Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
File: aDjbfmmRJ9pMHFpek_RPMCtihjs.mft (raw, json)
Hash identifier: ansRgmyC3cup16xNPw2ZzFHCgqCxBpFX0O3bJFDBUE4=
Subject key identifier: C7:97:14:89:7B:59:89:6F:02:63:7C:62:73:2C:27:F9:E4:46:FC:53
Authority key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
Certificate issuer: /CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Certificate serial: 01A171A5C12D704865B7A9BD4D7394AD598A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
Manifest number: 1ABE
Signing time: Sun 25 Oct 2026 06:00:50 +0000
Manifest this update: Sun 25 Oct 2026 06:00:50 +0000
Manifest next update: Mon 26 Oct 2026 06:00:50 +0000
Files and hashes: 1: a1IDt2xomxWARvsJeU8MLNXS4IU.roa (hash: 426ydjesv20i56PFyO1tKmNiavKTm2qYefp1CVawqKM=)
2: aDjbfmmRJ9pMHFpek_RPMCtihjs.crl (hash: Tx0kS/s7TvLKSJPV51sNFTjM55BLH4gaTolkh4l8eO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:a5:c1:2d:70:48:65:b7:a9:bd:4d:73:94:ad:59:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Validity
Not Before: Oct 25 06:00:50 2026 GMT
Not After : Oct 26 06:00:50 2026 GMT
Subject: CN=c79714897b59896f02637c62732c27f9e446fc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:de:59:7c:30:20:b6:27:5a:58:2e:df:84:
d4:ab:ab:d9:a0:bc:de:44:86:20:88:45:8d:38:57:
53:d2:27:8e:78:4c:6b:97:5c:3e:6e:75:3a:dc:0b:
5b:d1:fc:48:9a:c9:b1:54:3e:2a:57:c5:e2:8a:3a:
8b:6e:c2:d4:ad:bd:3a:64:7b:da:2c:88:ef:9f:f2:
e4:2b:c8:84:40:6d:df:c5:d6:c5:95:73:6a:b9:ab:
7b:2b:55:e9:d3:ab:3b:c0:36:74:d1:2f:f2:ce:54:
23:1a:01:c1:6e:d6:32:c6:ad:22:57:18:75:14:d3:
b0:83:dc:c0:32:00:92:44:45:94:13:ab:7a:90:2f:
59:8d:d8:89:af:9e:39:fe:14:47:63:32:92:e5:0c:
20:9c:54:60:de:a7:83:d8:00:5c:13:36:9c:b1:69:
23:9e:fd:b8:ed:06:fe:33:95:8b:40:98:2a:05:ae:
88:a0:b5:3c:8d:92:cb:7f:f3:bf:a9:17:e1:38:f8:
15:cb:1e:3f:c9:49:95:c8:fe:6a:3e:08:03:1f:65:
38:df:11:ee:4b:08:85:98:7a:9a:73:20:5c:50:0e:
8a:b9:f9:af:84:f9:6d:8d:b7:ee:22:29:a6:f6:44:
91:b5:c3:51:94:5e:bc:a4:63:15:ac:c6:19:50:ab:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:97:14:89:7B:59:89:6F:02:63:7C:62:73:2C:27:F9:E4:46:FC:53
X509v3 Authority Key Identifier:
keyid:68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:5c:36:74:94:4f:36:e1:0a:b0:b8:cd:52:b1:23:e8:9d:f7:
a6:1d:2f:3c:f7:4e:72:3a:9d:b9:e5:79:f3:00:02:50:44:da:
5e:25:bb:a1:19:ed:a8:61:02:84:c5:c9:63:2f:5e:98:43:24:
c1:3c:0f:e9:e5:ca:d9:60:8e:d5:1c:66:50:75:5d:91:c5:b4:
07:9b:fb:6e:9c:16:c1:47:e8:db:35:3b:94:de:19:07:c9:59:
d8:b2:1e:93:4c:a0:74:e4:68:3a:0a:c3:24:fc:72:0c:89:a3:
bc:74:8a:dd:39:92:a0:3e:3e:25:5a:91:0d:85:da:02:4b:cc:
63:93:9f:a7:09:81:7f:1d:fd:dd:1e:02:73:b7:32:bf:f9:34:
eb:b9:35:48:86:23:76:8d:e4:8f:1b:b5:56:b8:e0:23:85:4a:
9d:68:3a:d6:8a:47:4a:9c:05:f2:2a:81:7d:ae:6a:3a:ed:23:
86:1a:ef:e9:46:98:e0:f9:b4:e3:dd:ca:85:e2:97:b0:82:2c:
45:b4:3a:0f:32:9a:e2:82:10:ad:4d:72:a0:73:bd:ec:a8:45:
9c:81:cd:01:7c:b7:d3:75:00:c0:ba:3c:6e:d4:dc:ad:41:3d:
58:41:56:c4:63:70:46:7a:82:55:8a:6a:4c:1b:ec:f2:91:31:
08:5e:76:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:24:50 2026 by rpki-client