Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
File: pTi7DCtB76jDsCBk68UvupLCNiY.mft (raw, json)
Hash identifier: jM+KVC/J/94Ab3pCOlU6WMDvC2POkT8+hJmNgaH+G04=
Subject key identifier: 60:A5:70:BE:16:AD:DA:01:C3:13:B9:A2:15:31:E8:51:AF:52:7C:84
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 01A174700D0FB2E55C199620248DA5435E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
Manifest number: 16AB
Signing time: Sun 25 Oct 2026 19:01:02 +0000
Manifest this update: Sun 25 Oct 2026 19:01:02 +0000
Manifest next update: Mon 26 Oct 2026 19:01:02 +0000
Files and hashes: 1: CPVxDc_aZPt8p2hD-fQ5EY3ek5w.roa (hash: YSCCvnapCyu6BSWmfyyXkWgH96EnMt+2gyVUr+pHUOM=)
2: cxSAbl9AGDjuAytpRHVKIsDfitI.roa (hash: 6VeXR5AotX5hFxSi1IUjWsyHhQBxezCmfN4HLADcz8c=)
3: pTi7DCtB76jDsCBk68UvupLCNiY.crl (hash: MY6+bVoWbQrw5lsRXLcZup57X3helb5d5Us69VR2bIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:70:0d:0f:b2:e5:5c:19:96:20:24:8d:a5:43:5e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: Oct 25 19:01:02 2026 GMT
Not After : Oct 26 19:01:02 2026 GMT
Subject: CN=60a570be16adda01c313b9a21531e851af527c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:1f:56:82:0e:a5:39:e1:c4:2a:6e:30:b3:
3b:97:d4:b1:56:b1:58:69:05:5e:93:24:f5:bc:0e:
14:81:82:9c:92:db:14:c7:cf:b0:2c:e5:f6:02:2e:
81:b2:84:17:03:19:23:bb:ec:1e:59:a6:5a:95:6b:
89:41:c1:e3:ea:12:70:c5:2b:cd:83:65:f8:50:d8:
bc:3a:1a:59:d7:cf:a6:ba:dd:3d:a1:98:a2:85:a0:
dd:55:83:c4:7a:b3:95:dc:49:4d:12:1b:17:c9:1a:
23:f3:82:ca:40:e2:d8:df:cd:52:6e:2d:a4:cd:3b:
2a:e9:db:ba:55:5c:86:85:e5:91:df:45:8b:6f:c9:
f0:ef:04:9c:40:a1:62:62:94:7c:5d:ab:51:b4:e6:
f3:66:69:91:de:64:26:28:89:56:00:65:2b:8b:83:
62:29:2c:ed:63:5c:42:5b:d4:59:7d:4a:dd:1a:89:
7f:44:ca:bb:22:b2:5f:e6:7e:31:aa:76:31:e6:f4:
47:c5:c9:e1:e1:df:12:9d:a9:8f:92:8a:a5:47:6d:
8d:85:a5:ce:47:77:6a:f2:5b:f3:1f:d0:ee:d0:27:
0e:f7:53:48:2a:fe:22:84:b0:2b:d2:02:1a:d9:80:
f5:d1:3f:86:1f:42:56:df:91:e0:e9:b1:e7:88:dc:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A5:70:BE:16:AD:DA:01:C3:13:B9:A2:15:31:E8:51:AF:52:7C:84
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:87:6c:d8:8a:bc:1a:67:2d:dd:61:26:5f:82:77:9c:6d:7d:
0e:ea:9e:93:38:77:02:32:07:fd:58:6e:77:40:7b:1f:0f:80:
e5:07:7f:df:b9:89:05:0d:ce:4f:8f:fe:39:97:7b:da:7c:f7:
0e:48:2d:e8:ce:5f:97:a4:e6:44:cb:98:00:5a:b4:35:30:e5:
d5:02:2e:19:ba:f2:00:2f:79:6b:1c:48:41:79:42:4f:8b:4c:
8e:e6:46:80:d1:9f:4e:b5:67:af:0e:49:54:80:40:db:0c:78:
99:15:d1:94:6c:9c:5e:d0:49:b8:46:a4:36:23:95:b1:55:5e:
9f:69:5c:43:9c:93:3b:ae:80:f9:67:ed:0a:44:36:5b:a2:a1:
d6:57:96:09:da:1d:94:72:0a:70:c4:fe:98:f8:d7:af:2e:ec:
09:83:51:37:27:70:86:5d:15:4c:b2:2d:e5:8d:76:69:4b:30:
86:a6:30:54:99:2b:76:66:3f:c3:c9:b3:39:0d:00:7a:01:db:
96:6a:c7:e4:cf:90:cd:69:a4:15:3a:5a:7d:2c:4a:a1:92:1f:
26:4a:4e:ca:85:6e:d6:e9:1b:3f:ba:aa:6f:7f:f5:9c:27:50:
45:06:54:bd:80:8f:14:af:74:64:35:80:0f:81:b7:7c:42:ed:
3f:5c:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:01:28 2026 by rpki-client