Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: 2ZZB6bOwKP7eF+e/eMx9TinNIRaJTV+ONuPhoO+adSw=
Subject key identifier: A0:B8:F6:09:3E:BF:1A:9B:82:8A:55:A2:51:86:51:3D:E7:07:92:12
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 01A193C4093041D3AA36B20CB2F0F2C8542B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 04DC
Signing time: Sat 31 Oct 2026 21:01:00 +0000
Manifest this update: Sat 31 Oct 2026 21:01:00 +0000
Manifest next update: Sun 01 Nov 2026 21:01:00 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: x7URa3LXmkU8hbHuSwLKNXiAxttMz0tUQSVWq6Zcgl0=)
2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=)
3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:c4:09:30:41:d3:aa:36:b2:0c:b2:f0:f2:c8:54:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Oct 31 21:01:00 2026 GMT
Not After : Nov 1 21:01:00 2026 GMT
Subject: CN=a0b8f6093ebf1a9b828a55a25186513de7079212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:b1:b2:e0:28:52:ae:cc:3e:cd:76:a1:9e:
d8:0b:1b:b2:15:5f:03:fd:9a:7a:86:37:b8:df:84:
fc:16:08:a3:4f:5e:1e:52:cc:a5:a7:65:6c:99:2e:
53:83:bf:48:2c:58:d1:66:7c:f4:54:03:f6:fe:58:
77:09:fd:6f:3f:1b:bf:ad:89:f6:60:75:ea:d9:3b:
ad:08:73:d4:3a:ca:9a:a8:ab:23:cf:ea:d6:55:e0:
b4:53:99:5e:a5:0a:b0:79:7f:5f:5d:11:34:9b:60:
8b:1a:6c:0e:8f:83:92:20:d1:fa:1d:2e:51:36:13:
3f:fe:76:e7:2d:ff:8d:14:bf:02:9c:56:db:5d:7c:
8d:07:a2:f6:1e:d3:37:52:b1:78:a1:17:3e:6c:92:
9a:ed:7f:eb:8d:a7:cb:d4:c6:13:34:f7:b9:62:be:
b2:19:1a:f9:59:39:2a:87:3a:09:0f:fd:0e:52:de:
68:11:cf:a8:e6:31:a8:9b:7d:09:ef:14:30:a0:24:
76:41:4f:02:83:e0:2c:d5:0d:79:c9:29:c0:6f:30:
01:24:b1:9a:34:8a:01:41:03:a8:c1:ed:19:88:d3:
ed:c3:69:65:70:71:a8:d1:5b:29:59:5f:95:20:46:
97:3a:11:1e:31:d4:96:f6:f9:05:0e:61:66:e3:6f:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B8:F6:09:3E:BF:1A:9B:82:8A:55:A2:51:86:51:3D:E7:07:92:12
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:74:58:03:59:24:83:15:10:72:2d:f3:a1:fc:9e:e8:2a:70:
3c:18:4e:9d:ce:ed:bc:02:17:dc:18:e1:02:0e:9f:da:25:30:
01:93:1e:ad:1e:4b:a5:fe:6f:e3:67:66:81:b4:92:9f:47:0b:
dc:58:16:55:d1:cb:ac:44:3e:2c:ca:12:05:b4:d9:8b:a3:a7:
6e:b3:09:50:b8:2e:96:34:41:15:d0:1d:fe:98:00:29:e9:86:
7d:10:ad:e4:32:a0:51:0d:44:a3:ad:26:23:9f:e4:97:78:d2:
2e:53:9a:02:e3:33:14:20:f6:01:9c:ee:21:ec:3e:1d:a0:50:
f4:ce:dc:62:80:40:c3:bd:9d:b5:da:58:f5:30:7c:db:68:24:
aa:9a:12:81:46:8e:3f:50:4e:ab:ff:15:5b:51:60:c3:76:d8:
78:3c:c7:d7:2b:48:2b:20:fc:c0:e3:ae:04:4c:05:10:be:41:
e9:ff:bc:07:69:3e:69:9d:c2:d0:71:8c:a1:42:b1:89:e0:38:
75:79:26:09:eb:9b:be:92:74:65:25:a1:60:2e:61:8b:21:6f:
f1:15:66:d3:84:e1:02:8d:70:ee:e8:64:21:00:1a:c2:bf:6e:
42:e0:59:7f:4b:48:68:6f:fb:54:17:0a:4d:3b:2d:e6:b9:7f:
11:0a:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:49:23 2026 by rpki-client