Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
File: rDWoN7KvW2-xjKNdFguamhgiBO8.mft (raw, json)
Hash identifier: btf2/kgXj2HmTEIohpJN6H7RN22puZfYmevgYeuR98A=
Subject key identifier: A6:63:93:E3:93:5B:64:A1:60:27:BF:46:C5:EB:19:19:A4:09:15:5D
Authority key identifier: AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF
Certificate issuer: /CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
Certificate serial: 01A175B9372DC9B3A19B969AA97DC81DDAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
Manifest number: 15AA
Signing time: Mon 26 Oct 2026 01:00:34 +0000
Manifest this update: Mon 26 Oct 2026 01:00:34 +0000
Manifest next update: Tue 27 Oct 2026 01:00:34 +0000
Files and hashes: 1: rDWoN7KvW2-xjKNdFguamhgiBO8.crl (hash: wasGT6WVhRVke56qAlkLKmjGd3KfRPwLvNS0peHlFX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:37:2d:c9:b3:a1:9b:96:9a:a9:7d:c8:1d:da:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
Validity
Not Before: Oct 26 01:00:34 2026 GMT
Not After : Oct 27 01:00:34 2026 GMT
Subject: CN=a66393e3935b64a16027bf46c5eb1919a409155d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:81:d5:3d:4d:ec:f4:eb:da:19:ae:ed:e3:04:
43:9b:6b:ce:d8:82:5b:48:69:9e:55:fc:11:fc:70:
50:53:36:68:e2:bd:f5:69:da:f5:da:7e:d6:28:c4:
05:f8:58:42:b4:5b:ac:6e:97:65:e5:de:ba:ec:55:
db:40:fb:29:5a:e9:4b:58:02:8f:a5:d0:c9:c5:6d:
56:58:fa:81:d9:cc:4c:fe:44:51:11:9c:90:4d:b0:
07:5c:b1:db:33:d5:6b:77:e8:ff:96:ca:0e:fe:44:
12:94:be:bb:f7:83:ea:97:e6:c8:5c:be:96:09:49:
a9:2f:b5:f7:61:53:83:d1:b2:5f:b7:71:c1:2e:d8:
12:c7:41:20:f9:07:75:1b:86:5d:27:db:21:77:4d:
92:84:58:cf:e7:9b:f6:47:28:2b:0f:fc:4d:6d:28:
6c:ca:2f:28:e8:7d:ed:76:91:76:01:63:6d:d1:5b:
6d:3d:55:bc:63:69:7f:4b:02:8f:9c:3a:90:6e:70:
64:6e:7c:9d:e3:52:e0:58:81:72:ba:82:7c:bb:9d:
ea:d5:28:aa:25:0c:21:ab:a4:58:b3:05:7f:8e:38:
64:f6:7e:c5:0c:27:09:74:47:e3:a4:ee:42:48:97:
d7:0d:32:3c:8c:22:fe:9d:3f:ad:58:fc:15:67:27:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:63:93:E3:93:5B:64:A1:60:27:BF:46:C5:EB:19:19:A4:09:15:5D
X509v3 Authority Key Identifier:
keyid:AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6f:a5:0c:fe:90:5c:75:fc:ff:66:23:66:44:fe:ae:59:d1:
3e:f7:f1:6e:81:55:13:87:63:c8:c1:94:85:0e:83:eb:54:52:
69:2a:fa:b3:71:dd:ac:e9:a4:f0:79:50:61:e2:48:84:e0:71:
d1:4b:85:61:3e:97:31:36:38:ac:82:4f:3e:6f:a6:3f:4c:cb:
9e:22:66:16:44:1f:63:17:19:d8:4e:22:30:10:a6:b2:0e:a3:
ef:23:2d:17:1e:eb:03:42:0b:48:2e:ef:b5:e6:c4:c4:07:ef:
a7:8a:53:c9:9d:ec:5f:4b:90:20:ab:6a:22:b3:f6:e7:d2:b9:
d5:93:94:09:2b:2a:0f:61:5a:e4:52:d7:58:37:c4:ee:a4:e2:
54:cb:1e:57:83:07:69:f6:95:49:23:ff:bd:40:92:49:5d:09:
c5:bf:92:20:4c:ff:8c:98:e8:d1:06:ee:c8:d9:07:06:53:ca:
09:da:00:34:1f:cc:84:a7:0f:cb:b3:15:d6:39:dd:a8:c0:6c:
1f:35:7b:52:8b:f7:9b:0a:68:66:1f:5a:cc:c8:1c:e4:31:d1:
01:ad:32:04:56:08:73:4c:9f:ff:ac:2e:5f:70:25:3e:03:1d:
6e:7f:b0:dd:20:20:94:29:97:2e:d3:05:7e:9d:c9:17:2c:66:
82:cf:4f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:41:22 2026 by rpki-client