Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: EaM3RrxSpGBJoiv2+HRyq0RjDplCgAP87A9d7sBIXJU=
Subject key identifier: 35:E0:2C:68:C6:35:1C:93:F1:FF:0B:60:05:06:A2:BD:E0:87:5A:BE
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 01A183075351074A6A4C9ED0BE70FABC1DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 1AC6
Signing time: Wed 28 Oct 2026 15:00:57 +0000
Manifest this update: Wed 28 Oct 2026 15:00:57 +0000
Manifest next update: Thu 29 Oct 2026 15:00:57 +0000
Files and hashes: 1: 3yGgq6gpQ9NYaasBYMMPQaATXzo.roa (hash: i0WCJtC2Kt+N/0o8HIjmO/t5ox+yoXwX3GlgqEv4MdQ=)
2: ZRLYVrP2rb95Q-Ge4TVnxmxa0zg.roa (hash: Xsb75QA4ApCthewBTBgfSKpRYNo5qI3KmhsLF/JdAuM=)
3: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: pLwb2REt00JEaU2JN5EK3xl5OB0nZ1orcUmyPTbQ/nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:53:51:07:4a:6a:4c:9e:d0:be:70:fa:bc:1d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Oct 28 15:00:57 2026 GMT
Not After : Oct 29 15:00:57 2026 GMT
Subject: CN=35e02c68c6351c93f1ff0b600506a2bde0875abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:c1:3c:ab:e3:72:88:67:4b:e0:34:35:12:
6e:2d:ac:fe:7e:4a:51:2c:84:da:cb:0a:50:65:be:
5c:71:25:5f:b3:4a:1f:5f:5a:b3:50:a9:0a:de:01:
3f:f4:da:31:da:2a:d8:41:95:06:02:cd:dd:f1:d5:
20:2d:24:2c:2c:f0:1c:01:22:6a:4a:69:49:6d:4d:
78:3c:b8:d5:12:26:60:48:b8:eb:07:d4:96:f7:61:
f3:f4:eb:21:de:05:3a:a9:00:d1:bf:1d:99:25:b5:
02:bd:b8:b5:22:d5:1a:89:26:32:a5:06:ec:62:a8:
74:df:1e:44:50:9c:be:1a:9c:a4:a1:c5:52:25:86:
3e:ac:60:6e:59:8b:77:3a:81:3a:36:11:94:04:26:
da:50:28:55:35:74:b5:39:b2:31:be:58:ad:15:52:
f7:2d:fb:dd:69:ad:e0:19:a6:59:7d:22:75:6d:80:
2d:7c:37:70:92:b6:9a:5c:1b:61:5f:69:0c:ab:12:
f8:39:24:6c:19:af:4b:1f:69:37:60:1b:c9:b0:5c:
70:f6:6b:ed:1d:b7:31:07:a7:8d:98:99:26:3e:2c:
67:68:ec:26:6d:56:ae:de:57:69:75:30:9a:5d:cd:
d5:63:53:72:7b:68:36:1b:83:19:70:be:31:33:29:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E0:2C:68:C6:35:1C:93:F1:FF:0B:60:05:06:A2:BD:E0:87:5A:BE
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1a:bd:ca:ad:52:18:23:ca:28:75:f1:1e:46:c4:31:b2:86:
45:fd:62:7d:86:6a:98:90:b5:ee:db:f1:22:ba:ff:09:0b:b1:
8f:3a:1d:e4:7f:ee:b8:a9:ad:27:42:7c:b0:74:26:90:ed:c4:
1f:43:7e:05:7c:53:d9:78:39:d7:31:cb:da:80:3d:64:90:9d:
32:50:41:13:5a:69:29:2f:64:f3:15:0b:a3:41:52:b0:d1:09:
b9:98:18:fe:41:d4:6e:e8:df:fb:7f:f7:c0:71:e1:f0:df:b1:
ee:30:00:85:0d:d7:6b:d4:34:19:88:71:1a:af:83:76:07:6d:
f0:94:a8:b0:2e:69:8d:57:6f:58:e2:ea:6a:0d:37:97:26:c5:
11:9f:ec:b5:f3:2b:0d:e9:09:67:47:b1:f9:65:a2:8c:8f:79:
2e:88:5b:29:ce:47:17:bf:8b:9d:7c:2c:d9:20:9a:14:a2:c4:
3b:54:dd:26:62:0d:fd:a9:e9:34:c0:90:f7:8c:a2:b0:a3:9a:
4f:8d:fb:78:95:aa:7f:2d:85:db:60:3f:2a:a4:79:d2:d8:3a:
b2:cd:a8:d2:82:f4:e0:da:94:46:20:3b:bd:bc:84:8d:fd:f2:
12:e7:0b:c3:1c:d2:f0:20:e1:b2:c0:a7:d8:ec:0b:27:b4:93:
eb:a4:1f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:46:04 2026 by rpki-client