Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: AyNKLFpGFbdnn/WT2qeKN5QIWO31z1kMUX9F6ldNREk=
Subject key identifier: 0D:82:B1:2B:E2:3D:DA:6E:77:E2:4D:EA:BD:D1:E6:E8:EE:F5:26:C3
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 01A14A2A7D2997C6718F2637CA11EEF9B17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 1AB2
Signing time: Sat 17 Oct 2026 14:01:00 +0000
Manifest this update: Sat 17 Oct 2026 14:01:00 +0000
Manifest next update: Sun 18 Oct 2026 14:01:00 +0000
Files and hashes: 1: 1-kk5YtawRkJQwdDT4MsBuFBc3Yo.roa (hash: Aamvd7Z6s9hiJAa6DbrukXmWAwrVI2PPj/AOKYI7G4U=)
2: PoqWbVHh-FUr2dkHNr-gmxi2c-8.roa (hash: YLgUsuGSocGrObs4G25+Ghw9LtEJ63hht/5KGdZnHW0=)
3: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: uJ/M/rdC7oB5qrgj7YYz0mE99Lld/jY7S9JQason8xw=)
4: t5ZpdQdakz93WmXWJ_al0M0qYog.roa (hash: ZYC1omK7NgO2nQPCpRlt52kAchXz0Fe3jlMw43xrEYU=)
5: tH1_amUJra4CI9QvP3yLNCB46mM.roa (hash: tsVlVHEz2EVIG09xlAX5+skE25KtbbQqdBHiho/Qv+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:2a:7d:29:97:c6:71:8f:26:37:ca:11:ee:f9:b1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Oct 17 14:01:00 2026 GMT
Not After : Oct 18 14:01:00 2026 GMT
Subject: CN=0d82b12be23dda6e77e24deabdd1e6e8eef526c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:c4:02:1a:f1:02:c6:fd:9a:ec:f3:33:82:
5a:af:76:4e:b0:db:c4:8d:63:13:d3:d4:ff:ee:ee:
34:db:85:a8:50:3d:dc:50:4e:4e:bb:dc:5d:c5:f2:
33:78:65:6e:35:8c:b3:d2:ee:4b:8d:fe:04:0f:c5:
95:8a:05:06:e8:25:42:09:25:48:c2:69:59:2a:04:
4f:d3:ea:0c:d5:c9:8d:2b:f4:42:74:ad:6b:b3:61:
ea:78:08:64:ec:11:a7:32:9b:93:b8:85:02:10:60:
0b:1d:65:3f:d3:83:a9:dc:55:68:8c:ec:d5:ab:06:
5b:b3:0c:47:69:98:8d:fb:49:94:f8:aa:a8:07:30:
b9:99:6e:24:c9:86:d4:b8:67:37:92:e7:25:79:e5:
c0:e3:0e:1b:48:70:0e:f8:98:87:d3:19:df:b3:8a:
10:04:59:22:81:73:74:24:95:71:e8:a5:91:54:5d:
17:f9:2b:19:a8:91:e2:2e:57:b5:63:10:d0:05:fe:
e9:2c:b2:f2:84:98:62:e6:7a:31:95:36:83:d5:39:
72:95:e8:23:71:88:04:00:7f:78:a2:26:86:b4:be:
32:96:70:be:21:cf:54:3b:b6:3a:ea:96:a3:7a:4e:
f9:61:ad:cd:09:e8:9b:2c:74:91:8a:a3:dd:96:87:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:82:B1:2B:E2:3D:DA:6E:77:E2:4D:EA:BD:D1:E6:E8:EE:F5:26:C3
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a3:0d:4a:96:65:e8:8f:d8:9a:42:59:ac:59:e2:12:7f:4b:
ab:d1:14:42:e7:78:7c:d9:86:c0:26:fe:f7:e8:8f:d2:97:4b:
5e:81:ba:48:62:5d:99:11:9e:a2:58:38:e2:a0:c1:c2:38:1e:
33:71:08:06:15:69:3b:cf:20:d2:a3:00:93:22:ee:ab:bb:10:
cb:75:b5:f2:e9:5c:29:3d:dd:71:10:6c:19:50:35:8c:34:ea:
75:6e:cb:b6:12:6f:89:0e:35:bf:91:42:a7:09:2a:c0:d1:14:
33:95:4f:00:0d:eb:63:1d:bb:dc:90:b6:dc:6b:f1:04:fe:5b:
4f:01:3c:9d:5b:14:ac:ee:ae:61:4d:b6:00:01:69:3a:2d:63:
97:d1:66:38:be:4d:2e:e1:b0:84:98:70:4d:6f:21:57:61:51:
44:85:03:f8:35:9f:91:4c:64:12:16:9e:7c:68:c7:57:75:e0:
b1:78:70:92:2c:e8:b6:04:1f:9a:1c:d5:46:52:b9:f0:36:b2:
a3:ce:ce:bc:e5:bf:7f:d3:c2:fc:00:fd:41:ab:0b:50:14:71:
b2:7a:c7:3a:02:5e:2d:71:4a:d5:02:ed:c2:89:22:fb:9e:5d:
37:ad:5c:d2:ba:5f:f9:b6:b9:0f:d9:06:59:4b:ca:d2:60:2a:
57:25:b6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:50:50 2026 by rpki-client