Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
File: anKTCVpV8Nd-JRZOfXS3qKI530c.mft (raw, json)
Hash identifier: snDd83bD7FspYFIDXE9+NFVd1IZWwVHsc2AtIwWoubg=
Subject key identifier: 42:C3:96:CE:B2:94:C7:05:99:6F:41:F1:5C:9F:1E:74:ED:47:1C:F7
Authority key identifier: 6A:72:93:09:5A:55:F0:D7:7E:25:16:4E:7D:74:B7:A8:A2:39:DF:47
Certificate issuer: /CN=6a7293095a55f0d77e25164e7d74b7a8a239df47
Certificate serial: 01A1660FC340016996AABB207038ADDFF203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anKTCVpV8Nd-JRZOfXS3qKI530c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
Manifest number: 7C
Signing time: Fri 23 Oct 2026 00:01:11 +0000
Manifest this update: Fri 23 Oct 2026 00:01:11 +0000
Manifest next update: Sat 24 Oct 2026 00:01:11 +0000
Files and hashes: 1: 1-eOJkO9YL4xZg--gf6qwumHEDtk.roa (hash: GR80Sq/bTbd5unKoNza5U5i+PbZ/S05QHDYglZZW7qo=)
2: 4asxyyWddWEKpcZjuR_8NaNYv7c.roa (hash: SpZcARQwDiAhzirfuI9PBLqIEmPOzdCFIvD8FEKL3W0=)
3: anKTCVpV8Nd-JRZOfXS3qKI530c.crl (hash: AlClnmS5HZ5xXZEhuLDiHJrH7YJ7ohTyhwtOenIbCdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
rsync://rpki.ripe.net/repository/DEFAULT/anKTCVpV8Nd-JRZOfXS3qKI530c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:0f:c3:40:01:69:96:aa:bb:20:70:38:ad:df:f2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7293095a55f0d77e25164e7d74b7a8a239df47
Validity
Not Before: Oct 23 00:01:11 2026 GMT
Not After : Oct 24 00:01:11 2026 GMT
Subject: CN=42c396ceb294c705996f41f15c9f1e74ed471cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:3c:eb:20:cc:b0:28:1c:ad:16:83:f4:9d:
72:24:eb:17:49:06:ea:ba:75:60:e3:05:b7:05:91:
f2:e2:83:ca:28:86:24:11:45:4c:d7:29:0b:4e:ad:
ce:d5:d6:2a:e3:f7:bf:e0:1c:b9:39:9f:9f:f1:ea:
ce:ba:f8:0c:1a:a7:5b:f9:a0:f2:32:48:62:08:3a:
c8:4c:ef:76:c6:c1:fb:92:5c:d1:78:54:1a:5b:4d:
48:4d:06:16:0f:ab:cf:3b:99:5d:eb:7b:db:3f:d7:
e1:11:9f:f3:53:ed:4a:5f:2a:5e:2c:58:fe:f6:6d:
db:f2:ec:02:45:7f:db:9a:d1:19:57:67:69:cd:a1:
ab:38:09:8d:56:c2:b3:b8:a1:02:37:8b:43:8f:0f:
14:8b:85:7f:9f:22:18:fd:1d:e0:0d:95:41:8b:de:
a9:2e:c9:da:30:0c:09:7f:35:d1:fd:56:aa:e5:eb:
28:d4:2f:0b:03:39:1c:bc:18:98:bf:53:6d:b5:a1:
16:5d:b6:99:f6:23:3d:57:80:b1:62:f2:72:79:5f:
73:5b:7c:ca:ee:33:e0:f0:81:11:1b:64:51:49:b3:
3b:1d:12:1f:04:ff:61:e9:74:55:e8:81:74:3a:74:
1a:8a:14:70:a6:8c:db:c2:32:23:b4:d0:b9:ef:73:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C3:96:CE:B2:94:C7:05:99:6F:41:F1:5C:9F:1E:74:ED:47:1C:F7
X509v3 Authority Key Identifier:
keyid:6A:72:93:09:5A:55:F0:D7:7E:25:16:4E:7D:74:B7:A8:A2:39:DF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anKTCVpV8Nd-JRZOfXS3qKI530c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3b:83:3d:77:99:96:44:52:20:2b:f5:02:d6:21:b8:15:a8:
91:fe:86:74:e5:05:e1:e3:df:26:83:bb:a3:34:92:ba:4b:57:
1d:40:d7:f2:30:a8:28:35:4c:9d:e4:8b:e7:ac:94:0f:64:26:
ea:61:df:89:49:9d:21:39:6d:30:ba:a9:a8:18:95:bf:9e:fc:
fd:37:2e:fe:95:60:a1:21:9d:0e:51:b2:16:85:56:94:97:79:
71:47:0e:30:fd:a3:1e:0f:97:0e:30:ca:a0:f8:c4:ab:88:ce:
49:27:dc:9e:74:66:ce:cb:24:26:0d:49:26:ad:8b:aa:2e:dc:
b9:c0:5b:f5:9e:06:a5:e9:ae:45:d7:d9:74:d3:f0:3d:d7:ac:
67:1a:e6:da:19:fe:dd:b8:e7:4f:15:4c:58:f6:db:df:78:aa:
93:26:75:a2:0a:f3:cf:a2:79:0c:43:ab:0f:0f:d7:a3:bb:df:
84:74:ff:57:e4:6f:f8:07:c9:24:73:05:e6:d4:ec:06:ef:0b:
0b:61:41:a4:4c:b3:23:c1:02:ca:56:2c:b9:d0:99:4a:f1:a3:
b9:00:06:73:7e:08:c2:ec:5d:ac:db:f3:bc:68:35:c3:06:69:
8e:b6:50:f4:dc:fc:55:7b:2f:b1:d3:d1:8c:b1:56:0f:12:d9:
1c:4c:c5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:44 2026 by rpki-client