Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
File: rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json)
Hash identifier: mhA9imbrFs89DILdkaOrTz5XkHUTsN9zBuY3dZQUX6o=
Subject key identifier: 3D:EF:0A:69:76:34:59:38:FD:17:02:E0:AF:BE:07:D3:E1:33:E0:FE
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 01A186769A1FB0FDF98E9FE0661DADC825E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
Manifest number: 13E8
Signing time: Thu 29 Oct 2026 07:01:21 +0000
Manifest this update: Thu 29 Oct 2026 07:01:21 +0000
Manifest next update: Fri 30 Oct 2026 07:01:21 +0000
Files and hashes: 1: AQy-kY2cHFUJdvCu8RaXSm0u9OQ.roa (hash: RBQiu9sWWqL4vqKsGVfSX3sl/SJ1Xr1YL1xHQKrA3HM=)
2: K-RSBEB1ZNkw3BDgpDKvXT-jHFk.roa (hash: Ek8U88NKRYg8I4QyXUu+1m6S0Vw3QVig3cYX4BA41DY=)
3: WL2FEa958Kjqled1nJg_T9tBeoM.roa (hash: JqTb5QBDeJhpoV0bTkZHjnWe5k2iGZ6/9FsmESELmIY=)
4: eeigoSZvhxriUU8uVwc0KC2ZNqg.roa (hash: BVqjzzOba75rz4RwKPXup3anTRy7Y0r6aHlcT5afx7Q=)
5: gDEbtn2Bm22RWVusEqJbEgaueu4.roa (hash: xXuFvRKXUrwVjGE6wkVPHC4STPuoOyCxY+cA2kJF334=)
6: gqcIGF4cnQ7Zo-s6vBQeyMRZ3Kw.roa (hash: 5WHbZVFPJqF6d7sQt81f3HSwNWk6p/6vqblB7r2uSB0=)
7: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: /R9yz/C+vSKHz4aPBvJoEU/oJIBldM1IMxmzHA9/xzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:9a:1f:b0:fd:f9:8e:9f:e0:66:1d:ad:c8:25:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Oct 29 07:01:21 2026 GMT
Not After : Oct 30 07:01:21 2026 GMT
Subject: CN=3def0a6976345938fd1702e0afbe07d3e133e0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:fa:e5:b7:32:85:28:6d:7a:b2:c4:49:45:
40:03:48:5c:9f:dc:12:29:3b:3b:54:94:76:16:25:
f7:6b:2f:1f:76:68:9a:be:43:a8:11:f8:68:2c:02:
87:52:05:9a:d1:94:0c:ba:9b:34:91:02:13:0f:dc:
98:c9:e3:69:be:05:1d:2d:53:71:d0:e9:fa:64:14:
a6:f8:be:f2:ca:1d:25:d3:e2:b9:68:7b:5b:0e:56:
33:a5:ba:49:a8:0f:03:47:b9:bc:60:43:ba:16:73:
24:ea:77:06:79:12:83:39:86:f9:82:fa:73:41:38:
31:9d:f0:d9:33:a9:09:a5:24:1d:09:ec:90:73:2b:
1b:ad:d6:ee:1c:a8:58:17:3e:76:b1:ad:8c:0d:7e:
f5:d1:44:38:de:5c:28:be:6b:80:da:e1:cb:bb:2d:
a2:e4:8d:85:4c:ff:92:72:f5:d3:33:40:64:ee:05:
73:51:83:ea:5c:2f:88:ff:98:e1:af:0d:4a:0c:f3:
95:d1:c4:cf:e3:c4:40:63:6c:93:a5:dd:82:0b:ab:
6e:21:1e:a3:7e:eb:e9:25:0d:06:c9:b9:3f:2d:af:
48:4b:77:62:cf:4a:1a:f6:7c:c6:e0:4c:03:3b:a1:
66:3e:8f:ee:8a:59:09:83:91:d5:ff:91:9e:cf:74:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EF:0A:69:76:34:59:38:FD:17:02:E0:AF:BE:07:D3:E1:33:E0:FE
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:81:53:bc:81:5d:2e:bd:6e:57:27:89:a0:0f:b0:a3:1f:35:
f7:37:a9:e8:65:55:fd:fb:10:bf:af:3f:e9:f5:55:35:d8:79:
c1:c0:5d:1b:51:aa:1d:4b:a3:a9:ec:76:a5:50:48:00:2d:46:
4d:41:e9:ba:bb:a6:ab:78:88:ba:48:25:f5:0e:1c:75:cb:cd:
0b:76:06:6c:4a:4d:44:7e:dc:81:8c:8c:49:97:60:9e:2c:7f:
da:c9:a4:af:be:28:78:3e:7c:ce:0b:0c:ba:6a:a4:45:b5:4c:
b3:5e:03:76:71:19:42:73:70:d7:b9:59:2d:dc:bf:58:50:e2:
49:cf:c5:45:cc:0c:9e:4a:e4:de:a3:06:61:36:0c:a6:b2:2b:
46:8c:20:d7:18:bf:96:94:5b:0f:f5:cd:e4:1c:d4:e8:e4:1c:
c3:7e:9d:b9:1c:0c:a5:d5:60:f9:36:3c:b6:e9:71:2f:a1:ce:
4f:65:d7:3c:74:f9:32:98:b5:cf:be:dc:e2:6a:ad:c1:20:25:
7c:8b:13:25:20:22:b3:1b:84:d8:d3:7c:b0:0f:32:f8:06:b0:
60:d0:c6:bb:10:81:8d:e3:fd:07:20:a2:aa:32:aa:42:f3:7b:
9c:37:7c:6a:e4:c1:9b:5f:c7:eb:b9:bf:bd:0c:64:7e:85:5c:
12:b3:09:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:53 2026 by rpki-client