Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
File: d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft (raw, json)
Hash identifier: F1KG+IiSqcT8/oTwaiMPMYy/BeITNGrgMeZSvG3ExJo=
Subject key identifier: 2B:47:A6:C8:39:98:C3:57:C6:C1:EC:45:0E:5D:56:A2:25:1E:A5:94
Authority key identifier: 77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B
Certificate issuer: /CN=77724112f0285d830c87ee3256d51968f15bb90b
Certificate serial: 01A18A1BF25B50BB69B45072BF3D3746534B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
Manifest number: 0289
Signing time: Fri 30 Oct 2026 00:00:49 +0000
Manifest this update: Fri 30 Oct 2026 00:00:49 +0000
Manifest next update: Sat 31 Oct 2026 00:00:49 +0000
Files and hashes: 1: 6p1ednwrZQ_JDbcmNlbUx0LPSFQ.roa (hash: hIJJSdmlqRlS5NfeTFhoCLt5Vs93+x5E1RzMdfdB3oA=)
2: d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl (hash: kjbdxznMeyU5S/a7yd5axJTl0J5rea13ehEsm0qrclE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:1b:f2:5b:50:bb:69:b4:50:72:bf:3d:37:46:53:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77724112f0285d830c87ee3256d51968f15bb90b
Validity
Not Before: Oct 30 00:00:49 2026 GMT
Not After : Oct 31 00:00:49 2026 GMT
Subject: CN=2b47a6c83998c357c6c1ec450e5d56a2251ea594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:34:e0:ac:4b:e0:db:b3:ea:bb:fe:6f:ed:
a8:b4:7e:33:33:84:dc:ad:37:c8:68:2f:d8:33:67:
2e:85:4d:9b:11:94:19:da:a6:79:f7:c2:26:37:f0:
a4:2d:f3:91:95:14:0c:eb:c3:a1:b7:a5:9f:21:e4:
10:72:ab:ff:b7:9e:45:fb:1b:69:28:48:03:5d:6d:
fe:b1:14:79:54:66:dd:cb:1c:83:0c:b7:d3:b1:10:
38:a5:6a:c0:57:57:ee:fc:07:0d:01:f6:c5:79:4c:
8c:5a:5f:9b:f3:c3:16:00:0d:8e:c9:85:4c:44:17:
ee:85:17:46:fe:eb:29:f0:de:15:98:ea:5d:cb:fb:
29:04:e9:6c:77:a5:16:ed:a0:b4:d3:9c:34:87:09:
eb:47:d5:27:ae:af:c8:91:95:9b:f8:48:f5:a2:c2:
2e:a3:d4:c6:a0:cb:ed:0a:3e:9b:de:be:e7:b7:94:
05:b6:20:20:29:02:b9:3f:ce:8b:3d:1a:1c:61:0a:
08:68:64:34:aa:85:76:75:37:56:79:f8:1d:a1:94:
1a:16:1b:28:43:62:21:fe:a9:f7:b6:20:2f:04:52:
94:e3:4d:e2:6f:09:25:7a:5d:9a:d2:87:f8:07:b3:
68:bc:e1:26:fb:b2:1a:77:43:03:bd:42:b0:37:45:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:47:A6:C8:39:98:C3:57:C6:C1:EC:45:0E:5D:56:A2:25:1E:A5:94
X509v3 Authority Key Identifier:
keyid:77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8f:76:b1:dd:68:27:42:63:57:44:dd:32:df:88:a9:1e:c5:
49:51:b6:3b:ff:5f:01:1e:45:6d:7a:96:82:ee:e6:20:29:5e:
81:04:ad:34:f2:f0:a9:17:cc:95:86:48:78:ac:4a:a6:ac:3c:
4c:55:6a:32:73:18:82:52:7a:f5:cb:0e:83:93:2a:a7:74:38:
93:4e:77:61:8e:e7:6f:25:a4:99:1a:82:e4:cc:31:38:c2:9a:
11:6b:e8:98:3c:1a:f4:38:ad:b6:b1:9e:3b:ad:d0:e3:61:7c:
2b:27:6e:a6:43:4f:1e:06:96:92:7d:a2:db:26:9b:38:39:84:
9a:b0:6c:d9:db:9f:0c:04:37:b6:6b:82:50:26:22:ee:ce:20:
4f:3e:83:c0:f6:1e:dd:a2:4e:6b:bd:fc:6b:c2:b4:25:46:73:
c4:e0:52:d0:99:d9:ff:f1:44:f8:ee:60:38:fd:08:7f:ad:a5:
e4:46:68:8d:ce:e2:24:f5:c9:a9:9e:0a:5d:8a:12:82:ab:5a:
bc:0c:e8:fe:de:fb:ec:80:f1:68:67:e9:fd:c6:4b:33:1a:8b:
fa:8b:99:3e:dc:9d:71:52:c6:8e:4b:71:d4:1f:cd:7f:2a:4a:
e6:6f:e9:cc:97:93:a0:6a:a3:24:cb:88:92:4a:f7:1e:d9:ef:
07:e4:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:49:10 2026 by rpki-client