Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: 3egvnKSWUIcL5BlXKZgW4eFaTMeZYX71NXeqEGH/tgA=
Subject key identifier: 63:B2:9B:5A:2B:20:4A:FF:2D:1E:1F:A5:72:01:AA:A9:B6:02:21:13
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 01A16C7F792312595B7C1509E6747C3C12F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 1AC1
Signing time: Sat 24 Oct 2026 06:00:55 +0000
Manifest this update: Sat 24 Oct 2026 06:00:55 +0000
Manifest next update: Sun 25 Oct 2026 06:00:55 +0000
Files and hashes: 1: N4MtS_rO7hT8RpY21Yy7Mk8WK6A.roa (hash: a7GxJ/DHXtzeo/5dQNp0athcwGWDpOFXNyta+KLkn5s=)
2: j0djN2P0pP4FekmDXul4LqL8vFc.roa (hash: Imh4k/3T8J0ucRVeJognqvvIOllYc40mbdeDTMcQJto=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: Yz4LfctbuUO+jFzF4hsF6Rcv9GiM7TXsaQFqmVfp3ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:7f:79:23:12:59:5b:7c:15:09:e6:74:7c:3c:12:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Oct 24 06:00:55 2026 GMT
Not After : Oct 25 06:00:55 2026 GMT
Subject: CN=63b29b5a2b204aff2d1e1fa57201aaa9b6022113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:96:79:44:29:bd:c4:71:d6:a9:88:16:c0:fe:
ba:eb:f8:ad:46:1f:d8:ed:ea:74:53:93:4e:80:92:
56:f9:6d:3c:75:4d:e6:ba:0c:44:7c:04:7a:2e:a3:
32:7f:32:80:42:f2:5d:26:d8:7e:d0:c0:10:43:77:
3f:0e:88:c5:fa:c3:95:27:ca:97:40:a8:7f:19:d0:
94:b2:72:22:5d:9e:82:8c:6d:4b:d4:37:18:43:80:
18:90:64:1c:86:74:4d:8e:6d:46:5e:07:85:6b:6a:
3a:23:35:84:1e:79:62:0c:7e:27:eb:a1:c2:2c:59:
ca:94:88:c3:b2:45:93:4f:17:96:5e:5e:ea:d8:88:
d8:d9:da:7a:a4:9a:50:21:e0:56:48:84:e9:57:df:
be:63:ab:d0:71:4a:52:a5:72:28:3a:b6:7b:ae:3c:
64:be:bb:cc:e6:68:61:aa:ab:b4:ac:cd:41:df:1c:
3c:a4:c3:ce:14:39:68:51:43:a5:1b:82:07:0e:85:
8d:f7:d8:43:5e:24:86:33:dd:b8:43:b0:ee:27:f1:
c7:7f:f5:8a:dc:12:1f:f5:a2:f9:e6:31:aa:04:d0:
7f:54:df:ea:e6:7e:df:b2:ff:3c:ac:5f:73:7f:29:
7e:d5:a6:cd:4a:db:b7:87:11:c7:68:ba:c6:56:a5:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B2:9B:5A:2B:20:4A:FF:2D:1E:1F:A5:72:01:AA:A9:B6:02:21:13
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:71:23:ba:67:9e:3a:7c:1f:20:a6:f9:76:5f:0d:31:84:dc:
4d:16:e9:1d:9d:cc:75:67:8f:47:ef:fd:d4:68:ac:3d:4b:71:
16:a4:56:e6:b0:f5:1e:2c:e7:9b:87:6d:42:e4:d0:bd:27:5f:
2e:e6:52:26:fb:45:e7:e8:7e:29:59:52:52:b4:ce:ac:95:20:
f5:06:2b:4c:57:5c:ad:ce:14:bd:66:ff:74:de:81:f4:71:7f:
52:4e:1e:ee:90:4a:7f:84:98:c9:26:c3:75:84:e8:a8:03:71:
13:c9:b6:35:a0:2d:de:94:40:c2:b7:b5:e8:2c:3b:54:0e:ff:
8b:49:2c:41:8b:c1:0a:71:0e:60:4e:4e:5f:9f:82:3e:04:63:
86:58:ff:a8:8a:e2:82:bb:c1:42:20:8f:f7:ae:b7:25:63:72:
62:3b:54:18:11:0a:38:11:da:cc:74:3d:aa:b0:8a:59:36:db:
6b:31:e2:41:8f:dc:d8:b9:e7:0d:c3:18:bc:f8:33:ae:9b:c1:
c5:cf:a3:fe:3b:18:8c:ad:7a:4c:8b:18:45:00:db:9c:57:9b:
86:fe:42:bf:80:e6:90:a1:79:b3:25:b6:a1:2c:4c:05:15:6a:
0a:dc:7a:2a:cb:03:21:3e:c0:cb:c6:ee:89:e3:a6:5d:ca:0f:
4b:34:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:28:02 2026 by rpki-client