Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: /ay588rPRsD1c6B6LMDe7SCDdAc0vYUu2JAP6NcX15g=
Subject key identifier: EA:0D:1F:1F:11:2A:9A:48:D5:16:10:D2:E3:23:B4:0F:10:47:3B:4D
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 01A192B1D366CEEAF6DA8CDFED35517DA85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0FED
Signing time: Sat 31 Oct 2026 16:01:29 +0000
Manifest this update: Sat 31 Oct 2026 16:01:29 +0000
Manifest next update: Sun 01 Nov 2026 16:01:29 +0000
Files and hashes: 1: DFflnGrVLX1ed8hHQDi8QYAdC5Y.roa (hash: A9o/XsKdrob4isKSMPwU7pG4Cfib6nwUqTy+L1zYWiw=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: nBMv6mUCQWKZDnsCREKoyLkFmSWeLvjz5eXCh5T07bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:b1:d3:66:ce:ea:f6:da:8c:df:ed:35:51:7d:a8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Oct 31 16:01:29 2026 GMT
Not After : Nov 1 16:01:29 2026 GMT
Subject: CN=ea0d1f1f112a9a48d51610d2e323b40f10473b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:df:68:82:eb:27:03:61:45:3c:f7:8d:6c:
03:41:21:c6:ab:de:ca:e2:62:80:36:3b:25:30:b1:
09:c3:62:b4:bb:8e:1e:d8:28:85:c8:61:bd:c8:4e:
e9:58:d1:d4:fe:51:57:01:b1:f3:c0:c1:2e:7d:c4:
9e:66:9a:91:10:f2:5f:5e:90:21:ba:9e:4b:bc:d0:
8c:06:c2:9a:4d:25:25:38:5f:37:05:83:25:ce:cf:
62:d0:a2:f2:1a:85:96:8c:7c:2e:ab:81:83:a5:8a:
b4:54:87:21:c4:18:0e:3b:56:7f:dd:e3:33:a1:26:
12:74:d0:aa:ef:29:e9:37:c1:13:41:92:43:db:cf:
15:00:27:7d:fc:06:71:2c:4d:27:98:65:66:20:00:
c1:c8:b1:03:21:4c:47:ac:ea:97:f2:b3:ea:c4:c0:
1b:2f:27:08:9d:ad:6e:5e:db:aa:bc:e0:13:c0:4a:
9c:87:9e:fb:85:2c:45:c7:d0:b8:83:cc:d2:1e:11:
7e:99:cd:15:b0:63:69:23:34:23:66:f3:f0:97:e5:
1d:ad:55:18:c3:5f:a3:8d:75:6b:be:22:5b:7c:f9:
9a:10:04:0c:d5:02:a3:0f:4a:a6:71:03:6d:3d:b5:
3e:fd:69:1f:ed:3f:4a:c7:c2:fb:5f:5b:f5:54:99:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:1F:1F:11:2A:9A:48:D5:16:10:D2:E3:23:B4:0F:10:47:3B:4D
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:03:d2:80:5a:6d:84:94:3e:d1:57:ad:08:40:8e:6d:1d:07:
5c:89:54:08:cd:3c:1b:38:c3:f0:21:0d:a5:54:ec:f4:d7:03:
31:0e:79:1a:f8:fd:48:58:b5:aa:ce:66:19:94:b7:de:34:a3:
6b:2f:3f:f7:2a:c4:24:ef:b5:b0:80:65:ca:9e:48:ad:0f:65:
46:78:96:c9:ee:64:a7:66:e6:50:65:15:01:8c:30:1f:ef:3d:
66:69:93:2c:60:74:c8:17:d8:8b:b5:92:e6:0c:5e:a6:1c:f4:
30:8d:18:a1:3f:c5:59:88:70:bf:7b:7d:0e:b2:97:bd:e3:c9:
53:2c:c8:18:b1:d6:e3:48:fd:74:74:50:9c:b1:ce:d4:4a:5f:
4e:e9:31:13:53:ec:c0:00:1c:94:8b:b4:ee:8b:77:4f:9d:7b:
f4:c8:ea:a0:df:83:0b:4c:e3:90:83:c9:ad:69:d9:fc:c7:6d:
b3:92:71:ca:27:29:95:b2:0b:56:29:78:c2:a5:cf:83:62:16:
be:40:ee:77:c6:d8:3d:b5:a5:8e:f9:ee:c4:f7:c3:d2:14:74:
85:38:32:29:c2:19:91:85:18:a3:66:56:5b:b8:d9:70:54:ee:
64:16:bd:d0:96:05:b1:f5:54:9c:f4:c9:d5:57:d6:aa:86:16:
d8:53:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 19:18:33 2026 by rpki-client