Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
File: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft (raw, json)
Hash identifier: DB/TJJ3sZtI4GcOQyWbyMd+6r6SelvCxS5WiZRr7BPI=
Subject key identifier: BD:F9:F4:CA:22:C8:AC:DD:88:82:CE:98:B5:98:85:8A:FD:38:30:02
Authority key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2
Certificate issuer: /CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
Certificate serial: 01A179284BDCEE9155B86F9C8F27DCF11CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
Manifest number: 1AC6
Signing time: Mon 26 Oct 2026 17:00:46 +0000
Manifest this update: Mon 26 Oct 2026 17:00:46 +0000
Manifest next update: Tue 27 Oct 2026 17:00:46 +0000
Files and hashes: 1: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl (hash: 6T0Ed7KwTtv9/2os6F5wbbtFgX6gXmK26rT4Az07ol8=)
2: f6iqlfdMArGL77ftRWPuRND2qEw.roa (hash: Y4n4zPlQ5X9WdhdswqlaVDVx5UOEzkW5UgOyIaM7S3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:28:4b:dc:ee:91:55:b8:6f:9c:8f:27:dc:f1:1c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
Validity
Not Before: Oct 26 17:00:46 2026 GMT
Not After : Oct 27 17:00:46 2026 GMT
Subject: CN=bdf9f4ca22c8acdd8882ce98b598858afd383002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:e2:e1:e2:d1:9a:ed:b7:73:db:c0:97:e7:
6f:8a:73:7d:96:cc:de:bc:c3:ee:81:24:2b:84:0c:
62:b5:f4:45:e4:90:59:6b:13:8b:db:b6:1c:fe:82:
04:d3:84:78:f8:76:ac:a4:26:72:44:ae:81:d7:91:
9b:99:d5:4f:fb:d6:d2:56:76:6e:9a:3c:18:f5:c9:
09:08:6c:b3:3c:73:e3:39:06:83:9e:cb:b6:6a:53:
51:9b:66:77:ef:a1:45:03:ff:07:4e:b7:6e:fc:2f:
59:a9:e2:d7:80:bf:3c:a3:e5:e6:23:22:b7:cf:c9:
4a:17:8f:f3:2e:10:28:71:2a:ce:f1:21:22:d6:64:
6c:eb:aa:fb:42:74:fe:e1:30:b5:89:e9:df:06:54:
3c:1f:b5:38:9e:6c:33:49:df:5c:86:5d:1c:15:01:
c4:42:14:2e:eb:8f:ff:8f:50:2e:93:9f:bf:89:50:
fe:2b:54:67:bf:56:b9:b5:fa:fe:60:cd:06:20:cd:
44:c7:37:47:c2:06:e3:0b:7f:19:50:b5:3f:14:f3:
b7:dd:18:b9:f4:5d:3f:5d:4d:d8:91:5c:2c:62:95:
c7:52:19:03:58:f6:a5:42:62:86:44:bd:6e:62:6d:
b0:21:74:c5:34:76:18:a7:28:52:56:f8:3b:df:44:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:F4:CA:22:C8:AC:DD:88:82:CE:98:B5:98:85:8A:FD:38:30:02
X509v3 Authority Key Identifier:
keyid:27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:42:39:65:4d:fd:58:ab:aa:81:12:7c:d1:72:78:11:c2:97:
23:7f:b6:8e:29:04:da:2b:03:68:79:56:2b:13:02:68:e5:59:
64:ae:9a:2b:3c:73:ca:42:19:07:a5:2a:6e:90:c4:b0:f8:25:
8a:be:de:39:ae:e8:a4:6e:83:ac:a2:a9:de:8d:05:b6:8f:91:
63:57:6f:88:72:4b:cf:f2:9d:5f:40:18:0a:f7:69:1a:7c:91:
1b:2c:79:d7:e1:4a:91:37:11:5e:9e:ae:5a:1c:a0:9d:84:da:
25:58:d3:b5:f8:c2:90:95:c0:f6:f0:e8:55:4e:89:33:45:12:
84:5d:22:4f:30:c5:b1:3f:0f:61:85:c5:85:e6:fb:8a:17:97:
22:fc:33:12:f3:f7:cf:bc:42:8a:d6:04:33:ff:10:7e:7a:0c:
3c:bf:7b:1e:5f:93:fa:19:af:09:3c:04:6b:08:bd:6a:a0:3b:
20:81:47:9d:ca:72:68:ab:21:ef:4d:b2:93:fd:af:ad:56:23:
24:c3:0c:36:ef:cb:34:80:c1:e7:06:d1:09:29:f0:da:d4:48:
a3:7a:55:0e:3e:ab:75:73:b4:d0:3f:ef:34:5a:06:45:08:e2:
67:5a:ec:68:ba:cb:b2:9e:34:50:8c:fd:c1:75:b3:e6:48:a3:
1d:8a:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:55:26 2026 by rpki-client