Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: 17WbCu8HPXVXYccmU53I23+PXZU0+sy1/Zi37cz/DYI=
Subject key identifier: 89:A0:7B:B2:E4:B0:D4:26:89:C0:BD:AA:0F:CC:AC:26:92:FE:0D:F3
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 01A17A720653EBF51F4C1F5698D9217EA11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 1AC2
Signing time: Mon 26 Oct 2026 23:00:55 +0000
Manifest this update: Mon 26 Oct 2026 23:00:55 +0000
Manifest next update: Tue 27 Oct 2026 23:00:55 +0000
Files and hashes: 1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: twj3a/NXB9SkN7caOCHIvBRTJOzAhoQjmqTgXAz1UZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:72:06:53:eb:f5:1f:4c:1f:56:98:d9:21:7e:a1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Oct 26 23:00:55 2026 GMT
Not After : Oct 27 23:00:55 2026 GMT
Subject: CN=89a07bb2e4b0d42689c0bdaa0fccac2692fe0df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:12:98:65:46:4e:2f:a5:ee:a7:8d:dd:46:
52:d0:98:d3:d3:a4:91:b0:5b:19:e9:30:53:1f:ff:
51:af:ac:d5:20:23:98:57:1b:91:b4:c7:2e:fe:db:
58:f2:40:8d:0f:45:b0:ee:d1:c2:e8:d8:a0:4c:33:
9a:80:cd:54:8a:3d:4d:89:f9:dc:8b:36:e6:8e:66:
3d:ab:5d:54:54:14:29:24:d0:c3:16:24:56:e0:a1:
5c:e5:6f:1e:3a:7a:c5:2b:34:5e:9f:fb:4f:66:a1:
d1:25:e6:2b:b5:ca:ea:72:0f:28:67:2f:9d:53:ec:
1c:31:8d:32:85:ce:a9:0e:34:84:36:15:b8:85:04:
95:47:c7:96:e4:25:e5:49:e9:1e:61:9c:34:75:93:
a4:6f:e6:dd:63:4a:1f:b4:60:d4:69:24:47:03:0e:
55:be:56:01:16:54:9c:12:69:f0:7d:a5:d2:55:40:
8c:b6:ec:36:d1:78:ac:e0:82:af:e1:a4:92:9b:dc:
d8:52:e3:28:4d:a3:75:99:71:f9:28:ae:62:85:94:
1f:0b:c9:f9:11:c9:7e:4e:19:28:03:26:4a:9d:b1:
a2:3a:c6:62:a7:fa:21:27:19:f1:d7:63:65:0b:84:
dc:f4:ec:03:35:d8:f9:82:05:4f:a4:1d:c5:09:ea:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:7B:B2:E4:B0:D4:26:89:C0:BD:AA:0F:CC:AC:26:92:FE:0D:F3
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:95:9f:a2:14:53:1d:3b:77:11:29:3a:9d:dc:63:a0:03:c3:
d6:fe:3e:20:13:ac:e1:b2:48:6d:60:0c:85:9b:2c:c1:d3:ca:
78:65:d8:1d:9c:58:31:f8:1d:52:68:4d:d1:95:6b:e3:1b:c3:
a9:2d:77:84:ab:72:d0:18:e4:e1:ff:b2:40:95:ef:30:43:ac:
d4:6c:1e:92:28:4d:b5:e0:a0:7c:7b:ea:30:04:c0:93:2f:91:
86:25:38:e9:de:bf:6f:ff:69:58:b5:4c:5c:76:ff:56:d7:d0:
e8:f4:6d:9c:4e:6a:1a:af:a3:d0:fa:38:ec:d5:78:c9:9e:05:
82:a7:60:59:62:dc:c7:8d:f3:e4:be:e1:d1:fa:26:77:17:b5:
55:21:2a:ca:26:96:b6:25:5c:43:be:66:4a:3b:53:64:d5:78:
25:4f:3b:24:d2:ab:27:24:4b:6c:98:cc:a9:9b:01:d8:cb:ca:
58:8e:44:a3:4f:00:35:09:44:d9:bc:ac:31:a0:a5:5a:28:79:
81:96:02:3f:a8:c1:a5:09:34:48:d4:ac:7c:eb:83:60:61:84:
eb:c7:e3:bf:ab:b6:1a:1c:d9:dc:26:4a:55:e5:be:67:0a:05:
bd:a0:c0:47:57:05:25:ff:9a:33:28:35:5b:53:f6:f2:e5:34:
7f:0d:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:52:18 2026 by rpki-client