Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier: weGCpwMfHKYxtj+DHaAAFcp9Dz9dugsqQk3DUhsu27w=
Subject key identifier: 59:33:C4:30:CC:90:DD:33:FE:04:0F:4B:CA:9F:57:14:1F:90:07:14
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial: 01A131B44A5F9AA90DF7A94D440CA7EE396F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number: 1A9A
Signing time: Mon 12 Oct 2026 20:01:01 +0000
Manifest this update: Mon 12 Oct 2026 20:01:01 +0000
Manifest next update: Tue 13 Oct 2026 20:01:01 +0000
Files and hashes: 1: 0WpGctn3iHwcCfz1HyZ1-r-vlc8.roa (hash: FHZ/JIyqvLJTAVxRV45KR0WJzUtCxqF4aecsFoB2jfo=)
2: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: 11wFEZZwZi7LPOmUYlroMPxMGArq7umYQGqxun61B8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:4a:5f:9a:a9:0d:f7:a9:4d:44:0c:a7:ee:39:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
Validity
Not Before: Oct 12 20:01:01 2026 GMT
Not After : Oct 13 20:01:01 2026 GMT
Subject: CN=5933c430cc90dd33fe040f4bca9f57141f900714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:0c:4e:7b:ac:c3:ac:86:f4:aa:2c:cb:03:
f5:e8:03:b1:7b:69:70:09:10:51:e3:03:53:b6:3f:
ae:0f:bb:a5:23:fc:f8:72:89:96:1c:01:81:92:5a:
5d:da:19:b4:11:89:47:35:29:df:ed:b6:ec:4f:21:
7d:9a:50:b9:22:ed:35:54:06:16:43:fc:5d:bf:de:
8e:77:e6:37:f2:db:21:2f:b8:b9:ff:97:19:92:a9:
6d:4c:4f:bb:03:de:9c:cf:51:6e:9a:f0:36:ff:7c:
69:c8:09:c2:d0:4d:1d:11:d0:19:d2:3c:0c:9a:ce:
62:33:c6:90:6d:d4:b6:e1:69:72:d7:3c:4a:84:5c:
50:07:12:5b:12:cb:a2:84:7a:c5:f9:8f:56:d6:83:
28:bd:dd:95:dd:11:3e:d7:e4:0e:b6:06:61:ea:93:
cc:2b:69:a1:4e:d0:28:58:79:e8:4c:74:47:4f:80:
d1:7d:d8:ee:00:58:3e:18:f9:22:62:d5:dd:68:c9:
9c:d3:2c:bf:aa:43:0c:30:57:b0:e5:75:e1:e1:1a:
7d:f5:fb:f7:9e:34:ec:39:d2:54:32:b1:1d:c3:ff:
c9:c1:95:3f:78:4e:02:bd:63:73:b3:3f:f5:ce:ae:
1b:ec:9f:95:6d:7c:ad:38:25:d6:88:9b:ec:98:0f:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:33:C4:30:CC:90:DD:33:FE:04:0F:4B:CA:9F:57:14:1F:90:07:14
X509v3 Authority Key Identifier:
keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c1:f9:5e:a5:63:33:1f:76:3c:8a:07:e8:85:74:fd:44:52:
1e:58:79:64:20:3b:db:d4:7d:33:78:02:a8:92:ff:01:35:a8:
89:80:bc:b4:0a:d9:c0:9b:e5:bc:54:67:68:89:05:82:ed:72:
d5:f7:96:3c:e1:d8:d8:52:a1:27:00:fa:22:a0:8f:e8:96:76:
e7:b5:04:e4:ee:dd:40:fd:ed:fc:3a:57:eb:7b:1b:c0:94:9a:
55:c7:68:12:50:18:a4:3d:f7:1a:f1:30:bc:fe:0e:8d:1d:52:
57:ee:ff:7a:97:71:78:75:a4:e6:44:48:2e:90:2f:de:e7:42:
25:5d:07:7b:0f:75:2e:29:d1:3b:b1:e9:a0:3a:2f:28:e3:20:
53:01:26:f7:9c:94:19:4b:f8:c9:a6:6a:73:8c:af:5c:7d:3a:
b6:26:27:bc:a0:0d:5f:ab:c4:a5:98:c7:4f:eb:0d:92:3f:57:
00:a3:a8:4a:68:6a:2f:0d:68:95:44:5a:85:8e:b2:4f:b6:33:
3c:4a:ef:1d:f4:b9:47:f0:6b:fd:53:b4:ee:32:a3:f5:2b:32:
61:f5:11:91:de:a4:72:fb:38:e9:ee:32:64:78:33:aa:75:b5:
15:2a:ff:4b:a8:b8:c6:07:c8:2a:7e:2c:67:93:14:45:03:a7:
60:6e:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:21:21 2026 by rpki-client