Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier: vQKKZDXxLyKI9ScSbne0CpUPju2WEMY/2R1yZbVrWpM=
Subject key identifier: 0A:04:7C:FF:44:13:16:A2:17:33:C1:F8:57:5D:D1:C4:55:E7:7D:D2
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 01A13C6EFA05C9BC71963EC4C412A9F22411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number: 1AA5
Signing time: Wed 14 Oct 2026 22:01:08 +0000
Manifest this update: Wed 14 Oct 2026 22:01:08 +0000
Manifest next update: Thu 15 Oct 2026 22:01:08 +0000
Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: h3vsuPTcBli7vmfZ1a19woM+lnDdJsMPjdx8GFilOkg=)
2: s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa (hash: zm1kL82qrnuSElGfAwXwitkc6LPDrRud9bFF8MtyuyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:fa:05:c9:bc:71:96:3e:c4:c4:12:a9:f2:24:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: Oct 14 22:01:08 2026 GMT
Not After : Oct 15 22:01:08 2026 GMT
Subject: CN=0a047cff441316a21733c1f8575dd1c455e77dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b0:d1:41:42:3a:53:47:d5:52:83:fe:49:82:
4a:42:47:1a:bd:d2:56:c5:24:d2:6e:d4:ee:df:3b:
ee:e5:8d:af:1c:46:65:6e:f3:d7:42:4e:5b:33:43:
6a:c3:95:46:a5:d6:a2:97:8f:b5:d9:a5:03:7c:6c:
df:43:d6:03:72:ac:d1:12:08:75:77:be:3e:76:eb:
93:3f:21:1d:07:76:6c:a1:e0:4e:20:fb:42:36:99:
5d:8c:31:8d:8f:08:90:f1:68:ea:bb:e7:85:13:93:
4a:a3:bb:5d:3b:15:9d:e7:34:a2:5a:29:d4:0a:7b:
83:d2:40:7a:bc:da:7f:6e:89:14:90:17:54:90:07:
aa:d2:66:8d:5d:b7:54:34:ee:2e:1e:bb:51:77:7f:
15:fb:b8:91:87:37:67:d0:59:17:52:ea:13:22:7c:
4a:12:95:67:20:58:c6:b9:26:34:96:ff:dd:a0:d6:
06:c2:82:6b:b0:17:3e:b5:85:12:b0:87:33:29:23:
30:1b:b5:01:0d:ad:cb:14:e9:af:ca:e9:a2:36:12:
16:b2:6c:48:61:b2:9e:41:65:88:1f:3d:d1:84:a5:
07:70:47:ed:93:f9:27:1c:15:85:93:69:27:c1:ca:
5c:a0:59:12:c3:6c:90:d4:f6:21:fe:02:2b:a5:20:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:7C:FF:44:13:16:A2:17:33:C1:F8:57:5D:D1:C4:55:E7:7D:D2
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:55:34:3e:b7:d7:af:1a:14:4b:7e:5e:5f:94:32:08:5f:fc:
9a:22:2a:69:9a:11:1f:7d:1c:b7:81:c5:44:5f:d2:1c:0d:b2:
8b:7f:ca:e8:6c:9c:0a:cc:e5:1b:b2:be:2b:44:7f:6a:6d:9a:
7a:9f:13:56:b0:d3:1e:96:13:75:d9:3e:65:7d:42:47:67:30:
d9:01:0a:b7:ee:46:3a:67:a9:3c:cb:15:98:c4:60:e1:45:ec:
ae:cc:e2:fe:12:c0:37:a5:0e:b6:54:ac:f1:3d:6a:61:f5:82:
1e:bf:a5:0c:55:ff:74:cb:1b:8e:1f:29:ea:3c:38:c7:7b:44:
fb:19:ef:ef:8e:a2:0d:ff:28:14:d9:56:39:bb:b9:ce:d4:ce:
ff:50:2f:a7:33:cb:ef:45:79:d5:e3:84:cb:71:dd:76:fc:d6:
dc:bb:a3:33:90:7e:6d:a5:7e:6a:c9:a5:c1:d6:8c:ca:ba:44:
22:6e:9c:3d:a9:53:48:5a:17:6f:92:83:a5:7a:37:df:5d:f3:
70:3e:4b:ef:e4:29:5f:cf:4c:50:44:08:f4:e0:60:76:06:98:
00:78:2c:f5:c4:af:fb:ca:50:64:fe:cc:bb:57:70:78:0e:ce:
24:35:4c:40:b5:36:da:33:c9:a5:e5:d2:ca:02:40:e2:7d:ec:
84:61:6d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:25:46 2026 by rpki-client