Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: UfFoQ6TvRa/si43MWlHuMfMI7Ao6UB8zKknQ3TCiSdM=
Subject key identifier: 1A:93:1A:8A:AB:1C:DB:52:5D:26:53:53:8A:89:38:6D:10:47:6B:25
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 01A17E4F64659703F3EB3ECBAB463F295876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 17:01:34 +0000
Manifest this update: Tue 27 Oct 2026 17:01:34 +0000
Manifest next update: Wed 28 Oct 2026 17:01:34 +0000
Files and hashes: 1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: rU+CxtqFNzd1RR4MqX1Mc77sPbquPcA+NzUUiBFh44E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:64:65:97:03:f3:eb:3e:cb:ab:46:3f:29:58:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Oct 27 17:01:34 2026 GMT
Not After : Oct 28 17:01:34 2026 GMT
Subject: CN=1a931a8aab1cdb525d2653538a89386d10476b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:7f:f8:29:5e:42:c5:10:14:e1:77:86:60:
da:91:51:5f:ed:53:ae:b7:69:4d:47:08:fb:8a:57:
6d:cd:84:77:c3:71:e1:22:5c:0c:59:b9:dc:b4:54:
b7:73:ad:55:d0:ef:44:51:bd:96:6a:bf:fd:dc:e5:
50:da:a6:5b:43:01:31:01:4e:9f:5c:51:c1:83:21:
e0:db:30:53:50:90:5a:cf:71:2a:9b:52:38:d8:7c:
3f:0d:f1:f4:a9:0e:2f:2f:06:19:6d:9e:80:7b:44:
4c:66:af:65:81:af:9a:44:6b:08:12:c6:d3:db:46:
df:58:c2:07:8f:8f:2d:58:b6:90:63:10:ed:f6:2c:
41:50:47:43:c0:6f:72:1b:60:91:d3:7b:ef:1a:80:
e3:d8:48:b2:cf:59:1f:d5:0f:bc:cb:ae:b6:f2:81:
da:1f:d8:99:35:f9:bf:a6:d8:cc:06:49:54:84:51:
32:34:d8:5b:10:24:2a:ae:36:1c:0f:ab:74:85:0f:
86:f3:af:c4:cc:66:39:61:34:b7:74:be:8c:56:c7:
ca:5e:5a:9e:91:79:1f:37:f5:8e:99:85:7c:02:08:
89:5d:7f:56:4e:97:40:48:c8:71:21:1b:11:ab:c7:
ac:c0:1b:60:d6:2d:cb:5a:e0:0e:59:dd:14:d9:89:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:93:1A:8A:AB:1C:DB:52:5D:26:53:53:8A:89:38:6D:10:47:6B:25
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1e:6a:b5:1a:1c:3b:3e:7f:b1:04:86:33:0e:0c:ef:82:1f:
ab:0b:13:d7:5c:3f:88:fa:fa:00:65:e9:35:a7:d9:1e:60:5d:
b1:62:7f:8a:ec:47:1f:82:ba:6b:d9:4b:df:95:0b:42:fd:72:
59:2b:aa:0b:09:38:58:37:36:7f:4e:84:32:23:68:2c:d9:68:
50:a6:83:78:81:85:04:c3:21:82:23:35:2e:91:67:a3:f1:80:
93:ad:73:78:d4:2b:e0:87:3b:4f:b3:f4:ca:0d:e9:c9:58:82:
10:6c:59:2e:fb:5b:3e:6e:81:d6:6d:6c:6c:58:14:c9:f2:ca:
b6:37:86:d0:e2:31:d8:13:4f:c3:01:0b:34:ae:17:2a:5a:80:
61:73:99:4b:3d:0d:16:7e:6e:66:f6:ac:56:67:98:1c:67:7a:
53:bb:96:20:55:57:43:40:70:5b:14:11:7e:bf:98:30:a9:0d:
8a:d4:a2:35:b4:c4:f6:2f:c9:e5:ef:53:22:05:b4:c3:04:99:
f0:f7:29:0f:c3:5e:9d:d4:cb:a5:eb:a2:f5:e9:75:d4:f9:f6:
0a:21:85:e0:4c:7d:5d:6c:90:e2:22:c4:8a:35:00:b0:32:32:
39:69:ac:8e:b6:dd:3d:cf:4e:3c:6b:4d:00:ea:83:12:6a:30:
e7:70:19:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:34 2026 by rpki-client