Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier: 7HvpZyJaAU6Hqqbe5U/2HT797PVxW0VJeF1GsL4yuAk=
Subject key identifier: 99:6B:07:7A:4D:51:B6:DF:0F:6F:0B:5C:AC:D7:A1:DC:4A:F8:6C:1B
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 01A17E17E3154D8D40922EE0D6C876F6B616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 16:00:56 +0000
Manifest this update: Tue 27 Oct 2026 16:00:56 +0000
Manifest next update: Wed 28 Oct 2026 16:00:56 +0000
Files and hashes: 1: PUXWH5ErhkpTlX3DGsk45zeBJZg.roa (hash: xZcIxtVt0rhHswrnqiIOZ/p/5tyYj0LaAjYUyfrercI=)
2: k3bU7GJQGWmqllt3J0zrBV5kOFQ.roa (hash: FFe49A2byJNnvRF0qFtVbcLDcNCSlda3Ud81mS5eRtw=)
3: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: /lIboZ9fvfnxtVwCRQIX3QS+XBz9B4bSwgi2cOUITdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:17:e3:15:4d:8d:40:92:2e:e0:d6:c8:76:f6:b6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Oct 27 16:00:56 2026 GMT
Not After : Oct 28 16:00:56 2026 GMT
Subject: CN=996b077a4d51b6df0f6f0b5cacd7a1dc4af86c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:4e:2f:b3:ee:13:60:6d:b2:a9:ab:cd:5f:
b5:5b:54:32:ac:e6:7d:5b:f8:0f:b7:83:75:c2:05:
03:d8:f2:98:0e:e4:7b:c3:86:82:9b:81:80:6a:c5:
e0:39:04:68:fc:0c:b8:c5:51:b8:2e:15:75:b2:49:
24:d4:8d:a3:d3:42:95:db:00:b5:16:a1:b6:d4:c0:
f8:02:d3:de:a9:76:4d:38:69:d0:21:40:e5:2f:4d:
7c:ce:8d:44:6c:bc:9e:a8:56:20:36:5a:6e:ff:bd:
cc:7d:19:c3:57:d1:47:fb:bc:2b:00:56:29:fc:22:
0a:3d:55:06:81:93:f3:06:b0:01:8d:8b:25:28:70:
ae:ee:f4:4e:87:84:56:d1:e3:89:ad:a7:a4:75:91:
5a:b2:0e:b2:5b:e0:ca:c7:1f:91:dd:bf:f2:08:ab:
e0:c7:d1:13:49:b0:4a:85:2a:1a:33:12:84:0d:0c:
e8:5f:48:94:c3:54:5f:30:1f:f3:f7:7b:a2:20:9a:
0b:be:04:e1:d2:27:15:eb:37:00:a3:d9:cb:74:a1:
cb:f6:9b:83:b4:b1:5a:9a:95:ed:da:23:7d:d0:1a:
7f:8d:57:4d:03:5a:5a:9d:ea:29:af:da:5e:2d:5c:
b6:5b:73:bd:3d:79:23:b3:f7:e9:c6:c7:ed:3a:ae:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6B:07:7A:4D:51:B6:DF:0F:6F:0B:5C:AC:D7:A1:DC:4A:F8:6C:1B
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:47:d5:ff:f8:8e:18:d8:6e:d6:ce:88:8c:0a:30:7e:dc:94:
86:b9:ed:ff:ec:bd:98:fa:45:bc:28:db:91:99:22:78:e8:b2:
e3:79:00:fd:89:1e:27:10:8e:3f:09:a9:39:ff:81:c6:67:cc:
77:f5:1f:34:4b:c4:5d:ae:57:96:c3:cf:45:b2:3d:49:ae:1c:
93:72:33:c5:aa:2a:3f:e9:69:df:d5:27:22:9a:2e:1f:fb:8b:
22:77:a4:26:bc:c0:9b:8e:ee:cd:5f:39:b9:a6:df:01:c3:32:
8f:09:c0:dd:5f:38:bf:93:52:9c:ca:d4:8f:86:d7:b5:2a:e2:
53:29:3a:13:6e:50:60:9f:e6:d0:ab:a6:c5:79:cd:18:1b:06:
6a:d2:f5:0d:7b:c0:90:55:43:1d:36:c8:ea:67:04:29:32:59:
a7:43:cc:32:c7:8a:81:18:6b:61:5d:40:16:1c:cc:5f:67:bc:
9b:0d:c3:10:09:20:0e:8d:4a:aa:76:fb:07:34:11:fa:0c:29:
c6:9c:e6:71:2c:80:d0:e6:07:d8:6d:72:80:8e:cd:eb:59:8a:
2c:b2:3e:88:ec:56:7e:ab:99:c9:d6:fd:9b:ba:f1:60:9c:51:
47:28:a4:da:d3:d3:6d:c9:b2:c8:03:eb:9f:46:f9:64:26:d4:
31:45:9f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:47:35 2026 by rpki-client