Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File: RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier: P4lBBfnuf8PgXMQ2ugLSeD0dHHWliq+c0q+/KmIbwWU=
Subject key identifier: FF:71:D3:37:3B:7C:B1:7A:2C:AA:73:27:74:60:55:27:3A:35:BD:F2
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer: /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial: 01A1A97129BBA22BEB7B4BA59120BC7491E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number: 1ADA
Signing time: Thu 05 Nov 2026 02:02:08 +0000
Manifest this update: Thu 05 Nov 2026 02:02:08 +0000
Manifest next update: Fri 06 Nov 2026 02:02:08 +0000
Files and hashes: 1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: K7CFEhZm+AWuQ53UJMc+7iQZw/AUxsaI4c3bfzpLdxo=)
4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:71:29:bb:a2:2b:eb:7b:4b:a5:91:20:bc:74:91:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Validity
Not Before: Nov 5 02:02:08 2026 GMT
Not After : Nov 6 02:02:08 2026 GMT
Subject: CN=ff71d3373b7cb17a2caa7327746055273a35bdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:fd:42:a5:19:9b:b3:f9:fd:cd:81:f7:8c:
24:1e:6b:cb:3e:ab:8e:20:96:41:f4:ce:79:65:ba:
d9:d2:d0:92:fa:60:b3:be:f2:35:e2:e0:0d:1b:4e:
c4:b8:c4:44:1d:8a:d2:0a:44:68:58:95:e5:f6:90:
48:d1:71:45:76:db:d0:9a:fc:1c:df:e6:88:e5:ee:
3d:9c:9e:7e:ca:36:44:66:84:1f:f8:84:ec:89:1f:
2c:f5:c6:25:9a:48:83:2b:94:f5:0f:1f:f2:8f:a1:
8d:56:ae:54:6f:59:08:d9:d5:b0:51:93:86:d7:c3:
f2:0d:9b:19:f7:ce:26:f7:87:ed:8b:79:a7:88:a7:
73:d3:48:fb:87:f7:24:06:32:a8:7e:ba:5b:e5:6b:
7e:8b:7c:10:5e:9b:94:06:0d:19:a8:fe:b9:f4:ae:
b3:d7:d6:17:b6:fd:fb:38:d8:f6:19:0d:35:37:4e:
62:69:b4:34:f5:eb:9e:06:47:b0:1f:e4:fc:a1:d6:
e5:3d:38:46:54:f6:9a:17:89:ff:17:e7:aa:91:55:
ab:ae:6d:13:c1:59:38:ae:7c:3b:44:4c:10:42:bb:
31:41:3b:d7:9f:1e:bd:40:62:ae:20:40:ec:d1:c0:
99:e5:a1:14:d0:f9:33:11:e8:7e:2c:f5:78:dd:c7:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:71:D3:37:3B:7C:B1:7A:2C:AA:73:27:74:60:55:27:3A:35:BD:F2
X509v3 Authority Key Identifier:
keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b2:d4:d9:0a:ab:18:7d:96:c4:0d:77:75:93:9e:f7:98:d9:
c0:39:ac:f5:3c:4d:57:72:40:d9:cd:ed:7c:e3:d9:42:65:4d:
62:a4:48:b5:5f:87:99:d3:5c:d7:0c:9f:95:27:16:4b:ab:28:
29:d3:9e:bb:8e:4b:67:25:dd:68:dd:bf:00:2c:9d:13:7b:1b:
17:8c:ff:d3:73:63:eb:42:d7:35:e1:0b:fa:7f:05:2e:79:dc:
ea:02:0c:aa:87:56:ae:bc:3d:62:63:48:f7:f5:af:c2:1f:9b:
66:c6:da:72:0e:18:6d:32:ea:3d:83:ad:00:22:ed:45:41:3c:
d5:6a:25:b9:da:6f:93:79:ba:7e:2a:29:e5:66:aa:46:67:8e:
38:96:92:b3:a6:8d:eb:50:e4:eb:b5:38:7a:f9:e9:14:30:eb:
b8:a5:f3:d8:4f:3a:22:88:b3:39:9f:cd:52:5c:1e:cc:fb:2e:
cf:09:32:7a:72:c4:52:8f:2f:80:fb:39:9f:a0:11:c8:07:e1:
c8:82:ee:36:8d:66:42:c4:b9:53:64:02:6f:09:1a:91:d7:8b:
cd:37:c7:2a:b1:9a:a7:25:c2:84:c1:a3:a8:cb:1f:11:34:2e:
3e:31:bd:e1:a4:e5:fa:cf:f6:38:08:5b:f8:4d:7d:6a:c3:31:
75:c7:03:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:47:43 2026 by rpki-client