Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File: t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier: kplzDsuOt7ySkweEXov3lBAN99FYRDF87uBZIH3iip0=
Subject key identifier: B6:84:AB:94:78:48:79:33:F4:13:08:9A:15:73:2D:9D:5D:7B:00:3F
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 01A17EF3994E9292497E981D702D0206169F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number: 1B09
Signing time: Tue 27 Oct 2026 20:00:55 +0000
Manifest this update: Tue 27 Oct 2026 20:00:55 +0000
Manifest next update: Wed 28 Oct 2026 20:00:55 +0000
Files and hashes: 1: 45NB0bvYOHCNaT8tSSBDKWKQT7E.roa (hash: gCInVKvSkE/iCzoL7dPNSLyjJ5f9UjgQbqyeMZPo0Q8=)
2: IEHhAsm6Xmdej2oCP8axb9PFCII.roa (hash: HMNMX3CTbZjbh0WFm8CFNKQuDtEwRiZo1B5DzDBXjYE=)
3: QH92-KbfL63ctZl3QrX0nIExypM.roa (hash: aa3zpeOKy0KyaOR31LacRMZS9fLi4Tzjtg5JgfAnbwk=)
4: bEcjbcp-y9JIahihmtoi9EK0TiQ.roa (hash: ASxCyz+NX/m3cMBGmbT/xXqWc8knXBuHgU1BoVV8rW4=)
5: dkEx4YNEDY49gU4Bi8O4shVb0qE.roa (hash: 1Zg+GYUEr0f6jb4dD/9ZTpGvZlRVE8LmcxRY4Ssltp0=)
6: fljhoa-vFJrGSmV3e20cUcKDsk4.roa (hash: d+2zQov75PllQNpGPcXHZc6/b346mk3Kl228kjZURvw=)
7: iOtk8LXgOKxDWPlP4BKz8OTWN8E.roa (hash: kcjtUwCY22q3aM/qdCSkN7N8FHGs5xCi5hpXiJukyWQ=)
8: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: l+ksSFn7wWzD9ZP72ntuBfxtiRfdkDF4UUxo0CaVxRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:99:4e:92:92:49:7e:98:1d:70:2d:02:06:16:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Oct 27 20:00:55 2026 GMT
Not After : Oct 28 20:00:55 2026 GMT
Subject: CN=b684ab9478487933f413089a15732d9d5d7b003f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:d5:fd:85:21:98:73:f6:cd:32:ff:ba:9a:
03:1e:5f:5a:d6:12:a9:7a:d7:54:6e:d7:24:45:ec:
54:05:40:f4:86:c9:90:89:23:01:c3:ad:fd:60:ac:
ba:53:b4:74:61:33:5e:13:f4:b2:ae:60:96:48:b4:
06:e5:bf:77:dd:17:77:4e:bd:fd:c3:e9:a4:57:80:
2b:29:22:c7:c3:4d:a4:10:fc:b4:eb:de:da:ba:53:
26:02:ae:a8:d3:0c:d3:04:fa:70:56:28:59:d1:e2:
fe:3c:ec:8c:39:fb:1b:ad:f3:1c:f8:d5:7a:41:e4:
e5:05:2f:ed:a7:17:1a:28:7d:50:21:72:e2:02:8f:
ab:72:b3:8d:34:c1:b9:86:c7:30:39:36:5c:98:23:
98:2c:45:71:61:fe:6c:d4:3b:2d:84:de:98:63:1b:
45:c6:9c:c9:48:60:cd:c5:93:dd:f5:66:c2:53:2b:
59:c6:be:d5:31:1b:2b:02:4d:86:68:8b:a1:10:37:
71:49:34:78:4b:3d:bc:64:94:c9:96:c4:c7:ef:96:
f0:d5:78:1f:04:60:f9:cb:1f:b2:f2:ae:0d:62:b1:
f6:30:72:73:0c:e8:0c:9d:73:b3:e2:3b:61:fd:53:
7a:c5:df:9b:1b:9a:5d:20:7a:26:c2:6a:75:1f:15:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:84:AB:94:78:48:79:33:F4:13:08:9A:15:73:2D:9D:5D:7B:00:3F
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:84:00:f1:48:63:dd:37:fc:fb:9c:60:92:b3:8e:77:62:ea:
89:97:da:7a:13:ff:55:54:09:20:c5:22:06:13:e3:16:f9:f0:
47:7b:77:8e:3c:d9:78:80:ba:64:6b:89:20:fb:fc:96:e3:ce:
7e:92:fe:7a:55:52:b9:01:23:b5:3e:77:7b:60:a0:e2:12:8e:
57:20:30:13:61:9c:5e:4c:07:06:65:5d:35:5f:14:6c:f5:0b:
b7:81:84:85:ad:8a:34:4a:41:ab:91:0e:2e:40:f8:57:2a:61:
9d:f4:b8:8c:ed:7d:fc:2a:b3:65:95:67:aa:18:db:7e:ba:8b:
86:bb:fe:b3:9a:b8:89:81:7a:75:ba:d0:fd:36:0a:45:8a:87:
dd:f3:ed:36:98:ad:ac:52:b3:06:bc:6a:51:c1:0d:ce:f5:ca:
26:cc:b5:64:8a:15:34:ff:a8:b9:e8:13:55:57:23:d7:97:fd:
67:a5:cf:90:bd:68:84:2e:c1:53:35:85:fa:87:69:a9:55:34:
22:7a:b5:df:59:f9:bc:d0:96:e2:df:3e:02:58:9b:1d:ea:4c:
ac:75:2a:f4:50:2d:e5:d7:02:41:92:a8:35:87:f1:1f:9e:a4:
01:85:25:70:dc:e8:9d:39:62:9a:51:ca:cf:c5:fd:a2:0e:b7:
0b:a5:ee:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:17:15 2026 by rpki-client