Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/795c08-0091-4cfc-87e9-340f35b053c3/1/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.mft
File: rB_B_TG72Tt3Hwa7OKVOjsJNB3o.mft (raw, json)
Hash identifier: kf81UBv6n1xXGUAFNfbqVT/lw3ePYmcGmj5L86V2f3c=
Subject key identifier: 30:F3:83:E0:B8:7A:7B:4F:A9:E3:A7:1D:48:10:75:85:BA:70:AE:6E
Authority key identifier: AC:1F:C1:FD:31:BB:D9:3B:77:1F:06:BB:38:A5:4E:8E:C2:4D:07:7A
Certificate issuer: /CN=ac1fc1fd31bbd93b771f06bb38a54e8ec24d077a
Certificate serial: 01A1882DA48DA2C499C5DF014B190F3145A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/795c08-0091-4cfc-87e9-340f35b053c3/1/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.mft
Manifest number: 17
Signing time: Thu 29 Oct 2026 15:00:54 +0000
Manifest this update: Thu 29 Oct 2026 15:00:54 +0000
Manifest next update: Fri 30 Oct 2026 15:00:54 +0000
Files and hashes: 1: rB_B_TG72Tt3Hwa7OKVOjsJNB3o.crl (hash: ad71yMwsRnftkPpsp4flR9tSl170iuIo7M5tq3fk+e4=)
2: zxIIHKC_V7QekKn3nKhWfkbBtVE.roa (hash: W8igIMnslDQCAmud2GC/MjAZ9PURieJe5OwKvKFbuRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/795c08-0091-4cfc-87e9-340f35b053c3/1/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/795c08-0091-4cfc-87e9-340f35b053c3/1/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:2d:a4:8d:a2:c4:99:c5:df:01:4b:19:0f:31:45:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1fc1fd31bbd93b771f06bb38a54e8ec24d077a
Validity
Not Before: Oct 29 15:00:54 2026 GMT
Not After : Oct 30 15:00:54 2026 GMT
Subject: CN=30f383e0b87a7b4fa9e3a71d48107585ba70ae6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:41:c8:96:66:2f:f9:c1:a0:88:be:70:2a:
82:de:16:44:30:93:93:de:c6:3c:7b:5c:2a:f5:33:
2b:55:06:a9:fc:ad:51:14:8f:ad:5d:1e:67:22:e9:
77:f2:e8:d0:7a:10:2f:3a:63:56:da:26:8a:55:4e:
f2:d1:3f:4f:bf:29:48:ee:c6:ad:ef:ed:4b:2b:02:
6c:32:7d:91:e3:c8:36:6c:c3:2e:69:8f:68:35:01:
03:47:e4:c4:ee:68:7d:32:18:7f:46:3e:a8:eb:49:
25:b6:40:b4:21:a0:78:ba:a1:af:cf:6d:ea:20:44:
a3:e1:56:05:38:a9:4c:64:0d:c4:80:1e:76:54:6f:
11:67:8c:32:fa:ac:80:10:f5:9e:22:9d:4e:05:3a:
05:6f:af:78:53:85:fc:78:68:e6:b4:f6:cc:67:54:
99:c3:4f:15:dd:3d:12:b7:e1:fd:da:1d:fa:a1:20:
03:c5:e2:f0:af:4b:6a:c1:78:b7:42:34:09:17:6e:
3b:4b:b4:67:cd:e5:56:83:f5:83:df:7c:c1:f2:a8:
7a:57:92:03:95:11:29:f9:53:bb:e9:4f:3f:b2:57:
38:f4:26:a0:9b:f1:91:c3:5f:2d:1f:c6:5a:ba:d6:
9d:c4:4c:8b:a0:f3:d8:a8:cb:98:73:97:4c:c0:9a:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F3:83:E0:B8:7A:7B:4F:A9:E3:A7:1D:48:10:75:85:BA:70:AE:6E
X509v3 Authority Key Identifier:
keyid:AC:1F:C1:FD:31:BB:D9:3B:77:1F:06:BB:38:A5:4E:8E:C2:4D:07:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/795c08-0091-4cfc-87e9-340f35b053c3/1/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/795c08-0091-4cfc-87e9-340f35b053c3/1/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c8:12:96:d9:48:cc:de:6c:72:ff:95:a9:2b:cf:5f:bd:11:
44:25:0f:6e:2e:85:b9:3a:7d:55:92:f7:ef:b3:27:3e:c8:b5:
35:ee:4e:6d:c7:58:d7:76:88:99:5a:b3:8d:9a:ca:b7:f3:46:
10:e7:20:9a:db:b2:3a:61:50:45:43:f5:a0:bd:1b:f3:1e:9e:
63:51:89:b3:36:20:1e:5b:ee:26:c4:cb:e6:41:1c:f6:25:5f:
86:74:31:aa:3e:ce:50:6d:8d:9e:34:71:38:99:94:a0:c7:5e:
4f:d6:d1:f7:56:c0:97:27:bf:2e:c0:f1:a8:64:7e:55:a8:12:
e9:ca:9f:ef:26:c8:71:bd:af:bb:ff:5e:91:91:52:87:30:88:
ee:87:bd:f3:2d:1e:f5:ff:5d:92:d1:a1:15:96:af:f7:eb:e9:
b8:60:7c:93:18:75:02:f3:74:c5:aa:be:92:07:7a:8b:16:0f:
20:69:55:03:65:a9:66:55:de:96:09:24:53:01:1a:70:2e:21:
33:c5:78:59:b5:db:1a:eb:7e:51:0f:19:70:8e:39:18:5b:d3:
da:32:82:42:6f:27:86:00:9b:f1:46:d6:1c:d8:d3:30:54:7a:
18:5d:c7:13:e6:f8:b2:16:5e:a3:f5:94:be:50:87:28:4d:57:
72:b1:02:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:51:56 2026 by rpki-client