Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: /fmozEkkht1ZvAQJQ/emU78Kd6OD99SlqoKNDmwGIY0=
Subject key identifier: E3:0A:ED:0E:0F:4B:59:A7:E1:BA:7D:54:65:76:54:97:52:39:CB:CD
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 01A17DAA314617D20A7C0509A26D94D16B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1AC9
Signing time: Tue 27 Oct 2026 14:01:07 +0000
Manifest this update: Tue 27 Oct 2026 14:01:07 +0000
Manifest next update: Wed 28 Oct 2026 14:01:07 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: pnyGM4gd2kF8EJkO5gWZ9jeoyF0.roa (hash: 6XnmhOJq3GAmn5wQEuoQfthOvhyAwUf459ZiJFQdrrM=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: yrgOsolwPt8uZEBj3ThlTT/hYQY/JNy3Ok4JWKnbxnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:31:46:17:d2:0a:7c:05:09:a2:6d:94:d1:6b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Oct 27 14:01:07 2026 GMT
Not After : Oct 28 14:01:07 2026 GMT
Subject: CN=e30aed0e0f4b59a7e1ba7d54657654975239cbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:99:ee:f1:9d:26:37:22:16:a9:63:14:67:
c0:6e:12:49:a9:f6:de:1c:91:dd:db:0d:c5:bb:e5:
df:42:9e:62:da:4b:36:d0:18:1f:36:9c:8e:9d:4a:
93:24:83:4d:83:58:a4:52:82:25:45:ec:42:f8:08:
97:1f:10:2a:c8:71:70:7e:6f:1e:1a:88:de:d9:45:
8a:f7:69:6d:32:6a:a8:72:78:8c:46:77:e1:86:7d:
0d:87:67:22:0e:55:0e:ef:78:af:5e:bb:6d:30:16:
a3:87:1e:35:47:30:c1:18:c0:52:ff:bb:bc:76:d3:
ee:e2:6e:1a:eb:84:13:60:73:a2:1e:77:2e:cb:05:
c1:cd:0e:24:87:66:47:b6:84:37:15:45:43:f1:fe:
a9:07:a0:79:32:5c:0d:e9:69:a1:9e:23:e0:d1:4b:
87:d8:4c:b8:bd:d3:f5:8b:c4:ee:cc:dc:7e:49:e1:
90:a2:7c:59:54:d8:e3:41:c3:51:dd:d8:c0:db:78:
27:21:e0:44:e9:1f:02:17:14:4e:73:5e:6d:f1:f3:
9c:98:e1:d1:99:83:df:94:5f:3d:1a:6c:21:8d:8a:
b8:c7:90:81:e1:fb:fb:21:ab:ae:86:3b:6c:97:24:
08:05:dc:4d:24:66:19:88:e4:93:bc:ba:17:91:7d:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0A:ED:0E:0F:4B:59:A7:E1:BA:7D:54:65:76:54:97:52:39:CB:CD
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0d:c6:0e:00:9e:1c:09:5e:b0:ff:27:1c:58:25:e5:8a:38:
aa:5f:03:0d:06:bf:c6:8d:16:77:13:09:5d:2e:4d:20:a7:36:
e9:94:7a:80:d2:d3:b6:48:99:94:7c:d0:c1:24:1f:0d:af:2b:
a5:05:47:76:cb:20:27:6c:1c:d8:e4:82:6c:34:7a:2a:2a:bf:
34:ab:fc:d9:f8:51:17:a1:5d:7c:a1:07:71:b6:b9:cc:8d:ca:
a8:98:83:32:32:22:00:70:84:04:1b:64:27:ec:b7:52:09:42:
bf:92:70:ce:9e:57:fc:da:27:c6:81:25:f1:ec:47:f4:93:b7:
8d:ee:bb:32:fd:6f:32:73:41:b9:d8:cb:25:7b:01:07:f2:37:
e1:54:a5:65:fd:71:db:20:b8:a5:97:36:1d:84:de:6f:46:37:
df:97:13:91:23:d2:eb:bd:96:e6:f8:ba:e1:c8:ca:4c:f1:fe:
b6:b7:96:01:7d:98:f8:db:f6:e4:7c:d1:2f:bb:69:ed:13:3c:
ad:64:6b:1c:b8:34:66:ec:35:06:f6:33:82:59:86:ca:15:12:
41:11:1a:c9:39:cc:7c:ed:0d:e8:0d:67:88:5c:be:f2:fb:7b:
b1:e6:4a:9b:6f:6a:23:ef:9e:6e:96:54:0c:a3:f5:ad:5f:c9:
58:4e:94:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:20:56 2026 by rpki-client