Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
File: sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json)
Hash identifier: 7ZDCp6uq3elh7ojmIzf95U5dIh48IiSRLLHRJbXycHU=
Subject key identifier: B4:B3:BF:74:DC:A7:77:6A:FD:E8:AD:CC:B6:ED:C2:11:0F:FA:BB:50
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial: 01A1777077D1D359E24A7BFCA05B3545D1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
Manifest number: 10C6
Signing time: Mon 26 Oct 2026 09:00:21 +0000
Manifest this update: Mon 26 Oct 2026 09:00:21 +0000
Manifest next update: Tue 27 Oct 2026 09:00:21 +0000
Files and hashes: 1: 7CUwK1UYwqayiiojTeY6DuJ4PuE.roa (hash: 0KwqbQB6sudYAbA+sSqdOrA5B6tIA7G2Tl98Yz+oNVs=)
2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: LomYNcbYAx7+c9TMTDQRl7+2GSLSopZ36PTgMCsiMpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:77:d1:d3:59:e2:4a:7b:fc:a0:5b:35:45:d1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Validity
Not Before: Oct 26 09:00:21 2026 GMT
Not After : Oct 27 09:00:21 2026 GMT
Subject: CN=b4b3bf74dca7776afde8adccb6edc2110ffabb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:59:aa:04:ac:c7:fa:e0:73:c1:af:8e:3a:
c2:1b:98:71:c4:dc:82:f0:9c:cc:b7:3f:2c:de:4a:
c5:33:1b:cf:33:c2:b5:14:6d:5f:60:47:37:68:b3:
61:90:59:65:05:e5:49:fb:f4:7d:db:76:84:6a:46:
40:95:3f:b8:52:a6:73:2f:da:5e:66:33:a9:d8:eb:
eb:7a:1f:54:79:72:b7:3e:1c:fd:a4:ba:69:07:9c:
3f:33:05:bb:cf:89:1c:85:05:e3:a3:88:5f:3e:8c:
bb:43:a2:3d:35:e7:8a:01:bf:44:bd:e0:b8:be:85:
e0:fc:0d:ad:70:eb:41:5f:7d:eb:0f:e8:c5:1d:56:
b4:0d:ac:02:d4:2b:b9:93:d1:71:98:a9:11:1a:8e:
9d:6f:4d:4e:5d:fc:e7:e7:95:86:85:af:a8:33:19:
58:04:86:ac:a8:c9:fc:45:87:8b:43:ef:4a:b3:df:
2e:23:4b:59:83:c3:93:9c:4d:dd:af:8f:60:02:7e:
41:ff:97:46:63:b0:63:00:98:70:cf:d9:89:95:af:
19:c1:3d:06:85:a8:17:09:17:17:e0:32:7d:6a:cc:
f7:00:b6:07:7d:59:49:94:89:ee:09:27:4b:03:34:
b1:ce:7f:1e:ec:85:3b:4c:cb:72:e5:30:21:4c:58:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B3:BF:74:DC:A7:77:6A:FD:E8:AD:CC:B6:ED:C2:11:0F:FA:BB:50
X509v3 Authority Key Identifier:
keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b9:d0:03:cd:b4:ef:1b:2c:ae:95:1b:ae:ca:af:c9:3a:94:
00:34:fd:51:e8:41:53:d9:dd:88:a6:f0:93:f0:fb:01:fd:d6:
31:03:ae:05:ed:e0:1c:92:0b:59:25:cc:c9:8a:75:ad:77:0e:
28:60:b3:d0:4e:67:ae:6c:b4:e6:51:11:78:bd:28:8e:ac:a6:
a3:97:09:98:c4:0d:da:1d:3d:a2:82:35:80:4f:19:65:ac:9d:
9c:b4:40:e5:47:23:a2:f5:51:10:6b:0c:4d:95:77:ee:bc:6a:
be:1c:86:d4:6a:80:93:1a:f1:bb:b3:50:2c:0f:72:0a:ea:c0:
a5:a9:30:0b:21:dd:b4:b6:35:06:4d:4e:0f:70:28:53:5f:c7:
5f:81:00:6d:40:a3:0f:d5:7e:9f:8f:0b:91:35:87:fe:17:2e:
ae:49:35:84:87:58:0f:ed:8e:79:bf:f4:e8:ae:d8:59:87:df:
86:fe:8c:d6:53:33:24:4d:7b:07:de:41:c4:24:42:bf:97:1a:
13:4d:fd:29:58:c1:ed:f8:e3:40:24:a3:59:ab:8d:e9:1a:3f:
05:66:cb:2d:33:ee:1e:4b:f9:75:21:d1:f1:0c:ae:05:1b:69:
5d:fc:e7:37:b6:e3:f2:ba:9e:9a:52:ed:8a:a2:28:da:3a:ef:
d3:5b:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:21:30 2026 by rpki-client