Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
File: a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft (raw, json)
Hash identifier: Amh7HE6aP+1dRnM6Uyw5e4A/hZto9BXGbEI2zaKq/zQ=
Subject key identifier: 54:72:5F:8E:74:EC:35:92:0E:6A:88:68:9D:CA:B5:95:EC:2C:11:5A
Authority key identifier: 6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
Certificate issuer: /CN=6bf44071ba5a6778721519a1862212804e6034cc
Certificate serial: 01A181BDCC5DD7B9F77FACCCFCB94C3FF4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
Manifest number: 0259
Signing time: Wed 28 Oct 2026 09:01:01 +0000
Manifest this update: Wed 28 Oct 2026 09:01:01 +0000
Manifest next update: Thu 29 Oct 2026 09:01:01 +0000
Files and hashes: 1: 4t94Ewh86rP5LgTWja3S3CmNJgI.roa (hash: U5a2tjhoCzukKEhPTVnBWaLXi08xhHMBTeQZZG2Rjm4=)
2: a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl (hash: 4oksiAt28Eb/j5NqYVdGXSbuI3Ksp2AMff6kSuyMBqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:cc:5d:d7:b9:f7:7f:ac:cc:fc:b9:4c:3f:f4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf44071ba5a6778721519a1862212804e6034cc
Validity
Not Before: Oct 28 09:01:01 2026 GMT
Not After : Oct 29 09:01:01 2026 GMT
Subject: CN=54725f8e74ec35920e6a88689dcab595ec2c115a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:c7:b4:bb:05:53:25:94:c6:a1:06:43:e6:
85:ca:72:ed:fc:4c:db:97:08:40:00:81:84:ad:e3:
4e:86:c2:52:20:0b:0e:91:0a:76:a9:9f:84:c0:1b:
3a:2e:24:c7:4e:cb:58:d0:4f:23:fd:09:e0:3a:9c:
77:af:bd:ca:6d:fc:13:39:b0:cc:82:0d:75:79:ee:
b9:de:12:71:fa:99:24:f7:b0:75:6f:28:e3:46:f7:
9e:ea:91:1e:77:03:9e:ff:0f:10:ba:b7:7f:d3:55:
a1:07:8d:21:6f:bc:d4:b1:cf:a2:17:69:0f:e2:27:
66:6f:5e:cd:0d:0c:a0:a9:4d:cc:ac:40:6a:92:03:
38:e3:2d:ab:38:6e:11:0e:09:b3:8c:31:74:52:3a:
24:11:cc:dc:b6:4d:3e:95:a3:00:12:0b:d3:46:08:
c3:22:d7:8d:b0:4f:4d:8b:8c:be:67:1a:5e:15:c5:
bf:ba:0d:3f:82:90:03:8e:86:96:24:0e:d2:45:1c:
4c:9f:0c:6c:89:ba:ea:99:5a:d0:64:84:68:4a:63:
37:83:dd:2f:28:c0:65:14:43:b1:68:76:3f:26:ec:
11:04:c1:53:28:d2:25:3d:3a:86:fe:4d:5a:b1:29:
f0:d8:8a:e8:d6:82:33:8c:5d:7b:81:6c:3d:25:22:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:72:5F:8E:74:EC:35:92:0E:6A:88:68:9D:CA:B5:95:EC:2C:11:5A
X509v3 Authority Key Identifier:
keyid:6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ac:66:3c:1f:86:b2:59:00:55:c7:b1:81:ec:54:72:03:f3:
ca:21:07:c3:70:6a:c3:60:fc:5c:0d:2c:77:61:eb:97:ee:07:
95:8d:86:6d:9d:cc:82:01:f7:b5:c9:62:6c:ee:a9:22:40:ff:
71:e3:ca:ac:f3:1a:26:27:ec:c9:07:0c:d8:92:e0:6f:e9:c4:
7d:ec:cf:45:d0:55:c8:9c:e9:fc:f6:0a:ef:ed:bd:ba:42:a7:
76:81:c6:ee:c6:10:b4:4c:8e:f9:67:84:97:3f:6d:d3:60:e4:
c9:80:14:65:7a:75:7e:3b:93:06:75:6f:33:46:ea:48:32:36:
6f:4a:8d:83:81:4f:57:e2:9b:a6:60:46:14:d8:8d:a3:27:e2:
41:99:a1:18:af:dd:71:3d:fe:2b:6c:f6:1d:d4:33:01:3e:87:
37:ed:02:78:ba:d2:fe:48:73:9d:f8:9b:bb:31:49:77:71:9a:
9a:94:f1:b6:79:07:dc:16:7a:16:75:08:66:dc:70:95:53:49:
51:0c:d6:74:87:f8:88:11:b8:b2:6d:7c:99:c4:7e:33:66:2e:
68:15:6f:e3:22:ad:33:23:c8:d5:d9:2b:c6:cc:0f:08:11:fd:
35:ea:b1:fb:46:d2:da:7f:f4:8d:8c:68:29:1b:23:bb:3f:0a:
22:da:40:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:19:36 2026 by rpki-client