Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
File: r2A0bQgbHFyBCzlMZuEFErv02Mk.mft (raw, json)
Hash identifier: EZDhN702vmKnvFtiT3ykSvRmm1bz5TJQJSneuV4B8jA=
Subject key identifier: AC:67:35:9A:96:F5:A8:43:46:1B:BD:44:8E:18:48:07:6D:40:C2:8D
Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Certificate serial: 01A13E26CD67744DF02F89D01A7A71B83EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
Manifest number: 07BE
Signing time: Thu 15 Oct 2026 06:01:32 +0000
Manifest this update: Thu 15 Oct 2026 06:01:32 +0000
Manifest next update: Fri 16 Oct 2026 06:01:32 +0000
Files and hashes: 1: MmHcaoSID19FRmGF5kFPH25PR2Q.roa (hash: Pv88TmQb3cGeVyGfPSrdF1R8Obs/Bo3T58FvtRvVnRM=)
2: r2A0bQgbHFyBCzlMZuEFErv02Mk.crl (hash: ViXgzt5vgiAMYPR4Mo/1vStezYvlfg7clGWY97RTdvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:cd:67:74:4d:f0:2f:89:d0:1a:7a:71:b8:3e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Validity
Not Before: Oct 15 06:01:32 2026 GMT
Not After : Oct 16 06:01:32 2026 GMT
Subject: CN=ac67359a96f5a843461bbd448e1848076d40c28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:22:e3:87:1d:a3:3b:4a:9e:0b:61:12:fb:
c3:93:d3:4d:d9:83:c4:7c:49:34:55:6a:77:83:a6:
06:d2:05:99:eb:8f:58:86:d6:94:bf:1f:72:42:a8:
f8:59:13:e5:c7:6c:32:00:21:27:fa:a0:6f:c7:a2:
e5:a7:e7:56:7c:0a:e5:7a:e7:2d:bd:d4:7b:fa:02:
27:4c:bf:55:b3:d0:a9:8c:a8:84:24:ff:1f:97:ee:
16:dd:85:27:32:ab:0f:26:f4:3e:83:a6:16:d2:56:
de:e0:7d:a4:ac:4c:5a:ea:16:95:6f:21:f3:12:56:
5c:8a:fd:0e:46:21:f3:37:ee:58:65:82:e7:71:46:
d2:ba:ad:0d:68:c9:7d:88:bd:1c:17:18:76:b8:5b:
8d:40:a3:13:db:c4:ae:ea:50:5e:f7:39:15:21:77:
b0:40:0a:8c:fe:4d:12:f4:72:96:5f:15:c3:02:fb:
cd:94:27:f9:dc:df:60:52:1d:9e:3b:a1:c5:af:38:
51:dd:ea:ed:40:13:a8:b0:fc:40:c1:15:0a:7b:78:
31:3c:3a:29:63:8e:20:fa:45:71:08:4e:57:5b:68:
77:12:12:77:a7:75:f1:06:3f:52:5f:32:27:73:56:
20:ae:a3:c5:cf:9e:da:4a:68:ae:f3:40:7f:61:64:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:35:9A:96:F5:A8:43:46:1B:BD:44:8E:18:48:07:6D:40:C2:8D
X509v3 Authority Key Identifier:
keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fd:d7:3e:70:a5:3e:e3:65:3a:15:4a:59:be:50:35:32:5b:
16:6a:76:ec:c2:be:22:c4:d2:8e:9d:c0:41:93:8f:59:ba:2a:
51:d5:40:aa:c2:00:6d:ca:30:a5:ab:31:d3:0a:4f:e2:b8:b9:
e5:65:0f:36:0b:70:dd:18:4f:64:45:0e:30:cd:3c:ef:4d:3f:
0c:41:2e:b4:b1:d2:f9:d6:42:13:61:9e:9e:53:1a:8e:ae:19:
4b:07:2f:ad:ae:07:b7:27:d8:90:70:9d:00:3a:55:e8:ab:e0:
a0:6a:68:53:87:7d:ec:7f:9d:97:0c:7a:b2:27:0b:5a:4d:ab:
13:dd:2a:b7:1e:7b:24:88:94:a1:90:b3:81:32:8f:b2:d3:82:
59:80:da:ee:29:6d:e3:9f:94:ad:97:e6:ea:36:a9:57:a1:33:
9f:59:f5:1d:ff:a4:bb:44:f2:b9:35:df:4a:bf:11:64:2e:d2:
12:5b:86:6e:49:8d:b0:c8:73:98:6e:69:6f:06:ca:54:9d:4f:
26:02:2f:da:d5:84:9a:bf:a3:88:1b:53:8a:90:04:b8:69:2f:
38:de:22:cc:32:f6:83:96:8b:52:37:c8:9d:95:27:1b:04:a3:
a8:97:65:c1:d3:7e:1b:84:dc:4f:fc:3f:ce:1d:bf:95:2e:52:
e0:ad:20:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:36:14 2026 by rpki-client