Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File: M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier: 2erCCAAFE/k881+xNpa2W7RTzXNeJxga7iogsJu9KpI=
Subject key identifier: F8:CD:69:17:A2:D1:71:58:83:F4:A8:BD:22:F8:88:E4:29:BA:1E:DE
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial: 01A17BF2E80EBD0E873D3D8C4F28BD308BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 06:01:19 +0000
Manifest this update: Tue 27 Oct 2026 06:01:19 +0000
Manifest next update: Wed 28 Oct 2026 06:01:19 +0000
Files and hashes: 1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: lsJk9AjDdSOzgELQwQaLpSCwgDCVaUfuL16+T2xGieY=)
2: O_VDSTEuqOGqu70pCxRmCW-6TUA.roa (hash: 9GMoYD3Uj1noF4pEvupjpvPMeufwxuuOufErPrD7SRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:e8:0e:bd:0e:87:3d:3d:8c:4f:28:bd:30:8b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Validity
Not Before: Oct 27 06:01:19 2026 GMT
Not After : Oct 28 06:01:19 2026 GMT
Subject: CN=f8cd6917a2d1715883f4a8bd22f888e429ba1ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:59:1f:c8:18:9c:49:5d:1a:88:7f:9d:7b:
41:9b:fc:8d:b8:24:c7:1f:00:fc:93:86:d9:49:e9:
df:3b:5d:a2:53:a2:91:d4:28:dd:3d:ca:2f:63:90:
e6:fe:d3:77:9a:ec:c8:fa:e6:bd:03:8c:3d:5f:a1:
48:2c:94:4c:f1:ea:f6:a0:96:2f:cf:11:ab:04:a7:
21:ba:a9:d9:de:bc:7a:a1:53:3d:37:1a:24:6c:2e:
ad:bb:de:f3:36:fd:54:84:5e:18:d3:54:9a:25:79:
6c:4a:26:df:c9:96:18:e3:4c:05:32:b5:90:31:cf:
a8:4c:15:ba:e5:1a:92:fb:c6:56:55:15:66:a3:e9:
24:3f:8e:17:97:db:dc:f6:7c:cd:bb:f2:5c:30:05:
a6:62:16:b7:12:ce:ab:2e:88:df:e4:b3:18:8a:9f:
62:48:8f:e7:1c:c7:61:da:70:ca:f2:1a:9e:fb:1a:
f6:8e:36:09:e2:61:37:1b:0e:a9:32:96:73:ee:bb:
94:34:0a:38:e8:c0:dd:6b:dc:4d:09:c7:af:9b:37:
30:2d:49:da:9e:a2:37:be:2a:84:6e:fc:7b:8c:41:
b7:ee:e9:e8:7f:7d:af:9a:5f:c9:7a:e0:17:87:bd:
f0:8d:4d:e5:ab:ec:33:69:f4:f1:a2:9e:91:e7:71:
b8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CD:69:17:A2:D1:71:58:83:F4:A8:BD:22:F8:88:E4:29:BA:1E:DE
X509v3 Authority Key Identifier:
keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c5:3f:19:72:5b:93:c3:b4:9f:36:2f:b3:a4:08:e0:20:cc:
b2:bc:54:24:63:ea:5d:47:e9:96:3b:4a:09:ca:ac:cd:35:8e:
c2:a8:54:8f:24:16:ab:5f:ac:74:ab:90:c2:86:cc:9e:33:bb:
b4:cb:62:61:83:8a:92:ee:9b:59:c9:81:9b:fd:4e:db:84:46:
09:84:13:e4:b2:72:aa:3b:5a:95:6a:10:f7:af:58:53:f5:75:
e0:96:23:ec:5c:37:31:fd:86:1b:ac:c7:37:3c:f2:ea:91:f2:
48:d6:fe:03:4d:41:f8:f7:49:a1:0a:c1:b3:21:50:36:b9:70:
73:5a:d3:dd:26:78:fb:7c:48:54:95:d0:95:36:75:5d:02:90:
06:29:0c:ed:4d:c6:96:33:ec:de:16:f6:a1:65:3c:d7:bc:6e:
f0:25:45:59:93:89:dc:84:93:75:27:e9:00:f0:3b:67:14:ce:
13:73:ca:73:5d:63:94:00:99:11:da:c1:40:8b:55:53:55:b3:
08:05:1f:df:6a:74:25:16:09:34:1f:b5:79:a5:60:eb:e1:1c:
ed:52:98:5c:70:62:60:a4:41:d7:9d:c8:53:9b:0c:fa:d9:17:
05:4c:04:4a:7d:79:c9:96:a5:7d:54:74:bd:77:fa:3e:65:a0:
d3:51:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:41 2026 by rpki-client