Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
File: rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft (raw, json)
Hash identifier: 0ZEXjrZSHS5kzleyZ3OXUsNWJwDDKPp2gvm+ISKC/d8=
Subject key identifier: 07:2B:82:3B:68:62:8B:2C:86:71:8A:8B:FC:CE:13:FF:D2:84:EC:FE
Authority key identifier: AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
Certificate issuer: /CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Certificate serial: 01A15B1EF20AD8574D62E5FE7CBC0642A67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
Manifest number: 0241
Signing time: Tue 20 Oct 2026 21:01:56 +0000
Manifest this update: Tue 20 Oct 2026 21:01:56 +0000
Manifest next update: Wed 21 Oct 2026 21:01:56 +0000
Files and hashes: 1: rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl (hash: QrEFnBYeYUkAZ8V8kEa8L/sU4aLscbgcuUih0J+AM5U=)
2: rcclP2fW2M9d6FzhFGpcIug6Slw.roa (hash: Ah4o3LwYLB7WSaBBzcrCq3rn0s5Unn57tKa0V6nN2u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:1e:f2:0a:d8:57:4d:62:e5:fe:7c:bc:06:42:a6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Validity
Not Before: Oct 20 21:01:56 2026 GMT
Not After : Oct 21 21:01:56 2026 GMT
Subject: CN=072b823b68628b2c86718a8bfcce13ffd284ecfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:28:21:62:bf:d0:ea:d0:4e:5c:61:8a:09:
58:85:ae:1e:5a:fb:ed:37:53:39:82:e7:4b:40:05:
5b:6d:3c:e4:77:06:6b:e5:ac:c3:ab:66:29:9a:ff:
8d:9f:7e:fb:b4:97:bb:0a:8c:bc:ac:d0:de:2f:c8:
74:5b:26:29:95:de:5a:4a:5a:cb:d5:55:e4:09:9d:
ba:67:2e:5b:6d:2b:82:f6:37:55:42:61:6e:03:0a:
71:e9:93:fa:2b:5b:13:51:03:48:aa:2b:8a:a2:b4:
26:be:61:db:42:d7:b2:40:8a:70:a8:30:2d:44:26:
05:c0:8e:14:cf:17:0c:76:c9:aa:e4:df:9e:d4:f8:
24:7f:b9:88:80:b8:31:45:08:4a:b9:7b:54:56:0d:
35:ef:4a:b0:b1:5e:8b:2b:63:16:91:ff:b5:a3:a2:
7c:e2:df:05:ce:7b:f8:36:ab:3f:f0:fe:3b:78:c2:
4b:82:3f:ed:a5:7c:c1:4d:ca:db:f2:88:96:b2:42:
3a:0e:13:a5:e7:8d:34:7e:d4:ba:96:0c:8e:74:c2:
f8:5b:66:e0:51:11:31:d1:4b:de:73:b1:b7:4b:b8:
19:82:aa:6b:c5:22:4a:ff:52:c3:51:80:0e:28:23:
08:bf:31:0f:30:3d:93:ed:71:f6:70:46:51:4c:22:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2B:82:3B:68:62:8B:2C:86:71:8A:8B:FC:CE:13:FF:D2:84:EC:FE
X509v3 Authority Key Identifier:
keyid:AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:eb:98:a5:91:57:52:fa:50:f0:89:46:91:79:be:2c:2b:89:
19:03:55:20:20:d7:62:0b:f6:35:de:88:37:8f:e9:df:53:19:
48:72:f5:b5:43:54:48:2c:c9:74:d6:38:5e:35:e8:35:6f:9c:
e0:09:8d:aa:5b:22:85:41:79:8b:79:19:29:db:04:1d:5e:92:
64:d9:4f:81:38:b7:01:dc:e9:19:78:b0:b0:bd:6a:32:1e:e6:
82:b5:da:c9:88:8d:27:e2:85:37:58:ee:7c:d8:b0:74:ab:f0:
a8:6a:f8:ea:cf:06:2a:5b:5d:7a:16:fc:a3:94:b6:68:98:87:
dc:6b:6e:dd:fd:80:2c:09:84:c4:6f:3b:93:4d:ed:7c:ed:c5:
41:4f:a4:08:be:9b:d2:59:60:5e:24:ab:da:a2:48:78:b5:f9:
d7:35:4d:61:a0:38:f9:f2:c0:e3:0c:07:6d:08:cb:6f:66:93:
e8:14:e9:68:29:69:6b:3f:cb:ba:2e:cc:03:4e:b1:33:a0:a1:
02:37:4e:11:10:81:62:c8:54:6f:ca:c3:fe:1c:da:dd:74:f2:
64:25:cf:e5:5b:72:b3:91:8e:e4:f7:61:cf:7b:2b:ed:0f:af:
d2:b5:67:86:f8:7a:e2:f3:5c:09:cf:e6:0a:d2:33:63:ce:d3:
00:cf:58:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:52:15 2026 by rpki-client