Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
File: rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft (raw, json)
Hash identifier: LknJ8FW92P8jCgukmGHdwvmhCqKT1iSRuihoO4VtYB0=
Subject key identifier: 64:31:8C:B1:04:BC:0D:AD:A0:FF:A4:52:03:38:16:CE:C2:5D:A9:85
Authority key identifier: AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
Certificate issuer: /CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Certificate serial: 01A1743980B28DCABD04E0AE63ED6021728B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
Manifest number: 013A
Signing time: Sun 25 Oct 2026 18:01:27 +0000
Manifest this update: Sun 25 Oct 2026 18:01:27 +0000
Manifest next update: Mon 26 Oct 2026 18:01:27 +0000
Files and hashes: 1: en3Dgcg-QCYV7nam7q3FCP5ZkR0.roa (hash: l3a1Se4v22VtVm5ZL/5W5MYgFfditJOkAKvu9Xf04q4=)
2: rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl (hash: TRKboA4nqYggsxXQ/MCqfxEVXrjI7jeHOQgfvRfOqIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:39:80:b2:8d:ca:bd:04:e0:ae:63:ed:60:21:72:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Validity
Not Before: Oct 25 18:01:27 2026 GMT
Not After : Oct 26 18:01:27 2026 GMT
Subject: CN=64318cb104bc0dada0ffa452033816cec25da985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:dd:c6:05:aa:d8:6b:2f:7e:44:40:9c:c8:
e2:ca:7d:2f:af:61:39:41:6a:d0:a6:4f:40:b1:b4:
85:c3:6f:87:81:13:a8:1e:75:2e:09:5c:be:b2:37:
b3:f1:82:04:43:19:50:a4:92:92:b7:11:ac:a3:c3:
33:fd:6a:10:01:e1:cc:7f:a4:3c:19:50:91:e6:50:
32:15:44:da:51:dc:27:0d:5b:4f:44:3f:f0:77:08:
c5:5b:35:21:be:10:33:32:9c:e5:9d:ce:7e:18:30:
b5:a8:99:18:41:c9:e5:04:6c:45:2f:f5:a4:0d:b7:
2b:66:2a:a9:83:5f:e3:9e:99:fd:cf:ce:bf:53:67:
df:be:3a:00:79:9d:f8:db:80:c4:84:1f:7d:b5:34:
a9:90:aa:8f:ca:4b:90:68:22:9b:b4:a5:5d:d6:c4:
94:ff:3f:19:da:86:79:32:3c:a5:0c:2a:e8:76:75:
b0:92:9e:6a:db:55:52:3b:70:96:21:1f:7e:28:fa:
ae:be:f8:65:db:ce:4f:77:a4:7f:9a:dd:99:c4:1d:
90:84:cf:17:7c:a5:3e:8d:26:83:b2:00:d3:01:2f:
6a:f6:cd:38:15:c3:ca:49:f1:0f:be:29:84:98:2c:
40:4a:ae:a8:63:ee:73:c3:04:d6:a5:91:4a:d0:07:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:8C:B1:04:BC:0D:AD:A0:FF:A4:52:03:38:16:CE:C2:5D:A9:85
X509v3 Authority Key Identifier:
keyid:AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d8:15:a9:df:17:b1:4a:0c:42:ed:cc:ba:b5:97:fd:96:17:
3c:77:67:36:2d:a7:16:68:28:e2:ba:5d:de:45:4e:11:db:83:
62:06:42:39:40:5d:1b:6f:31:da:a1:7d:d5:e4:fd:ee:27:8a:
fa:29:9c:c2:61:40:cf:20:67:95:d6:ce:97:07:d6:ed:cf:06:
b6:eb:df:6e:34:5b:4d:c1:b7:89:be:32:c6:3b:86:21:e4:1e:
51:00:d6:74:4a:df:2b:5d:95:62:61:67:3a:db:b8:c1:fb:60:
b5:68:84:66:7d:87:e4:1a:6c:33:f5:42:93:cb:d8:4d:5e:dc:
57:5c:1d:52:53:ef:d5:71:31:ba:c1:72:63:53:c7:ba:4e:a6:
48:44:a7:17:1a:e3:ab:e1:6c:c4:3e:67:16:ce:b0:30:e0:4a:
0e:0a:10:8e:16:9d:ad:f2:e2:d9:37:4a:69:5a:1e:1a:4b:3b:
07:28:22:be:68:e6:2f:0f:30:6a:cf:4f:b3:00:90:bc:15:89:
8b:73:33:bf:7a:10:fd:2e:e0:2d:5b:3d:e3:cc:53:86:c0:76:
5e:cd:a2:97:eb:78:80:de:05:2d:c7:50:e3:32:01:26:53:e9:
67:48:53:b7:06:c8:cc:92:d9:16:d7:0f:65:21:d0:51:dd:f0:
bd:7f:e9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:04:45 2026 by rpki-client