Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: IjHhjtKxZYVmMdj8OlBxpw0hLtOB6/ynNZRWOFNUMX8=
Subject key identifier: 4F:40:B5:1E:CE:64:E1:FD:C4:B5:35:8E:94:C8:E3:0C:EF:77:92:5A
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 01A1667D866C5CD2A0158D6B6F84595B694F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 19B4
Signing time: Fri 23 Oct 2026 02:01:04 +0000
Manifest this update: Fri 23 Oct 2026 02:01:04 +0000
Manifest next update: Sat 24 Oct 2026 02:01:04 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: 900QH95g0mHTGbi5hXgkHQOPLA/GMbJKVQ8oaGr7uzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:7d:86:6c:5c:d2:a0:15:8d:6b:6f:84:59:5b:69:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Oct 23 02:01:04 2026 GMT
Not After : Oct 24 02:01:04 2026 GMT
Subject: CN=4f40b51ece64e1fdc4b5358e94c8e30cef77925a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:fb:af:9b:90:68:46:3e:f5:ee:96:a4:a1:
48:5c:64:6c:51:85:cd:40:a2:69:a0:18:7b:fc:df:
97:de:af:06:fa:ad:9c:ed:07:40:ca:de:15:f1:75:
07:a2:fd:9b:76:38:1b:a2:05:f9:fb:d7:9f:d6:6e:
24:e5:df:95:2d:35:b8:bb:96:15:9a:b8:0a:3c:d7:
5d:e9:09:ad:e2:21:f4:bb:61:50:92:85:85:25:82:
f2:56:f8:a9:3a:b2:14:02:1e:34:af:96:1d:f9:ef:
9f:2e:b8:49:63:40:de:5f:15:44:e5:a4:04:1a:9b:
51:40:33:b3:ce:77:40:5a:3b:d1:d3:14:68:b2:17:
ad:5a:90:42:e8:96:8b:5d:63:5c:29:42:86:65:0d:
c5:bf:a0:d4:8d:c2:1c:db:6c:97:6e:73:36:2e:83:
71:c6:e5:05:06:b9:56:50:86:d1:ff:3f:c5:7b:4a:
48:2c:ff:eb:d4:2d:9f:a6:c3:b2:6a:1d:19:ee:66:
62:e8:e6:35:49:6a:9c:c6:5e:37:55:82:cb:28:3b:
22:ce:cb:b5:c6:82:3e:ba:ca:0b:9b:47:1a:09:e1:
71:ab:6d:27:8e:59:b1:a3:2f:ff:24:50:40:81:46:
9e:ee:39:39:42:f1:d2:a3:5b:75:78:35:7d:ef:46:
fb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:40:B5:1E:CE:64:E1:FD:C4:B5:35:8E:94:C8:E3:0C:EF:77:92:5A
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:50:07:c9:0c:82:fe:3b:db:4c:b6:fd:28:11:4c:a5:42:45:
d3:2c:84:0b:61:56:52:51:80:54:52:38:38:ea:ce:6b:5d:9a:
b4:a0:9f:a1:66:eb:02:e3:3b:eb:14:d8:eb:39:81:24:98:fc:
b2:51:84:68:0f:cd:90:d7:57:93:84:c5:b5:69:b2:61:b1:eb:
42:ac:88:83:d2:85:d6:b9:6c:8b:39:9d:ed:43:1f:cd:41:50:
91:3b:a7:f0:e4:5b:82:3c:dd:85:50:12:e1:e6:e1:e3:55:db:
fe:f8:f5:a2:8b:4d:20:df:0a:b4:d4:05:6e:ea:6e:72:8e:15:
41:7b:87:cd:6c:09:53:63:e8:c9:c7:df:fd:a1:ec:3c:c7:a0:
68:45:ce:03:77:46:2d:9c:89:aa:40:f1:dc:39:1b:e3:ce:cf:
2b:d8:5e:1a:0c:84:7b:76:8c:33:db:7a:f4:92:2c:d9:46:da:
bc:1b:d8:ee:7c:9e:8a:c0:96:19:90:63:ab:1d:ba:dd:9f:f9:
cf:8e:0b:77:28:8a:4c:e5:25:b0:24:6f:0b:6b:09:fe:08:f4:
27:1e:8c:35:f6:ba:92:83:49:21:54:34:e6:54:12:67:80:8f:
42:46:7c:3a:1e:b7:77:d8:a2:dc:eb:fc:b4:a0:a7:ba:60:be:
8f:50:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:26:53 2026 by rpki-client