Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: nl2z/oSHSuFfq00ccEwkKDbsIiTE6w8egnV+CLHNOXg=
Subject key identifier: 1E:D0:C6:D1:E6:E2:42:8E:BF:87:DE:E7:1C:80:02:40:47:A4:65:D5
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 01A17AA8EB73655255CBD6049C8EA17D12FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 00:00:52 +0000
Manifest this update: Tue 27 Oct 2026 00:00:52 +0000
Manifest next update: Wed 28 Oct 2026 00:00:52 +0000
Files and hashes: 1: 440C9nJzfAwzFQHbbTSsKGKGkig.roa (hash: 9GaUDae42NdjzGOSW1+fUpuBNX675/CDIy2pT/BeZSI=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: 8b46INdVCpiOaa6iRJCUAlL3JMmuJ6bR7FUHXxRL6PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:eb:73:65:52:55:cb:d6:04:9c:8e:a1:7d:12:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Oct 27 00:00:52 2026 GMT
Not After : Oct 28 00:00:52 2026 GMT
Subject: CN=1ed0c6d1e6e2428ebf87dee71c80024047a465d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:e9:2b:c7:5e:56:da:76:64:98:d3:75:b7:
a6:9b:10:08:53:9a:74:bb:7e:3f:86:7c:c1:bf:7a:
29:d5:96:bd:e9:12:60:18:66:4c:10:98:36:b3:39:
bd:c8:e9:f9:5e:21:6a:7a:5a:ef:6f:2a:4b:e8:da:
4d:91:fc:ca:b3:99:21:4f:ac:07:c2:48:1b:22:f8:
34:19:6a:b0:0c:a1:2b:23:43:39:9a:2a:40:86:6e:
ba:ea:e8:77:79:1c:f4:23:67:0d:2e:01:1a:37:49:
e1:37:1c:ee:87:24:a1:d4:ac:27:ed:52:a5:16:d1:
b7:f6:3c:25:7f:ba:fd:4b:6a:78:61:22:f7:28:fb:
fe:c0:9a:b8:e8:37:9e:fb:73:bb:14:20:19:15:fc:
9c:2b:db:3f:83:c6:61:a9:bc:46:66:94:fc:56:27:
c6:03:cf:be:0f:df:ae:a5:1d:7b:4b:07:00:e3:fe:
a6:85:57:98:7f:31:09:b3:38:95:2c:e8:77:61:b6:
34:c1:b5:62:75:81:a8:d5:65:1b:46:d1:f9:8c:2a:
ae:dc:46:3f:2c:e8:84:4b:d8:60:71:f4:64:38:ec:
f6:a8:00:f9:30:d2:ea:8c:18:ca:d4:f3:bd:cd:47:
8f:2f:d1:2b:d6:0f:de:98:ab:0c:c9:3f:f5:8e:3a:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D0:C6:D1:E6:E2:42:8E:BF:87:DE:E7:1C:80:02:40:47:A4:65:D5
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ba:af:1b:95:12:c8:73:33:de:c1:00:7a:f6:a9:01:bd:52:
4a:3e:59:d7:fe:21:7f:92:a3:83:0c:ba:78:80:55:98:98:2e:
80:5c:45:33:84:17:97:98:dd:38:61:52:6c:68:60:ac:c5:8b:
95:b2:4b:5c:4f:db:ba:84:36:f1:0b:4d:7d:2b:b9:30:5c:3d:
f6:d8:02:85:6f:55:5b:25:34:44:63:f8:81:c5:1d:64:28:d5:
9c:91:80:92:84:de:80:3f:01:9f:f7:27:b0:2d:ee:9e:b6:84:
c8:67:a2:46:14:98:78:76:ea:41:07:f5:c7:8e:92:2b:52:65:
17:96:e5:61:8c:de:12:88:98:59:7c:21:a9:ff:f8:9f:51:a3:
86:16:5c:b4:73:e5:c0:29:63:ba:a7:aa:26:d5:a9:9e:27:ff:
3e:88:0c:a1:1e:b3:ed:52:31:d9:22:fc:53:9b:c8:fe:a5:7d:
b3:dd:4f:62:87:29:d6:53:3a:b3:2d:a5:ad:6f:bd:cf:b4:4e:
5a:9a:26:c0:23:21:99:54:70:2b:64:d3:22:d3:8d:81:b8:79:
c9:23:25:90:27:fd:20:0c:a8:9b:59:88:38:2a:25:d8:00:a0:
af:fa:5e:7d:54:88:95:ab:02:86:95:c5:c2:9c:4b:d6:18:5a:
79:98:e4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:37:16 2026 by rpki-client