Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: xwAlENJizBSvQ+/hrGb8hrgMCse7Doo4KTwFL6c+9Ok=
Subject key identifier: 1D:BB:B0:54:C3:C0:77:41:28:9F:91:0B:9B:50:75:7E:DB:5F:AB:BD
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 01A15FD626C730630AE1BAECDDDF98ACB178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 119D
Signing time: Wed 21 Oct 2026 19:00:32 +0000
Manifest this update: Wed 21 Oct 2026 19:00:32 +0000
Manifest next update: Thu 22 Oct 2026 19:00:32 +0000
Files and hashes: 1: 2XECgtpjsen86VkC8yydIYPOl1c.roa (hash: BPZBQJjMYkB0nrNJVAIozX1sKQI4gxMXxsPOFyAaAE0=)
2: _2RVkv-dG4-YIAymCk1yOs7NK58.roa (hash: o6HUJs0cl57DuL7YAIkgRklqKfSqkx4WuloF1lwdZUE=)
3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: zv//6BLIoYg4fH6Lu4Yl28ceFaoabdDRx1saKB23n54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:d6:26:c7:30:63:0a:e1:ba:ec:dd:df:98:ac:b1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Oct 21 19:00:32 2026 GMT
Not After : Oct 22 19:00:32 2026 GMT
Subject: CN=1dbbb054c3c07741289f910b9b50757edb5fabbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:be:76:cd:ad:5b:d8:6e:49:e2:17:43:fa:
97:11:61:c3:26:e0:99:95:50:9c:07:60:f5:1e:2b:
26:1d:b5:f9:ee:1f:ca:0c:a4:cd:e0:10:de:d9:69:
54:56:6c:35:92:9f:6c:82:1a:f3:2a:fb:ba:80:dc:
21:8a:8f:19:af:06:b0:14:88:38:65:40:5a:03:9f:
8e:71:a9:e3:cd:dc:e4:34:c7:f4:a9:ae:cf:7f:8c:
53:e3:b7:d4:d0:f6:c8:a8:b0:ac:59:f3:d1:f9:44:
59:6e:ce:7f:68:fc:98:61:b1:96:ec:ba:ca:31:ef:
79:de:0c:24:83:90:d3:e9:43:3c:7b:de:5e:ae:40:
8d:24:11:1c:8f:cd:0d:3f:8d:0e:82:de:b3:03:fe:
f7:9d:17:3a:14:8b:ab:d9:09:74:8d:58:3b:60:77:
3b:83:71:32:bd:24:f9:a9:25:61:89:1e:e5:f5:8f:
37:1c:da:59:b9:f7:72:54:2c:74:68:de:25:6d:56:
78:08:b3:8e:54:53:18:d7:5d:af:c1:13:74:45:44:
55:aa:79:eb:f2:08:f5:73:03:47:f4:35:e0:80:d7:
c5:a5:dd:a5:b5:8c:01:69:3c:2c:68:77:3f:6e:27:
9a:f8:3d:68:4a:38:42:7c:3c:96:3b:f4:86:71:3f:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BB:B0:54:C3:C0:77:41:28:9F:91:0B:9B:50:75:7E:DB:5F:AB:BD
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ec:97:69:5f:84:1a:9c:9d:e0:65:f2:27:97:e1:dc:51:cb:
dd:4a:25:c5:81:89:f1:93:b5:e8:4b:19:5b:80:e9:46:80:20:
7e:24:2a:33:ec:3d:e6:1c:b0:c0:c9:91:af:89:1e:a3:43:04:
5a:ab:4e:19:73:c6:58:8d:3a:99:53:cd:27:89:f6:69:55:bd:
1b:0e:4f:0a:53:9b:52:7a:e1:7e:35:8d:21:86:dc:e8:14:28:
e3:0f:82:3b:a6:a7:66:41:fd:0a:0f:09:e6:96:a6:9a:33:aa:
1a:7b:93:66:b5:c6:c6:f1:d1:90:bd:17:e0:11:81:5b:9d:b9:
71:18:f5:6c:1b:02:b4:72:30:6d:7c:10:1e:53:1a:5c:97:b2:
76:dd:d2:a9:33:a2:45:00:87:70:ee:a3:4d:8a:42:c0:75:12:
0c:c6:a9:35:e2:ca:73:ca:c5:eb:3b:d9:2d:57:67:81:6e:05:
68:72:d6:f4:1a:7e:2f:43:7c:ff:40:43:a2:0c:54:7f:d3:37:
bb:fe:df:ba:13:72:38:6f:15:c2:7c:9a:42:9c:f8:4b:8e:06:
0a:03:e2:9b:88:85:d5:27:03:80:1e:59:74:20:6c:e8:b8:4c:
57:6e:b3:2b:98:f5:7e:65:b9:cb:72:19:70:06:3f:d3:d7:57:
41:42:de:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:47:18 2026 by rpki-client