Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
File: RACrbRbCQdJkectXvk11NNdirGQ.mft (raw, json)
Hash identifier: eyD6MTtLT8Qhsluy392/EprBdKA/gDvnmKBd0LGFKvo=
Subject key identifier: 5B:39:3C:02:82:59:54:28:1A:45:B8:2D:72:E0:6B:44:56:AA:E3:27
Authority key identifier: 44:00:AB:6D:16:C2:41:D2:64:79:CB:57:BE:4D:75:34:D7:62:AC:64
Certificate issuer: /CN=4400ab6d16c241d26479cb57be4d7534d762ac64
Certificate serial: 01A183AC5BF7C0F9FFD58CEF8E07270745BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RACrbRbCQdJkectXvk11NNdirGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
Manifest number: 0142
Signing time: Wed 28 Oct 2026 18:01:13 +0000
Manifest this update: Wed 28 Oct 2026 18:01:13 +0000
Manifest next update: Thu 29 Oct 2026 18:01:13 +0000
Files and hashes: 1: RACrbRbCQdJkectXvk11NNdirGQ.crl (hash: gMx5aH6rlmtiJ1toglhBg5id6VmbkrzLggIw8wmkOoE=)
2: m5gb-w9518gstz9yjRIAUkSRK_c.roa (hash: IVTdJ1T0IcnTvVeugDeWJR+5AmWQzeWUIlOuu0Rzbp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RACrbRbCQdJkectXvk11NNdirGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:5b:f7:c0:f9:ff:d5:8c:ef:8e:07:27:07:45:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4400ab6d16c241d26479cb57be4d7534d762ac64
Validity
Not Before: Oct 28 18:01:13 2026 GMT
Not After : Oct 29 18:01:13 2026 GMT
Subject: CN=5b393c02825954281a45b82d72e06b4456aae327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:60:f9:e1:df:cc:c3:ae:4e:cf:42:4b:7c:e6:
82:07:c4:a9:fa:39:6f:3d:41:e9:0d:0d:04:9f:7a:
73:75:90:2d:13:99:66:6b:14:2e:e4:5e:0a:3a:b8:
e6:54:3f:05:10:35:a1:37:57:52:68:47:65:22:c3:
82:0f:9c:72:48:06:c9:16:a9:e9:e6:2c:2c:bb:47:
1d:20:bc:68:89:06:68:7f:10:7b:cd:46:00:9e:b7:
b2:96:fe:ce:9a:8a:f4:4d:1a:bc:79:14:57:34:4d:
73:a2:67:53:c6:70:e4:3f:74:22:79:86:4c:98:08:
1f:22:bc:8d:50:1a:d9:08:da:ca:27:13:2b:76:c0:
39:b1:29:62:ee:21:8c:13:eb:c6:99:86:d7:4e:77:
89:cb:72:07:30:0e:2a:b6:7c:83:77:bc:b7:34:ae:
b7:e9:cf:8b:3b:3c:8e:4d:87:cf:df:72:79:22:2c:
e4:e9:76:09:da:27:1f:be:36:29:79:05:de:8a:90:
df:2e:cf:88:d4:f1:1c:b9:fb:1a:53:11:b2:18:74:
f4:ee:b9:a1:85:48:fd:54:a0:fe:c7:20:b6:80:ab:
59:5f:f3:8b:1a:e0:57:be:0e:2a:ab:5f:5d:ac:fb:
07:e0:27:60:3f:7c:d5:e3:d3:96:e5:e1:5a:b3:6a:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:39:3C:02:82:59:54:28:1A:45:B8:2D:72:E0:6B:44:56:AA:E3:27
X509v3 Authority Key Identifier:
keyid:44:00:AB:6D:16:C2:41:D2:64:79:CB:57:BE:4D:75:34:D7:62:AC:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RACrbRbCQdJkectXvk11NNdirGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ee:80:c6:fa:e6:cc:67:f4:81:84:90:3c:cf:66:f6:10:a4:
29:5f:ea:e0:b6:9d:f1:00:e9:17:75:64:3e:0b:c0:60:e1:d8:
48:f9:89:24:a8:9e:e6:8f:96:77:90:57:b2:d7:ad:88:54:7c:
7a:21:0d:33:1f:c2:85:0a:01:b8:d1:e2:fe:cf:42:56:a4:31:
44:8a:d8:b5:14:91:cb:a2:2f:f4:81:42:3e:7c:2e:a1:5c:f5:
72:a0:9c:91:6b:f2:44:29:40:ef:89:63:64:c4:26:92:dc:3a:
b9:f1:e8:ef:14:56:86:a6:ee:72:58:c0:fb:75:21:5c:6a:6a:
72:77:68:9d:bc:d1:07:ab:7b:4b:95:fd:5d:6d:65:cb:a9:e9:
bd:d5:72:94:05:8d:91:63:af:1e:97:0a:e2:e1:42:c1:69:b1:
63:49:e9:a9:64:e8:56:fb:2c:16:43:bf:b0:db:29:7d:8e:73:
fd:8a:bc:33:c7:f0:43:75:8c:21:85:dc:8b:ed:42:62:17:d0:
f0:97:89:c7:34:e0:9f:d2:3d:ba:d4:31:94:50:85:80:89:66:
30:48:48:cd:8d:d3:36:24:b4:d4:79:cc:3c:63:d4:5c:d6:9a:
32:3a:7e:b3:58:74:e7:cf:e1:85:2c:83:0f:19:18:0e:7b:f7:
b2:f4:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:27:23 2026 by rpki-client