:35:83:6a:3a:66:bc:99:
ba:d9:a7:1d:79:81:88:dd:26:4b:ef:3a:6b:3e:dc:e1:eb:4c:
b3:55:9f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:17:48 2026 by rpki-client