Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: sMwl55RHdCCT65/7GEikGua/+wsP6MwGm4dhiqytExc=
Subject key identifier: AB:44:B9:B6:1F:69:BC:51:19:F3:8A:E0:B1:EB:57:C8:51:AA:8C:76
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 01A17B4DAC324CDE5057208937F240FCEA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 03:00:50 +0000
Manifest this update: Tue 27 Oct 2026 03:00:50 +0000
Manifest next update: Wed 28 Oct 2026 03:00:50 +0000
Files and hashes: 1: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: hK0d2iATDl31ChJcwDeWlqDcnOcuczXSNjOoxL5EFgU=)
2: wBzUUS1esVzgp7-S8WP1zjKAIpw.roa (hash: UgXBz+OKL1MAmpi06fp5fY0KFQ1LRcUZSGp9CfyxDlU=)
3: wjNWOCuY2E1_FvlqggQMJz_Utqw.roa (hash: BberhHSGLHh2AX9W6raGWWWl/q21AJDPsEIrCo+NFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:ac:32:4c:de:50:57:20:89:37:f2:40:fc:ea:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Oct 27 03:00:50 2026 GMT
Not After : Oct 28 03:00:50 2026 GMT
Subject: CN=ab44b9b61f69bc5119f38ae0b1eb57c851aa8c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:d0:a4:63:52:de:56:35:07:a5:b4:e6:a5:
ab:c4:42:b8:69:38:0a:3b:f3:d6:7a:45:66:89:08:
82:bf:1c:37:14:5e:13:5f:44:b1:3f:21:2c:9d:65:
97:31:e0:9d:9c:74:2c:c5:c1:56:2a:47:4b:04:e0:
ba:a8:cc:c9:05:37:be:62:10:c7:6c:8e:61:3a:2b:
37:a0:c7:53:ef:68:07:d1:a5:16:43:ca:08:79:8c:
4b:5a:10:fb:ba:55:61:77:56:25:df:62:78:76:38:
55:89:e0:64:4b:97:dd:63:6f:21:81:b5:ec:ce:7f:
d1:8b:d1:ab:6e:08:c1:fe:45:08:0a:c1:7d:b6:4f:
6a:5e:b9:cf:18:c8:fb:47:39:1d:02:0e:ed:ee:0b:
ee:fc:30:ab:73:ca:6e:ef:c6:47:08:f6:d5:70:23:
4b:2d:85:c9:2f:d7:f0:0c:15:18:f1:cd:58:73:be:
72:ac:19:b4:e2:ec:c7:42:3b:98:2e:33:7a:0a:db:
2c:9f:f7:b6:80:85:01:59:83:a2:ce:3f:79:62:07:
c5:ee:4a:ba:60:1f:b6:8f:7c:39:d4:f0:b6:3c:96:
1a:a6:b8:12:d0:24:63:3b:4c:26:b0:18:41:5b:11:
0c:0d:03:d9:2b:52:67:fb:e8:04:e2:79:bd:02:56:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:44:B9:B6:1F:69:BC:51:19:F3:8A:E0:B1:EB:57:C8:51:AA:8C:76
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4f:0d:29:e1:10:d8:36:03:7e:44:59:6e:5e:c6:77:5c:d3:
60:b1:0a:04:de:de:af:78:87:60:45:a2:27:99:44:a5:8b:95:
c7:1c:f7:bc:86:ed:ff:07:f3:4d:c0:34:bf:af:21:7a:c2:54:
41:1e:27:5e:1e:de:ea:5d:c2:e8:83:e3:f4:33:52:41:be:93:
07:59:7b:c1:5d:71:4b:58:e0:d2:9c:8f:60:96:18:cc:ad:39:
ed:7e:82:e0:5f:71:95:c9:65:67:34:99:2a:ef:19:58:86:c6:
bc:83:5e:3c:49:be:a8:bf:d9:07:8e:4f:05:04:f5:9f:5b:cc:
02:61:9f:f5:22:d5:32:34:b7:21:78:b8:50:9a:4d:cc:47:33:
6d:95:9f:5a:84:f9:40:13:c0:8e:78:e3:09:6e:5c:00:25:a1:
4e:b4:1a:41:90:84:39:47:6e:aa:28:fe:ed:88:f6:fe:89:e2:
0e:19:75:8b:68:ab:c1:9a:fb:0c:7f:ec:4d:81:24:cc:16:37:
7c:44:a1:80:ad:8b:08:50:17:9f:a4:6e:e9:a3:6d:57:7d:01:
4c:16:18:15:4b:e2:e5:d1:00:dc:2d:8d:9b:70:a2:8f:8c:56:
30:13:76:95:81:69:cc:f7:14:49:e7:d6:70:1e:cb:0d:72:23:
91:42:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:22:31 2026 by rpki-client