Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: wF+TvCJZ5zJ1J1oINoxlfElW2AZgXj+x0i+F7F3fth0=
Subject key identifier: AF:DD:AB:16:D8:40:AB:DC:07:1A:11:AA:D7:25:A7:4E:79:62:EA:F0
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 01A1852CB6605ABFCA5E83A5027C73826BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 1ACD
Signing time: Thu 29 Oct 2026 01:01:02 +0000
Manifest this update: Thu 29 Oct 2026 01:01:02 +0000
Manifest next update: Fri 30 Oct 2026 01:01:02 +0000
Files and hashes: 1: Yo_sQDnlWVAHdBUjfYUlBGrEGAk.roa (hash: UtSlgr8dKlU2oiUU/YuYyiNrWIQBlqU7VjuzqeMr5iU=)
2: Yohrn8HNTtjhGA9URKUO2_Mby_U.roa (hash: /XhETKRi5W1obuv4QEHTmdciLbp0sxJedBeaO8RsKsM=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: NpxPffnGRDdYXF69iIBJkj2VeKHYqUkZ/2CHQoatDLw=)
4: pqiBFTplBLtHWoMHzRforQTq8dI.roa (hash: wl+v61veOlULrNd8VjKMUyPIgjxBb6XbU3q/woMIXVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:2c:b6:60:5a:bf:ca:5e:83:a5:02:7c:73:82:6b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Oct 29 01:01:02 2026 GMT
Not After : Oct 30 01:01:02 2026 GMT
Subject: CN=afddab16d840abdc071a11aad725a74e7962eaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:29:7b:bd:5f:78:ce:b0:ca:37:37:ad:c5:
f5:e7:f6:37:20:c9:49:f0:34:ac:9c:f5:78:2b:47:
88:97:6a:de:42:13:99:2b:2b:65:17:6e:63:4a:9b:
68:7e:c9:18:a8:ae:30:fc:f9:79:ce:1c:7c:8b:de:
1f:7f:aa:0d:a2:e3:81:d4:42:65:f3:5f:57:9e:71:
fd:53:c0:5f:b4:65:59:d5:8d:8d:f7:96:1d:62:0d:
0a:34:e1:62:e0:55:3c:41:55:f4:7c:09:6e:26:06:
4e:0a:23:0a:1a:30:1c:31:9c:42:e8:67:e6:2b:a0:
e3:03:1e:1c:79:ce:e2:47:27:cb:92:79:6f:cd:eb:
28:4e:c3:93:cc:11:5a:3a:26:59:ab:c0:56:0f:9d:
49:00:d3:8b:09:79:14:5d:4b:47:a9:f9:9e:e3:3a:
cd:73:85:ef:62:84:e8:d7:fb:bc:42:b8:94:d6:7e:
4d:07:a8:fb:73:d2:eb:de:9b:23:aa:c3:ff:1a:37:
bf:b6:32:ef:f6:4f:9c:d0:47:e8:7c:23:40:cd:91:
2b:2e:5e:dd:5b:70:8c:f7:c2:4d:71:b8:ef:56:64:
c4:d1:4e:d5:de:db:e1:d4:d5:12:43:66:17:7e:f2:
72:68:fc:7d:f7:f8:2c:5f:90:fe:13:d0:b5:30:2e:
5f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:AB:16:D8:40:AB:DC:07:1A:11:AA:D7:25:A7:4E:79:62:EA:F0
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:21:84:ce:46:69:2b:4b:99:c5:0c:79:0f:88:ef:c9:75:7b:
ad:30:08:53:41:25:ab:35:5d:ed:97:e0:60:a8:49:97:7b:fc:
43:f8:c4:74:08:e4:b2:98:56:ba:cb:c3:4c:2b:5f:bd:8c:9b:
e9:06:0a:ae:bd:e0:41:96:fe:d7:1d:ac:a8:dd:8a:4b:cb:8d:
54:88:0c:dc:f7:ac:21:7f:41:e4:aa:b4:a6:c8:b3:a8:26:cb:
05:5a:1b:63:23:5f:0f:ef:d1:a3:56:de:f1:48:fb:67:30:6c:
fd:0a:e5:ca:6c:79:74:5b:15:df:eb:5c:06:ca:bf:ed:e3:94:
fc:d7:b6:d3:73:e8:d2:13:1f:ac:93:c9:1e:07:36:7c:51:29:
67:e5:12:83:43:27:c5:62:cb:50:19:e1:57:d3:61:0e:d2:21:
f1:fb:ef:9b:94:df:c9:32:cc:e0:54:a1:6e:59:84:7f:04:80:
7c:9a:12:b4:b9:29:16:ba:2c:a3:b2:67:59:81:d2:fc:3e:e3:
ad:7e:f4:db:9a:d7:46:a6:f0:e4:66:2a:ce:84:63:ee:ba:63:
1b:a9:c3:b2:2e:27:4f:40:5d:d8:7c:63:45:7e:73:ba:95:2d:
99:4a:94:3a:c1:bf:be:1c:e9:1d:bf:29:5c:71:72:ec:51:73:
4b:b2:2c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:42:03 2026 by rpki-client