Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File: 81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier: Mty5k7bRVOezC+8lLc6M/plNNsyQ1g7hcgF/MUZK8x8=
Subject key identifier: 79:FF:FA:DF:13:3F:C6:CD:17:51:2B:29:B8:3A:3E:32:04:8C:F5:4F
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer: /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial: 01A18B658C3E854D4F7D6E26E32BBEE76D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number: 1170
Signing time: Fri 30 Oct 2026 06:00:50 +0000
Manifest this update: Fri 30 Oct 2026 06:00:50 +0000
Manifest next update: Sat 31 Oct 2026 06:00:50 +0000
Files and hashes: 1: 2gtdnmtxdp159yoykWR7atnRXug.roa (hash: QojryZo1S1FIxC+Q/WaC+2xdtTehaO8dflArcrZGQ6E=)
2: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: WeDXMve5CK4w9DbVuCQaaE0xAToTrR/wARthVyNi3oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:65:8c:3e:85:4d:4f:7d:6e:26:e3:2b:be:e7:6d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Validity
Not Before: Oct 30 06:00:50 2026 GMT
Not After : Oct 31 06:00:50 2026 GMT
Subject: CN=79fffadf133fc6cd17512b29b83a3e32048cf54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:04:bc:5b:2d:af:dc:cf:b7:aa:12:cd:91:5a:
36:b1:31:c8:aa:be:d1:df:79:f1:7e:45:a3:0b:2b:
d3:d4:f9:57:a5:bd:33:07:39:7a:78:05:b3:84:b5:
ca:c5:ce:1b:a6:86:0d:94:bb:54:83:f0:aa:c6:7d:
ac:28:ea:89:11:94:9a:ae:50:b0:ce:29:57:a4:23:
9d:5a:dc:8d:48:94:b5:e1:5e:b4:20:f5:08:f8:40:
14:3e:57:72:ab:7d:bd:2d:04:7b:e8:c8:a9:bd:31:
65:5f:a0:d6:61:60:19:7a:be:25:53:b7:b7:f0:90:
6f:57:1d:67:24:f2:62:a9:1f:00:0d:84:2c:0e:5d:
72:5e:60:e1:2b:da:46:ec:37:76:ab:28:29:67:cd:
57:52:24:9e:fd:d9:b8:ac:d7:98:7e:b8:b1:eb:50:
25:49:95:ae:0b:fc:42:3d:e1:f3:39:fd:de:28:13:
53:79:b6:4f:fe:13:20:16:6e:6e:b1:f3:e0:c5:ee:
f1:09:c4:a2:a2:24:3f:51:23:77:8a:4e:37:da:de:
18:40:61:59:f6:9b:7d:0a:b9:40:93:2b:9f:db:97:
cd:2b:fd:3a:d2:2d:b3:e5:c8:4b:5d:09:ec:fe:95:
f4:52:7f:ac:24:a8:da:3b:06:51:e6:f9:e8:7a:47:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FF:FA:DF:13:3F:C6:CD:17:51:2B:29:B8:3A:3E:32:04:8C:F5:4F
X509v3 Authority Key Identifier:
keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ad:96:f2:6f:06:07:a2:d5:30:49:dd:22:0b:47:8e:e4:f3:
05:7f:d1:f4:5d:a9:f2:59:54:35:1e:2d:f2:09:a8:97:29:5d:
6f:cf:ac:27:82:b1:38:95:63:a8:8b:a6:e9:c1:c5:12:65:61:
ad:5b:d8:e6:40:66:ee:3f:76:07:79:f3:02:b1:89:fd:eb:7a:
74:25:f5:9d:b6:4c:84:ee:3f:95:20:cd:02:a3:00:ca:a4:1f:
57:71:3a:ab:bb:32:e2:71:5d:67:cd:de:9f:28:9b:0a:6a:ad:
a4:ca:a9:67:94:6a:44:97:5e:33:44:0b:b3:66:0a:db:3e:b1:
65:bf:44:84:40:88:2e:0e:38:6e:6f:75:da:8e:fb:8d:24:d7:
bf:0d:ce:d4:72:43:98:4b:77:cf:0e:b5:51:7a:f9:24:92:0e:
6e:fb:7e:33:a5:d3:20:84:cf:80:dd:03:a9:d0:81:cd:06:9f:
4b:7b:6e:d6:7d:44:09:22:02:26:b6:7c:96:75:82:13:22:77:
f5:67:98:84:78:71:10:29:ce:53:94:f6:56:f0:2a:37:1a:97:
17:35:59:d0:04:15:e1:05:a8:01:41:47:9e:0b:ee:41:4e:45:
88:1e:50:a1:74:3e:bd:0e:ec:f9:07:48:9a:6f:10:0e:98:75:
33:56:ed:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:21:27 2026 by rpki-client