Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
File: RkxGEP2HKa933gOwWZ56ZY2Nos0.mft (raw, json)
Hash identifier: ZLAgSqamu7yftsnLgCW/arCCYhXZBVxbXxPCZR+AfNo=
Subject key identifier: 97:3A:61:E6:7E:27:DF:0E:10:B7:37:FA:A8:50:BA:3B:4A:45:EB:DC
Authority key identifier: 46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
Certificate issuer: /CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Certificate serial: 01A17A03DCA766595C9CFA0496455CF83D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:00:35 +0000
Manifest this update: Mon 26 Oct 2026 21:00:35 +0000
Manifest next update: Tue 27 Oct 2026 21:00:35 +0000
Files and hashes: 1: RkxGEP2HKa933gOwWZ56ZY2Nos0.crl (hash: hW7+G9mjgJlLS/cduXaxRfg6K3xFTbfxSol11z4MTCI=)
2: SdNlaYPSbaeDqZOnIRtsN_M7XII.roa (hash: SNDTIgfXGgP+vB180bD2J1T2+CYn/lMRBi3AW88QHXg=)
3: yVu0i_xvq---2kocaB2IB3q7ZRM.roa (hash: cN3mkOn67U09t3Vnz7Z9j9Cc1CBROZIZkHiEcI4uNnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:dc:a7:66:59:5c:9c:fa:04:96:45:5c:f8:3d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464c4610fd8729af77de03b0599e7a658d8da2cd
Validity
Not Before: Oct 26 21:00:35 2026 GMT
Not After : Oct 27 21:00:35 2026 GMT
Subject: CN=973a61e67e27df0e10b737faa850ba3b4a45ebdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:25:14:1b:d2:f6:f5:66:8b:3e:96:45:a4:
2e:ad:c8:eb:a2:9f:0e:8e:35:ca:47:0e:6b:a3:7d:
1a:90:23:a4:04:8a:16:5f:bb:a5:50:bf:fe:9d:8b:
70:38:7b:62:4d:e3:3f:b3:e2:50:0e:48:b6:36:cb:
2f:0f:18:20:f4:02:b5:f0:a7:ac:c4:85:81:8a:13:
37:50:34:de:e1:6d:be:63:55:dc:4a:e4:df:de:3f:
a3:56:3c:27:c1:65:e6:8a:7a:a1:6e:69:bb:d0:72:
a0:21:b2:1d:c6:75:ea:db:29:c0:f7:9b:4d:48:63:
89:ca:7a:80:41:01:b0:41:25:83:35:91:99:36:ec:
6c:6c:81:59:0a:a3:5c:c3:44:92:96:07:44:66:73:
76:e5:4a:cc:7e:b7:ed:3b:77:1e:f0:f1:71:9e:62:
5e:67:16:8b:98:b2:bc:3f:7e:07:56:f5:f2:e0:e0:
32:a3:f5:b2:a9:bc:76:b8:d7:6f:64:6c:49:86:7c:
b7:d6:b8:c4:ec:d1:9d:04:bf:d8:41:c7:86:0a:22:
22:60:bd:bd:f4:49:da:a8:5f:d8:a7:39:8f:82:a4:
4e:86:56:48:05:8f:50:bc:9c:dd:05:62:b2:9e:93:
b3:bf:31:8f:7e:bd:9e:38:27:28:96:3b:ae:47:a9:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3A:61:E6:7E:27:DF:0E:10:B7:37:FA:A8:50:BA:3B:4A:45:EB:DC
X509v3 Authority Key Identifier:
keyid:46:4C:46:10:FD:87:29:AF:77:DE:03:B0:59:9E:7A:65:8D:8D:A2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkxGEP2HKa933gOwWZ56ZY2Nos0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/RkxGEP2HKa933gOwWZ56ZY2Nos0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2b:5b:35:29:3a:c3:93:8d:04:c7:18:09:dc:8a:37:28:72:
4d:81:0c:d9:0a:59:3d:6a:f5:7a:a6:25:bb:5d:0c:3f:ec:0e:
6d:b5:d3:87:f8:cc:ca:f7:38:c4:75:b7:24:01:a0:62:f9:fd:
ff:98:5a:a5:cb:13:2a:57:34:0f:ed:b7:2d:24:84:9e:f4:be:
a6:3b:74:32:17:65:92:8b:4d:47:3e:93:42:21:e0:c0:a4:76:
0b:31:bc:db:87:90:2f:0c:19:46:5a:ba:5a:e7:f7:ad:da:28:
87:00:d9:21:7a:4e:46:a9:00:cb:a7:0d:a6:ce:f9:d0:40:2b:
11:26:b0:47:aa:a3:7a:ef:76:67:19:5f:87:4a:1d:10:ed:1f:
cc:26:6e:34:73:71:f1:4a:15:1b:c3:41:97:d7:83:a0:92:9d:
e7:6e:3d:09:d5:b4:25:f6:21:1b:9e:95:9a:2f:e7:04:0f:05:
5c:0c:ad:2e:47:3d:be:e4:8a:db:77:2d:37:bc:f5:8b:ee:59:
2f:8c:be:28:32:e5:85:f0:05:a9:05:ca:e4:9e:d0:6d:b6:ad:
d3:56:4f:e7:51:fc:b9:9b:ad:f8:7e:e0:38:6f:35:95:74:16:
21:35:83:07:61:07:29:69:68:08:57:65:cd:4e:ff:08:62:78:
cc:71:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:05:45 2026 by rpki-client