Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: mQ73RyIVhtl5qdwdhefDpresmVjuqUES+fTBThG4Ghw=
Subject key identifier: 7A:10:0D:36:62:D3:71:AF:75:D4:C8:55:A0:9C:DD:4D:ED:B9:A1:7B
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 01A184F5F30EDCB7016931F61512BF0AC95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 157E
Signing time: Thu 29 Oct 2026 00:01:13 +0000
Manifest this update: Thu 29 Oct 2026 00:01:13 +0000
Manifest next update: Fri 30 Oct 2026 00:01:13 +0000
Files and hashes: 1: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: U3ViwM0yU1ug+W+ETTkV4lqYTAYMeOeVRZLiGzHP8Uw=)
2: qJDNQCIShiElkTydihRoQ4bZNh8.roa (hash: boKmhzMkJFM950qaKYC/IewwayfQB6vcVhEgjzqGKmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:f5:f3:0e:dc:b7:01:69:31:f6:15:12:bf:0a:c9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Oct 29 00:01:13 2026 GMT
Not After : Oct 30 00:01:13 2026 GMT
Subject: CN=7a100d3662d371af75d4c855a09cdd4dedb9a17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fb:5b:ce:20:30:66:7e:66:bc:c7:1d:e8:1f:
a6:8e:42:43:c9:76:35:d0:b9:e5:ae:a1:48:b5:e0:
77:9b:0d:5b:03:81:98:4d:0c:48:e8:d5:c4:1e:60:
26:7f:0e:11:11:0a:ea:55:25:bc:d7:5e:d9:4d:9e:
20:9b:f6:d4:06:a9:4b:f8:9c:9a:00:09:4f:83:70:
68:8a:ac:65:a1:39:93:90:fb:39:90:82:4f:f1:de:
ee:39:a4:a4:92:04:e2:5d:21:c2:7d:bb:c2:1c:8d:
74:ec:32:77:2d:8e:96:6e:71:20:6f:65:00:e6:96:
87:f0:af:82:5a:6b:af:6b:5c:1d:35:96:ed:b6:71:
48:14:7c:9f:8a:6b:1b:bb:66:e5:2c:7f:2f:26:99:
54:28:a0:d1:c8:f4:8b:14:e0:d8:12:5d:38:44:91:
07:5f:a6:0c:bb:53:f7:3e:a9:7c:93:91:6d:b4:6e:
b0:25:01:87:b3:34:8e:a5:87:63:01:ca:bf:d5:46:
4c:dc:65:bc:7c:57:c0:dd:d1:68:89:8a:3b:63:e2:
d2:d4:df:54:50:e4:65:95:fe:ad:cb:bf:63:6b:ec:
55:92:00:48:e3:90:48:28:4e:74:7c:d5:21:9e:45:
cf:38:f5:a2:8e:66:fe:8a:d4:26:84:d4:f9:16:d5:
05:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:10:0D:36:62:D3:71:AF:75:D4:C8:55:A0:9C:DD:4D:ED:B9:A1:7B
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fc:98:1e:8f:73:5c:45:7f:e8:0c:c4:99:be:74:e0:78:5c:
d2:94:09:04:56:55:94:99:ff:7f:71:19:1e:00:33:6f:a4:bf:
5d:a0:fa:16:1d:d7:52:f4:3a:73:d7:84:25:1e:b3:01:c2:71:
d4:f4:dd:67:a1:34:f6:29:cb:41:2a:a5:84:ae:9b:41:7c:42:
ca:8d:87:51:36:74:77:cb:7b:93:6f:b4:20:de:6d:db:32:49:
81:92:90:31:b0:29:e0:ef:58:82:53:1c:b7:51:b3:87:16:f0:
66:a4:60:51:5b:8e:2a:69:64:1a:2d:66:16:0d:d7:39:ad:e7:
8d:f4:e9:aa:19:08:d1:5f:d6:20:76:6d:bd:87:a3:d9:f8:00:
0c:4c:a5:f3:fc:05:18:32:d5:9a:ec:29:dc:32:fd:4e:e2:6c:
de:0b:12:a7:b9:81:ce:8d:3b:36:d7:95:a1:fc:2b:50:72:11:
66:bc:b5:33:50:fc:3c:03:e7:15:0e:83:1c:53:82:07:25:7b:
6e:fb:67:ea:46:29:87:4e:89:fe:e9:9e:34:c7:4f:ae:5c:ed:
8c:f8:c4:9a:b1:31:6f:47:c6:eb:7c:fa:d1:85:e9:c0:77:35:
66:fa:6b:7a:b8:bf:2c:54:82:f1:31:8b:16:84:73:45:c7:74:
1d:0e:87:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:54:51 2026 by rpki-client