Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
File: rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft (raw, json)
Hash identifier: phrOlr+gdWRYAMUYyJ6WbLidW2IlGN/d6lhd67CVlfM=
Subject key identifier: FF:59:66:C9:9A:65:5F:20:1D:BF:B6:BC:78:64:EF:82:D5:E4:B8:08
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 01A164C6296A8AE7CE65490445AABE60E943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
Manifest number: 1ACC
Signing time: Thu 22 Oct 2026 18:01:10 +0000
Manifest this update: Thu 22 Oct 2026 18:01:10 +0000
Manifest next update: Fri 23 Oct 2026 18:01:10 +0000
Files and hashes: 1: 68S_aFNNmgzjbtipHf2_7W5_Bco.roa (hash: RwG1LoqBic8TBPegFSl5zghD2QUKZjWI0f3m/Wa2XvI=)
2: 6Tt_JhvDeS8RrZNagAC_Y34YgGM.roa (hash: CW1QJb8vGPMOzkDlQfxVkZeJUZKHQrNhrEN+PPxL4mY=)
3: 7_skAVHjgsLF5yurP5Hs70so6lU.roa (hash: GZbj/NvSS8FJycykZ2otNOVLib/kBA0tsDjDJmEYqOw=)
4: PqQ80zRW4L7-FL50a-sVEmgKj-Y.roa (hash: hnJ9eAizqcNHYh7QW8vCzEh+yJL2aUxkxjuN+e8GRho=)
5: TTfvsK5hd0_GUSO7MSasMs4WeiI.roa (hash: 5fCeSzSrIrlr7y2QP80sfMVoFocJvfEJtnCJtXTc+vY=)
6: UBfX_Q_ESiqvVw7XJAwKhDzOiYc.roa (hash: yij0Gcg4VWx0ybKs3NoqtbhVEj3lt3YcAj0EyqPh7VY=)
7: eF_Iql01f6Mj_BVm584xV8IssYA.roa (hash: iPi/R187ECcID1empgHZAsvXPyLUYT8zATjgc8Yt7/o=)
8: rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl (hash: Z/cpie5IFS/sREOjDHSTRkeplVopg279keZ3MwgY8Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:c6:29:6a:8a:e7:ce:65:49:04:45:aa:be:60:e9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Oct 22 18:01:10 2026 GMT
Not After : Oct 23 18:01:10 2026 GMT
Subject: CN=ff5966c99a655f201dbfb6bc7864ef82d5e4b808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:5e:fd:1c:7b:36:f4:13:e8:1b:6c:c5:48:
6b:d6:c5:68:2a:6b:fd:08:6c:60:8b:55:48:8d:fb:
dc:1f:3d:e4:c6:a1:5b:4c:ce:84:b3:48:52:6d:15:
56:02:c5:b6:03:88:ff:28:17:86:44:a8:d9:63:ed:
fe:07:92:1a:19:2c:fd:f5:c4:f8:07:83:87:1c:93:
d9:f9:77:ce:3d:ad:31:4e:1e:54:34:b4:17:05:52:
cb:67:af:1a:36:81:76:a8:d4:f2:fd:6e:6e:22:dc:
8f:bd:8c:0c:6b:74:95:ba:d9:81:a0:4f:5e:f8:b9:
81:91:be:dc:b4:3e:85:65:5d:f0:ff:fb:7d:c8:b3:
ed:4f:1f:1d:8c:60:69:44:5f:41:f3:d6:cc:9a:e9:
bf:de:4c:3f:7b:e2:3d:08:b8:3d:86:bd:9f:41:7a:
f7:93:98:a4:dc:2c:5f:b0:2a:71:d1:75:6b:5e:a8:
fd:29:e3:08:26:eb:8e:37:5e:ab:13:9b:fe:db:07:
d5:d9:0d:5b:02:29:f6:f7:57:bd:78:88:f6:2a:df:
6f:e1:bb:2b:21:e4:bd:d3:04:05:b2:f4:dd:1d:bf:
34:94:4b:bd:ed:b2:7d:ed:16:cc:6c:4b:4e:32:fd:
c7:07:b8:1d:c0:f6:bf:a5:55:4b:14:75:59:cd:be:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:66:C9:9A:65:5F:20:1D:BF:B6:BC:78:64:EF:82:D5:E4:B8:08
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2e:cd:e5:63:6a:56:09:30:6f:da:75:28:a0:81:7a:47:31:
e4:d4:1e:33:7d:dd:df:8a:9d:6e:a7:e8:40:a8:b1:cf:24:6a:
b0:b4:27:ed:29:61:b9:d0:3c:92:c0:db:5e:0b:f5:34:6d:97:
c8:ae:21:a6:1d:78:24:02:87:11:c8:9f:1e:86:48:09:ef:a5:
6a:00:da:37:47:d1:b1:a0:01:fc:bc:27:d5:4f:91:71:e4:0b:
b0:1b:03:48:2d:f4:e5:20:e8:88:73:ad:49:f9:9f:47:13:81:
6a:ce:4a:be:74:83:15:4a:b8:1a:0e:eb:b8:67:ae:36:f1:4e:
85:38:66:b7:c3:c3:cb:e1:6a:87:28:17:05:3d:65:a7:8e:ec:
fd:44:78:2b:1c:ca:e7:72:80:3e:90:2c:c4:0e:c4:33:10:d7:
d5:da:7d:d8:7a:69:78:6d:bb:19:5e:49:6e:48:92:9c:e9:23:
d5:0a:0e:79:42:16:d7:4f:56:50:19:a1:cc:12:d5:54:5c:ef:
c5:56:88:4c:06:d9:ae:3b:b3:46:84:7e:95:ee:9b:f3:83:dc:
36:94:a5:5f:f9:c4:17:08:d0:97:f8:72:7a:25:0f:9f:83:43:
3d:43:51:47:a2:4d:ad:78:f0:ba:ba:f9:f1:b2:f0:f7:95:65:
93:19:31:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 00:30:13 2026 by rpki-client