
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
File: RDO2ork3CiSzs5vwMBiRnDY1lYw.mft (raw, json)
Hash identifier: WMeAkkoAm3rFw1H9eSu2yqm0ryWUo7El8YrMiHn2sU4=
Subject key identifier: 5F:B5:54:D5:B0:93:B2:07:67:BE:7C:6B:90:E3:B6:DB:30:5C:F5:A1
Authority key identifier: 44:33:B6:A2:B9:37:0A:24:B3:B3:9B:F0:30:18:91:9C:36:35:95:8C
Certificate issuer: /CN=4433b6a2b9370a24b3b39bf03018919c3635958c
Certificate serial: 01A17BF23710AEB96F993A0DD5A9219E9F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:00:33 +0000
Manifest this update: Tue 27 Oct 2026 06:00:33 +0000
Manifest next update: Wed 28 Oct 2026 06:00:33 +0000
Files and hashes: 1: RDO2ork3CiSzs5vwMBiRnDY1lYw.crl (hash: mS3PqtsLVzK/1hZMaWDQJ8lR8BvtTSTUPjzDgXPn/bo=)
2: gG-xH4Wm1_ftJKGC0tQXiROr0_Y.roa (hash: oFf67BglbiSgcsuuPtbPySF0HlPBZgLM4o8ZIMj+qf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:37:10:ae:b9:6f:99:3a:0d:d5:a9:21:9e:9f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4433b6a2b9370a24b3b39bf03018919c3635958c
Validity
Not Before: Oct 27 06:00:33 2026 GMT
Not After : Oct 28 06:00:33 2026 GMT
Subject: CN=5fb554d5b093b20767be7c6b90e3b6db305cf5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:af:ae:8a:bb:bb:61:f9:12:99:df:88:9e:
bf:04:ad:15:af:60:7f:c7:a9:95:70:b6:59:d3:84:
2a:8a:eb:bb:12:6e:c3:82:98:a5:09:a7:5a:a6:81:
9d:c5:f0:51:da:ad:23:6c:13:e5:31:6c:58:1a:51:
66:e0:f4:a2:99:7b:f0:03:2e:fb:56:77:df:9c:fe:
af:9e:dd:a5:15:79:76:e3:14:ff:9c:e5:64:c9:fa:
32:4b:48:bb:56:ba:ec:7f:47:00:ea:c2:c8:02:0f:
43:a4:b4:cf:0d:c2:69:c4:78:6b:5b:be:f7:72:82:
82:c1:64:ff:9f:6b:54:69:55:89:29:50:0f:a5:9d:
9a:3e:a4:47:26:3d:34:1d:21:89:f4:67:7e:af:af:
a6:33:09:a7:fb:4c:46:a8:2f:56:c8:0b:55:f4:71:
1f:54:39:3d:4d:7d:6a:42:ba:65:32:fc:12:a0:e0:
a4:48:14:64:9c:b2:62:bd:92:3e:75:15:70:f5:ae:
b0:bf:13:e6:0f:4f:47:3b:ca:79:42:81:f5:be:62:
42:f2:fa:33:7e:3d:86:b3:47:38:59:d6:24:28:ca:
00:d9:fa:9f:c8:5c:4f:64:4d:37:af:35:e4:d2:da:
60:2b:52:25:aa:93:00:00:28:71:9a:0b:cf:11:0b:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B5:54:D5:B0:93:B2:07:67:BE:7C:6B:90:E3:B6:DB:30:5C:F5:A1
X509v3 Authority Key Identifier:
keyid:44:33:B6:A2:B9:37:0A:24:B3:B3:9B:F0:30:18:91:9C:36:35:95:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:53:34:ae:8a:b9:1c:0b:ab:f9:7d:f1:01:f8:52:58:0a:04:
e5:6d:70:5b:14:33:4c:2f:38:31:71:08:1e:87:32:48:5a:ec:
53:bc:9f:b0:04:d2:ef:70:ac:13:95:5f:9b:3f:a2:85:36:71:
35:80:f9:a6:61:6c:29:60:90:c2:a3:f9:dc:2f:3c:8e:32:c9:
77:27:74:99:8e:eb:8b:2f:3d:9d:ab:02:66:31:04:9b:39:ff:
49:73:76:7d:9e:c1:ec:e0:08:c8:6f:1b:b5:41:98:7d:a8:c2:
1a:7c:4d:11:02:46:f9:18:a2:62:95:19:2d:9a:d1:ac:58:48:
a7:c7:28:3b:0f:52:2a:ac:1b:b8:b8:78:95:bc:a0:f3:2a:7a:
68:10:11:d2:56:87:2f:70:d1:77:b8:f9:0d:3b:cd:a8:09:1c:
e8:2d:1e:8c:ca:ae:bc:2b:8a:cf:bc:82:e4:de:e9:aa:26:08:
b2:80:6e:dc:d9:4b:fa:6e:00:51:9a:8c:d9:3d:95:80:cd:aa:
f9:d4:88:bc:56:ce:31:5b:62:fa:7a:70:05:95:e2:b5:d6:02:
80:93:05:97:0d:15:65:86:bb:3d:b6:dc:01:42:34:cb:da:d7:
e4:a9:5b:92:a0:4f:a6:98:60:c7:0b:9b:97:3c:ca:6b:db:98:
03:56:be:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:44:31 2026 by rpki-client