Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier: Ge2w7b3KUqVVlNbjoO8YrE9bee0MX0FRRE7CsuakMWQ=
Subject key identifier: A4:53:50:66:84:7A:0A:F3:CA:BE:6C:FA:2E:9C:66:E6:A9:03:A3:8E
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 01A1765E9792F5054B2C574F85B84680CA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number: 13F7
Signing time: Mon 26 Oct 2026 04:01:13 +0000
Manifest this update: Mon 26 Oct 2026 04:01:13 +0000
Manifest next update: Tue 27 Oct 2026 04:01:13 +0000
Files and hashes: 1: 1-_jpSCMph4YEFnDVZXKeinAa4rs.roa (hash: koPlDtTY0MG8fOQfuLdRSQ8TOcKCr1znZMqSXkyLo5c=)
2: 1AjCxB6TkTjdHZOvofHm6NOOWfo.roa (hash: d4r+30BMgqiFQp0F8pzgKQ5i8LeY9r3mXEVd6tCLHak=)
3: 4iLxM73eLW6tqIqIEVi5DZshAX8.roa (hash: 5ekQWavsM+QKT46VPj3wV4euAzrbD/nttRzyJzRT1UQ=)
4: KHpN6RsIT8Yzm-xw6bcYpCXAZOw.roa (hash: Gk34if2dhZULdLD9MtyJCGYKzpai4oG9h76wWHnC34Y=)
5: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: F9VoQGJslYGNFggOQLQsIN2uW/1WQlP2lD2OU5s4aAI=)
6: oc6e_YKg8912v6VDvH8ngDmsWfM.roa (hash: 41DdsXilU15WJYeBRPmAhAA7JB/24PpGTu8+VCcE5nM=)
7: s_Ocb5RzyDecMqmMmwcXEkDS5kY.roa (hash: zD3icNxMD7rBY0nFB8uq8qwc1AnBefPqnwojqYvDvKo=)
8: xi1lzXnyUQddIBg_g1qFVgVU2YQ.roa (hash: DDQgV9tAfdW2zCM78ncjHvng/XT4BDa4M2SGgGiDpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5e:97:92:f5:05:4b:2c:57:4f:85:b8:46:80:ca:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Oct 26 04:01:13 2026 GMT
Not After : Oct 27 04:01:13 2026 GMT
Subject: CN=a4535066847a0af3cabe6cfa2e9c66e6a903a38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:d7:b5:42:32:99:52:e2:c7:c8:5d:cf:5c:
08:b1:e8:5b:27:7e:da:38:95:75:3e:2a:d8:48:ae:
0e:50:bd:28:4a:45:d9:82:58:b7:79:f9:f0:63:2b:
c0:2f:51:2e:bc:fb:f3:33:9a:29:70:20:ac:c1:da:
32:a8:80:3e:14:c1:5c:2c:fc:c0:f1:86:03:c6:7b:
a1:0b:20:51:2e:cd:67:49:a1:74:5e:77:45:7e:a8:
f5:3d:91:33:30:f2:4d:68:23:12:f2:3f:f4:05:e6:
42:ec:98:4c:dc:f2:d0:ef:ad:ad:29:82:1c:b5:06:
d1:54:e0:bd:8f:fc:86:6d:fe:f6:84:61:62:83:41:
ff:b4:91:18:14:17:2b:07:6e:d4:2f:cf:19:b1:de:
cc:91:98:8d:79:a5:35:f3:06:34:6b:1c:70:9d:33:
34:a3:54:24:92:7d:9d:79:66:18:73:1b:69:ee:95:
d3:04:18:c2:36:3f:a7:eb:b2:3f:b5:8b:90:42:1f:
f7:ad:99:69:26:9a:e4:4e:e4:46:58:af:70:26:ae:
05:7f:58:ba:73:66:04:7f:d0:f3:f6:3e:a4:c3:60:
83:90:57:fd:f5:76:2d:98:d0:ff:2f:08:c6:64:70:
6e:b6:39:51:04:f3:85:d9:56:3e:04:7c:8e:3c:39:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:53:50:66:84:7A:0A:F3:CA:BE:6C:FA:2E:9C:66:E6:A9:03:A3:8E
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:13:10:87:46:d6:95:27:eb:2c:04:e2:c3:31:b8:21:b6:ed:
9a:65:43:2a:1b:7b:49:ac:ee:57:5b:e9:b8:a8:d0:bb:82:e0:
1d:be:cf:90:a1:b9:bc:c4:44:df:ce:4f:96:f6:6c:19:d7:23:
c6:05:2b:88:0b:f0:aa:02:dc:04:af:6a:b1:3d:5f:57:0f:73:
f3:7a:a1:d8:f8:a5:91:61:93:80:2a:69:4f:9d:48:27:ea:aa:
e5:1a:cb:f2:c6:c1:74:92:f6:26:d8:95:44:84:35:b7:e7:f9:
5a:1e:9f:dc:b5:ec:a8:06:f3:40:ec:11:74:4c:78:17:b4:1a:
2a:36:24:f2:17:e8:a9:4d:12:43:34:63:83:fd:2f:43:2c:d0:
21:7e:97:fb:e2:94:ad:a8:68:d2:df:41:29:7f:e8:12:75:2d:
02:f5:55:bd:2b:e8:27:20:9f:53:6f:93:25:c6:82:4e:eb:75:
32:f5:db:eb:69:6f:63:20:47:17:31:45:4b:4d:cc:86:a6:7b:
81:df:d8:7d:ad:20:43:e9:bc:03:1c:f0:c6:ec:e3:7b:cf:86:
b0:84:56:f1:55:67:3a:31:2b:61:5e:65:2f:1a:3e:96:ca:72:
a9:ce:8e:d9:24:9f:53:8c:43:2c:e9:2a:51:7d:e0:40:3d:99:
a6:5f:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:21:29 2026 by rpki-client