Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: GdLsRZRKh+ETMLhdqQYAsKIbbZ0rc3ZIuqu6N8hqLWs=
Subject key identifier: A8:89:94:25:C6:2E:FC:D4:C1:CB:AC:E4:9D:13:2E:B8:06:C0:22:0E
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 01A183079758248DD4C9E89A5FDC58BAAC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 15:01:15 +0000
Manifest this update: Wed 28 Oct 2026 15:01:15 +0000
Manifest next update: Thu 29 Oct 2026 15:01:15 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: 9ZzH+9wPy33gTR7mv/2CHKuN/stkRgpnqjA9dtnNngs=)
2: 61huzXEr5q5M8J__iIN7IjunhKg.roa (hash: cj477SS4T7qNzSNkI+8mGSK4iNQUtTpYpphXIshKx+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:97:58:24:8d:d4:c9:e8:9a:5f:dc:58:ba:ac:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Oct 28 15:01:15 2026 GMT
Not After : Oct 29 15:01:15 2026 GMT
Subject: CN=a8899425c62efcd4c1cbace49d132eb806c0220e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:78:45:28:38:85:d4:01:4c:4b:28:2d:13:
c8:de:b9:f4:ec:72:04:6d:17:73:4f:95:dd:dc:1f:
de:5f:75:8b:9c:66:6a:8c:10:20:1a:a1:3e:e7:ee:
4b:22:44:bc:d9:59:9e:14:60:97:65:ab:b1:ee:1d:
26:26:51:11:45:06:1a:40:e4:04:01:00:4c:05:95:
2b:7d:d9:b2:b8:8a:0a:23:56:7c:70:66:45:95:10:
0a:b7:dc:f3:55:5c:6f:56:2f:00:18:07:74:0c:f4:
cc:92:55:1a:be:b0:97:5a:a0:b1:25:e1:da:2e:1b:
dd:3f:93:b0:44:83:9c:87:ed:88:4a:35:d3:c2:fc:
30:e2:e1:bf:8c:46:62:16:3c:e3:a8:2e:b8:08:2c:
d5:f8:15:bc:29:81:5d:2b:c5:f1:71:22:e2:77:1a:
bb:49:d3:bc:0b:21:49:d8:d0:c4:5d:a0:dd:30:1c:
bf:2b:ec:74:3b:00:ca:26:91:e5:e8:41:83:f3:0d:
ef:76:13:b7:9b:1f:7a:1b:28:ce:b0:0a:38:aa:bd:
d3:fb:2e:cd:fd:b6:c9:22:58:d3:5b:4c:4e:ee:2e:
8f:51:30:59:9b:e6:84:ab:ea:8f:75:88:0a:0c:5e:
b8:d0:be:7f:aa:68:44:9d:d2:af:38:c6:53:52:12:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:89:94:25:C6:2E:FC:D4:C1:CB:AC:E4:9D:13:2E:B8:06:C0:22:0E
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:73:83:af:98:cf:62:7d:a1:c7:57:d7:2f:86:5a:db:9b:a1:
8c:af:2f:3a:d2:d3:de:0e:80:c0:a9:35:2b:0b:c9:cd:cc:51:
cc:94:01:0b:47:32:4e:8f:cb:cf:fd:4f:3f:81:c9:aa:d4:3a:
b2:3a:68:2d:52:1f:ae:3d:41:28:48:df:56:3b:76:d2:5c:db:
a7:27:8d:5a:22:03:d7:cc:c0:21:f1:46:b4:20:aa:84:0e:e3:
d4:37:a4:97:d2:5b:58:c0:9a:90:d1:ab:34:2f:b8:7f:6c:75:
b0:ce:0e:28:be:0c:1b:27:5b:e2:52:40:f3:b1:e5:dd:51:b8:
31:34:9b:b4:4f:9e:3b:46:6d:64:55:cd:83:0f:1f:f7:67:ce:
c6:65:c0:28:0a:d8:be:19:d1:21:98:60:1a:0e:88:94:ef:b5:
52:ef:a2:e2:71:b2:17:9e:01:d4:f5:e2:34:fc:57:25:04:a0:
a6:70:99:b2:a1:5a:60:0a:75:d3:21:24:a3:0a:a5:73:99:e2:
43:d4:4f:70:d9:09:8d:d4:da:0e:1c:63:a9:98:82:dc:90:81:
13:46:25:25:d6:70:c0:fc:24:78:20:28:20:68:15:7c:ea:c9:
1c:64:34:75:cc:91:b7:67:5c:4e:dd:61:d1:ff:04:30:59:f3:
83:94:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:48:21 2026 by rpki-client