Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json)
Hash identifier: 3KNxQRMrwWnhVvdFrjVzCu1RexmzCV0/2xumm/vyRaU=
Subject key identifier: 7D:A2:36:10:16:87:A5:E1:9B:74:BD:95:7A:A1:51:56:A4:C5:18:21
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 01A17C60B850E5F3DF83C37FF705B2C6FB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
Manifest number: 1ADF
Signing time: Tue 27 Oct 2026 08:01:15 +0000
Manifest this update: Tue 27 Oct 2026 08:01:15 +0000
Manifest next update: Wed 28 Oct 2026 08:01:15 +0000
Files and hashes: 1: 4L_3KrprYTwmc6F0VK5YpQh7-ng.roa (hash: uekFvxE8fCG4iinAEMabm31AvzlJiPb5Eowm61DVMsU=)
2: cSElFw2-npFTxsWdmh_TS_DX1JM.roa (hash: uQXzfb9jOFxKjYKBJjLHpQzon0I+K9i1XFfrYpIMvJY=)
3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: /ATh1o/xBxG2TDJdKeOd8N9nmoBUA6Q0dFIvsQRMF40=)
4: yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa (hash: 2A76nDGpl64/49OxgRrM5/iYg+gEwhn7gAXzWZ5+Pfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:b8:50:e5:f3:df:83:c3:7f:f7:05:b2:c6:fb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Oct 27 08:01:15 2026 GMT
Not After : Oct 28 08:01:15 2026 GMT
Subject: CN=7da236101687a5e19b74bd957aa15156a4c51821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:a8:6c:0c:41:fe:ea:1d:0f:3c:fe:ef:e5:
6a:71:ec:21:11:c2:47:31:55:1c:4e:b5:47:32:a8:
9b:56:f1:3e:1b:2a:96:ab:27:90:3d:af:a5:85:0f:
20:7a:5f:36:cd:94:1c:a0:35:3f:0e:7f:cc:98:36:
e4:97:85:ed:1b:f1:a1:ea:db:04:5f:00:24:2d:bd:
6f:b3:64:8c:05:c1:af:55:55:eb:f2:02:3b:e2:a5:
29:85:bb:42:4c:c6:10:d0:a2:6b:26:b0:ab:4a:45:
65:4c:57:e0:a9:c5:c5:b2:e7:b4:8b:25:4c:32:f1:
8b:cd:b0:88:41:2f:59:7b:cb:10:9b:fd:66:21:ee:
a8:29:bb:5b:ca:1b:9c:f4:2f:57:4e:86:0b:c8:3a:
0a:47:70:fb:55:31:eb:4f:71:78:f1:8f:b1:c5:95:
c7:8e:06:c9:99:ce:e7:64:4f:91:6f:91:04:60:90:
eb:2e:73:f9:e9:af:08:88:16:cb:dc:2f:0e:83:9d:
18:71:ee:2b:22:1c:cf:93:89:b0:f6:ff:a0:ba:13:
19:bb:59:25:e1:1d:a5:04:5c:2b:1c:aa:c2:64:a4:
59:61:6a:6e:9e:91:7d:1f:5d:63:47:0a:84:a9:cd:
0c:9e:86:eb:9e:f5:f6:bb:c5:44:2e:a4:56:a8:12:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A2:36:10:16:87:A5:E1:9B:74:BD:95:7A:A1:51:56:A4:C5:18:21
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:91:14:70:61:58:2c:24:12:04:62:e6:9d:f8:fd:5a:b2:b2:
13:d2:e0:0f:79:22:04:3b:3e:60:c8:44:df:e2:24:a6:28:4d:
b5:ee:e1:2c:9a:16:3d:10:01:b9:f3:d3:5f:47:8b:c9:7f:72:
8a:32:49:3b:79:3e:0e:dd:ac:53:21:c3:4f:b3:14:96:89:47:
0d:95:42:13:04:cb:e0:9d:c9:31:95:c6:59:f7:48:c5:07:44:
cc:df:ce:4a:59:2b:93:2e:6f:1c:68:c5:88:1e:f6:93:44:f2:
02:e9:14:44:b9:f0:c7:90:2b:9a:5c:65:4d:9d:39:d5:ff:65:
05:a2:db:15:c7:34:6a:0a:c9:c9:4c:5c:6a:84:fa:b4:59:12:
86:4c:05:b6:b1:07:a9:c2:8a:7c:a7:84:35:79:5a:7c:43:49:
22:8c:a6:ce:a7:f7:1f:82:11:09:f0:dc:99:f1:e2:fb:54:6e:
9d:13:36:61:d1:e0:00:f5:bf:59:9a:20:24:e3:a1:fa:f5:c9:
53:c8:05:0f:2b:a9:fa:74:07:40:16:07:be:1a:6a:48:26:24:
99:07:58:d9:67:0b:c8:25:0a:e3:b1:ef:27:67:78:56:2d:67:
b4:a6:ec:87:95:04:4c:a8:09:7d:45:dc:12:eb:5a:73:bc:6c:
22:f8:2a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:20:25 2026 by rpki-client