Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: d3ZmZLoapMY7M+yZQ8urir6Rxf3nVmLOgv2GSdWYspA=
Subject key identifier: 81:66:9C:1A:52:95:59:2E:0A:28:E3:98:07:FC:72:D7:1C:0A:30:B9
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 01A18299C79E1F8DE0DA98F534719C04F40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 13:01:18 +0000
Manifest this update: Wed 28 Oct 2026 13:01:18 +0000
Manifest next update: Thu 29 Oct 2026 13:01:18 +0000
Files and hashes: 1: FbBfmY8BU8VigyDn7YgxLgSnlUs.roa (hash: tHVNex4gUdJAzQ5EQ6S1mMwVxpmtkwTF/khuntIVx8c=)
2: _8o003HukJtANidMUuNfF8h2iro.roa (hash: RD6ivkH2YAIVnq+oPiaSNKTUKGIT1SfwklfHbiuRs50=)
3: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: F0HDuCmU1kACUrq1t/2WJTv+f3K6GQuUvAQLzHOFack=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:c7:9e:1f:8d:e0:da:98:f5:34:71:9c:04:f4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Oct 28 13:01:18 2026 GMT
Not After : Oct 29 13:01:18 2026 GMT
Subject: CN=81669c1a5295592e0a28e39807fc72d71c0a30b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:41:65:61:0f:fe:b2:f7:1c:00:3f:0f:82:
26:4e:4d:8c:6c:ce:c9:e2:23:90:40:51:bd:83:19:
2a:2c:00:ce:e8:9e:a4:c2:ea:95:98:5f:25:ed:2d:
46:9b:3b:92:40:b1:40:91:bc:85:84:ee:0a:87:4d:
a1:8a:f0:d7:cc:80:2c:b4:54:61:22:fa:fd:c7:64:
82:ba:7c:ca:fa:84:97:17:69:2d:89:c5:a5:8e:14:
16:f9:73:0c:d4:f3:75:22:d5:db:41:5e:44:f7:6f:
5c:11:d1:3e:85:dc:5a:aa:ce:80:08:ed:9a:31:45:
bf:70:c8:68:56:44:58:46:6f:fd:63:01:f8:64:ab:
b7:90:64:95:1e:1a:55:e6:27:fb:b4:0e:b1:cb:a5:
34:ce:b0:17:fe:ae:8d:da:72:ef:fb:eb:17:9b:69:
53:b1:02:88:9a:ee:5f:4d:fe:22:58:7a:02:74:0d:
fa:d8:9b:16:05:7f:aa:98:82:cd:14:1d:9d:24:1c:
da:5f:74:ca:10:0a:3c:fa:5e:50:cd:bc:b0:01:82:
1d:a4:1b:a8:5a:c0:9a:eb:79:67:aa:41:0d:fa:86:
05:b9:0c:d3:c8:07:ee:12:84:fd:ed:9d:7e:10:b2:
0f:4d:f6:00:4e:a2:45:90:9a:af:8b:84:a3:61:27:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:66:9C:1A:52:95:59:2E:0A:28:E3:98:07:FC:72:D7:1C:0A:30:B9
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:69:72:37:28:a8:6c:6e:68:69:32:85:70:65:20:83:9a:79:
41:73:4a:1f:8b:06:ce:9e:63:d5:06:cd:63:3f:97:86:42:c9:
b7:3a:a7:76:52:c1:0f:01:8d:56:a6:76:25:5c:5e:24:59:2a:
53:7c:ab:23:6c:fc:33:b6:de:f7:71:46:15:ab:9b:c9:e8:b2:
a1:51:cc:46:5d:61:f5:c7:c9:08:59:17:87:48:bb:0b:b1:84:
05:b4:3c:e1:85:26:7b:5c:aa:20:cb:31:b6:96:08:1a:e1:ad:
09:33:72:9d:b7:63:62:82:7d:74:2a:52:54:df:6e:b5:fa:b6:
1e:97:27:45:73:b5:53:4d:8b:a0:7f:a5:75:ea:0b:9f:5f:6a:
cc:b0:51:80:a9:d0:91:c2:4e:cb:8a:fd:b6:87:1d:0d:68:4a:
26:eb:29:3e:e3:80:3a:73:07:ee:85:39:17:40:ba:1a:db:0d:
ca:12:d2:89:ab:52:34:fc:8a:c7:3a:42:f4:2e:f0:2c:f3:a7:
12:3d:77:9c:43:ee:b5:72:0f:c1:ac:b9:22:40:f7:ca:37:ee:
1e:e5:6e:95:54:29:72:9a:1c:8b:53:c3:c4:3c:42:3b:d2:a3:
cd:fc:77:ba:3a:52:9d:7a:af:c9:97:af:51:fd:dc:5c:32:5b:
c7:f7:2a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:42 2026 by rpki-client