Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
File: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json)
Hash identifier: NQ8KWZNp6xWfTLhLKpsBs2JOldkEbtPfuEFZ+RF3p8I=
Subject key identifier: EA:D4:9F:99:5C:42:62:47:C3:1A:F8:14:0B:92:3A:9D:5C:58:37:C5
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial: 01A17B84AFBF9B18A99CC56CC0D29654CF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
Manifest number: 07B2
Signing time: Tue 27 Oct 2026 04:00:55 +0000
Manifest this update: Tue 27 Oct 2026 04:00:55 +0000
Manifest next update: Wed 28 Oct 2026 04:00:55 +0000
Files and hashes: 1: LMFtBS2aexBP5idp4kn9Cblsyrg.roa (hash: SFFRBNG1AmZ+gynl5+RE9vwnB25aOjb/67Op7mUiN24=)
2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: v91eR8UVnyh8qEfhkSsk+3kAm00chV3il5iClCgW3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:af:bf:9b:18:a9:9c:c5:6c:c0:d2:96:54:cf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
Validity
Not Before: Oct 27 04:00:55 2026 GMT
Not After : Oct 28 04:00:55 2026 GMT
Subject: CN=ead49f995c426247c31af8140b923a9d5c5837c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:85:db:e9:8c:a5:15:2e:87:2e:de:86:3b:
ac:c5:90:78:22:1b:40:64:64:08:66:c8:02:8f:44:
27:52:42:ee:af:95:49:1b:2b:67:00:95:88:ae:2d:
dd:97:bf:06:44:da:e7:47:b4:f0:f2:ac:d8:63:c8:
4d:9f:36:9b:35:eb:f6:cf:70:19:d2:05:48:f7:dd:
00:1f:4e:ff:54:15:17:05:b0:fd:7d:85:d8:a2:89:
07:5b:cc:18:79:b6:5f:14:3e:ad:5c:dd:1b:0a:05:
0a:37:ce:ba:ab:6e:d1:c9:45:17:aa:40:ec:86:0a:
b9:09:59:2e:cb:5e:f0:9b:b5:72:90:6e:88:cf:e5:
03:f6:26:0e:10:87:bf:72:f8:71:e5:d6:e3:3f:b2:
8c:7d:fe:0f:35:d0:0f:ea:45:f8:8e:13:e2:87:64:
8b:fe:4a:ae:bb:68:2a:c4:09:34:1a:b9:74:38:87:
aa:26:46:ea:5f:85:c2:e7:0c:98:43:62:73:50:59:
21:d6:e2:12:96:f8:97:f5:bb:97:c4:9c:2b:90:29:
1d:fa:71:ff:67:ba:c9:da:1b:f0:2d:e5:31:40:f9:
d3:a1:d3:0e:e9:c9:2d:42:72:ab:e6:37:10:ae:d7:
1a:47:8a:85:61:bc:a3:16:8e:b7:81:31:24:43:6b:
f9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D4:9F:99:5C:42:62:47:C3:1A:F8:14:0B:92:3A:9D:5C:58:37:C5
X509v3 Authority Key Identifier:
keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:42:b1:5d:3c:54:c9:c7:35:01:f0:08:f2:5d:58:48:7e:5b:
cf:5f:f9:82:ce:5e:b9:29:d2:9d:9a:98:19:09:de:a8:a2:a9:
7d:59:61:f2:35:00:ca:e5:29:db:e7:37:53:94:0a:5e:69:7c:
dd:b9:5d:8f:07:9f:f4:9b:d7:91:3e:97:3f:71:51:a3:79:be:
2c:3c:e9:87:1c:46:ba:1a:68:fd:0f:79:d7:bd:6a:67:58:d9:
3e:55:69:1c:f2:fd:96:b4:b8:d3:16:85:c7:4a:7f:58:c5:45:
89:10:b1:27:ec:9b:bc:54:6c:e9:f3:32:d2:be:7b:3d:b4:3a:
5a:69:be:ad:56:b4:88:e8:ac:ba:9d:b6:c2:49:bd:a8:85:25:
7c:1c:ea:fc:ee:8b:0e:ad:0a:01:8b:09:b0:2d:2f:31:a6:36:
ba:5c:f8:8b:e1:35:70:90:33:61:b3:65:11:2a:51:b8:d7:e5:
08:a1:29:96:f3:c1:e3:be:de:33:ad:c1:6e:94:99:de:dd:2d:
55:b2:7a:d5:a6:59:62:b1:19:e2:0e:c4:c4:7a:c8:16:20:68:
8e:64:60:c7:e3:12:d2:20:cb:41:99:eb:4d:47:01:fe:1c:f3:
e6:43:79:81:3f:5b:24:d2:ef:1d:24:04:b8:3a:ed:2c:45:94:
10:c3:4c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:43:06 2026 by rpki-client