Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: OPVh//2uyyrL3FYss5A1R6GUBEmVeKqNpvH2GXfVlmc=
Subject key identifier: 35:CA:4B:B0:5C:86:DD:7A:BD:2E:E6:6B:48:1E:1E:1E:6E:28:BA:BA
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 01A176CC552176090438EB122163A3A4E223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 1AC1
Signing time: Mon 26 Oct 2026 06:01:04 +0000
Manifest this update: Mon 26 Oct 2026 06:01:04 +0000
Manifest next update: Tue 27 Oct 2026 06:01:04 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: cCCuH5oEIOwGbyEEv/uXHG1mqdm3ir6bJSDsnbpP1dQ=)
2: _UE15j8dt-0E4MNHI1SJ6VAbDdo.roa (hash: RpMmPkih2MaIwwmI1CZ2YI65k33Pkn9LWYdRz9m4yPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cc:55:21:76:09:04:38:eb:12:21:63:a3:a4:e2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Oct 26 06:01:04 2026 GMT
Not After : Oct 27 06:01:04 2026 GMT
Subject: CN=35ca4bb05c86dd7abd2ee66b481e1e1e6e28baba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:01:25:bc:98:7a:e6:6a:57:63:54:b7:d1:
e1:e7:61:3f:b1:fc:15:40:c1:da:7d:af:5b:a6:dd:
53:97:1a:a6:19:24:fe:32:84:17:54:28:91:40:6e:
53:30:1e:75:19:49:08:ef:3a:e7:47:ee:41:a7:2b:
0a:a8:c6:43:e7:87:0c:c8:6b:fd:7f:f9:51:9a:9e:
d9:7b:68:a4:97:29:90:eb:2f:b1:0b:e1:75:1d:9f:
30:ef:51:50:4e:db:a1:0f:77:f0:1b:74:28:bd:d4:
63:73:b1:f9:3d:1b:8b:04:0d:d7:56:9f:e0:c1:81:
f2:20:94:1e:84:aa:a6:85:8e:8e:bf:99:85:ce:03:
f4:ad:2d:9c:3a:c1:02:8f:f5:5c:9b:87:73:bf:9f:
9f:b0:31:83:26:e1:2e:e4:81:b0:1c:83:ee:cd:f3:
90:2b:9c:e7:a6:5c:b0:d2:f4:f3:ac:28:9b:7a:45:
e0:0e:4c:5c:89:0c:5f:74:a4:4a:93:93:18:6d:2d:
6b:68:ab:48:dc:30:e6:4b:fc:44:65:de:bb:03:a7:
fa:1a:45:97:4f:1b:a3:73:8f:a4:c2:78:0b:90:7a:
c8:a6:60:eb:62:2f:a4:6d:c4:c8:4c:fc:c0:5e:79:
c0:02:1a:b1:d1:ab:49:00:7e:81:41:aa:ad:a5:b2:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:4B:B0:5C:86:DD:7A:BD:2E:E6:6B:48:1E:1E:1E:6E:28:BA:BA
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e6:1c:cb:78:e1:49:b7:18:ed:08:be:07:c2:00:ef:4b:52:
73:9b:b4:72:7a:26:c2:a7:8f:fc:96:45:53:61:65:d8:40:fa:
85:bc:91:b2:32:27:b6:5e:6d:f4:5b:6e:a4:fe:d7:4f:8d:b4:
c9:6c:f5:ff:31:ff:61:ec:8e:22:29:e5:36:89:e1:5e:e7:44:
00:4e:d4:e8:07:4b:52:ea:1a:1a:2c:39:dc:4e:04:43:9f:3c:
0e:d2:99:d8:95:9b:6f:63:3c:b8:75:8d:60:a0:72:2e:bb:eb:
27:db:00:61:88:e1:c0:82:c3:a5:08:53:31:a5:1c:77:1e:63:
99:f6:57:67:24:ca:16:9a:ce:d6:36:3f:47:43:79:01:51:5a:
d9:7e:38:3d:23:82:49:08:d9:7a:95:0d:ab:14:c7:2c:ba:10:
cb:0b:17:da:71:34:71:93:38:60:88:d5:02:e5:df:1b:b6:a8:
67:4b:1d:e2:68:5a:d8:9d:fe:1b:52:27:f2:ed:3a:81:d4:97:
8a:05:c5:9b:c5:13:d0:27:0a:60:ea:cf:76:06:27:7b:b4:52:
8a:24:81:92:9d:5e:8c:1b:f2:c1:98:19:b3:3a:8e:e3:5e:61:
c6:93:ea:8b:39:7e:be:36:79:17:c4:80:b4:1f:e7:9f:d7:ad:
7f:bc:e3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:40:45 2026 by rpki-client