Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
File: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json)
Hash identifier: z6Ll0+b5G8G/nENbZ+E0NTtpC/Ni8vPhfToeHS1Kl0Q=
Subject key identifier: 22:43:4C:72:51:F8:F3:35:5E:6C:E0:9F:90:AE:A3:6F:49:70:E2:BA
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Certificate issuer: /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial: 01A15C6794D41CC420F6585032F1A12DD645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
Manifest number: 1ABC
Signing time: Wed 21 Oct 2026 03:00:54 +0000
Manifest this update: Wed 21 Oct 2026 03:00:54 +0000
Manifest next update: Thu 22 Oct 2026 03:00:54 +0000
Files and hashes: 1: 8z842irPUI8EAcdgem6-OTXhKlE.roa (hash: HK9+peK6bA6qvniuZHkI3MKhAoqJRMXPjQN3NjLDd4Q=)
2: C-eRdGJheWWO-BQH20gVo6-55lU.roa (hash: AbD58rM5EB/Q++PaApU6j4w5JzUDMVH5itkiJf48ScE=)
3: h_dGaZkpgJ73O29r1EDyAEN8xR8.asa (hash: Hu5pzvPt2D+Ppd393Bg90m+MGP3xk9fAeGx+umxpkLs=)
4: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: R9DoeeqfyR2JQl1LZPY02lrooZFfmCty6P6nuKHMtvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:67:94:d4:1c:c4:20:f6:58:50:32:f1:a1:2d:d6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Validity
Not Before: Oct 21 03:00:54 2026 GMT
Not After : Oct 22 03:00:54 2026 GMT
Subject: CN=22434c7251f8f3355e6ce09f90aea36f4970e2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:ea:03:b0:50:12:99:49:1b:c7:f8:c3:9a:
11:23:73:2a:f5:0d:b5:14:8c:79:e0:92:66:df:80:
72:7b:b1:a8:84:f7:6e:7b:14:45:ea:44:bd:25:80:
d5:87:67:a8:0c:26:35:dd:70:c2:29:d9:d8:3b:2c:
eb:92:3b:f0:7a:fa:8b:e2:27:36:ba:f1:9b:7e:b2:
34:7f:62:85:07:3d:bd:ab:9c:83:ab:b1:4b:83:cd:
5c:ed:8f:68:78:05:fc:9a:56:8c:28:59:4d:a6:7e:
29:2e:1e:14:41:6a:9f:c2:f4:dd:50:5c:05:f7:f1:
b4:fd:11:1a:83:83:81:cc:95:7f:57:5d:03:d0:28:
55:3d:c5:f4:84:04:a5:c8:5c:d1:ff:fd:ec:9f:4f:
20:83:ac:64:fa:c5:2c:f1:19:da:7c:fe:49:c6:bb:
72:cf:5a:ff:24:ce:8a:64:1e:d1:56:7d:8f:ff:de:
21:66:37:af:bc:cf:b8:d8:ae:a1:e5:c9:16:89:fd:
b8:ec:14:b9:49:d7:b7:e8:4e:2f:cf:98:7c:5a:08:
f5:f8:db:61:d5:0a:ce:87:12:22:80:f5:db:32:ae:
d8:58:93:3c:87:00:d8:1e:4c:fb:1e:fe:94:5a:44:
1a:49:32:b5:b1:cd:bf:ab:1a:84:44:25:b5:ea:e9:
88:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:43:4C:72:51:F8:F3:35:5E:6C:E0:9F:90:AE:A3:6F:49:70:E2:BA
X509v3 Authority Key Identifier:
keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bb:e0:04:6a:7c:9d:c8:0a:17:ff:a9:68:3e:2b:0f:a9:30:
e5:8d:a2:78:3c:67:eb:5c:fd:9a:37:91:f9:e9:a1:ad:02:a0:
68:03:8b:71:d5:df:a6:2c:dd:22:47:5c:4b:f1:1f:18:b5:69:
38:1c:ce:cf:ca:1a:59:79:bb:20:78:73:e5:f5:f0:d6:bd:b5:
c0:aa:9e:3d:25:4e:21:5c:22:00:ba:20:db:86:e4:87:e1:45:
ca:9d:34:4b:f6:de:d2:05:86:ec:10:b2:38:64:e0:a0:f8:8f:
81:c7:00:d3:dc:6b:15:78:7c:57:4e:f4:5d:4a:0e:9a:03:1d:
b1:e5:2b:a7:a3:ab:34:ad:54:cb:8a:a7:b7:f8:10:f6:ed:67:
cb:fe:aa:70:cf:51:54:7a:b0:30:ae:e7:bf:8d:f5:ec:bc:d6:
07:23:39:7e:4c:98:b1:8b:30:23:91:a6:b1:fa:55:a8:6d:3e:
7b:04:0b:98:49:a7:52:72:4e:02:9a:c5:7b:a6:a4:bc:d9:0b:
dc:a3:c4:c5:7a:4d:5b:21:55:d2:bd:58:63:b2:b0:86:8b:18:
03:29:19:09:5d:59:30:e2:fb:42:92:c2:4c:ab:02:c6:10:58:
c5:4d:2a:1a:48:80:68:93:e3:b0:f4:04:72:c5:3e:e7:7a:46:
fb:8b:50:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:50:51 2026 by rpki-client