Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier: g8tH3cHoIDTZVwdmXI97dMro8+nOohFi/BvH2orJv4I=
Subject key identifier: 5E:B2:46:42:67:76:9C:FA:55:06:EF:DF:30:7A:12:DD:2F:05:D2:AD
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial: 01A17E1871667E1DCB97FC697E44E91A202A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number: 1A5A
Signing time: Tue 27 Oct 2026 16:01:33 +0000
Manifest this update: Tue 27 Oct 2026 16:01:33 +0000
Manifest next update: Wed 28 Oct 2026 16:01:33 +0000
Files and hashes: 1: 4otQnggN5_uQC9wKi00qa0eySrY.roa (hash: mMnLCC58FrEpo9AcseP6Ttc1YSWB7rt8x7N2xaBJU6E=)
2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: j0ZGXLX+INM6LELSsJceUZrY8le4dX804ipj7eaLFQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:71:66:7e:1d:cb:97:fc:69:7e:44:e9:1a:20:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Validity
Not Before: Oct 27 16:01:33 2026 GMT
Not After : Oct 28 16:01:33 2026 GMT
Subject: CN=5eb2464267769cfa5506efdf307a12dd2f05d2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:5c:d9:09:7c:c9:23:c9:7b:f7:9b:ca:67:
8e:62:88:da:8e:ec:9b:9f:2e:a9:f7:66:5f:0c:53:
93:6d:40:b3:5f:fe:7d:bf:81:ff:1d:00:b3:ff:9e:
b5:f0:62:12:4a:bb:c0:bc:43:b4:68:55:7f:2e:a7:
ac:48:43:ca:07:f1:b2:60:ca:c3:60:ae:81:a1:b5:
a7:b7:fe:2e:9e:e0:8b:ae:05:03:b1:47:a6:d7:46:
5c:7a:52:8b:e0:e2:fe:32:74:34:80:52:66:21:e0:
d4:a7:71:89:95:d7:3e:17:c4:91:4e:6b:f2:1d:2f:
b6:99:92:fe:1f:b1:6b:2d:26:8b:f8:89:2a:53:f1:
6f:88:dd:bb:ee:07:bb:c2:c6:69:3b:53:ee:fd:6a:
87:1a:1f:9e:15:f7:23:fd:81:e6:cd:63:35:1e:3b:
5e:50:7a:c3:db:f4:52:b0:17:23:34:bb:aa:a7:40:
1e:00:07:8b:9f:ae:c8:5e:d2:76:3c:bb:4e:d6:3d:
f9:65:0f:ee:3b:4b:6a:43:6c:99:5e:60:51:ad:9a:
9d:d4:f6:19:df:c9:31:fb:7e:02:c9:fe:26:49:5f:
7b:bc:2a:b3:6b:80:51:0f:f6:dd:a9:9b:dd:30:2f:
f0:d3:e1:72:87:54:50:d5:f7:76:48:81:77:5c:44:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B2:46:42:67:76:9C:FA:55:06:EF:DF:30:7A:12:DD:2F:05:D2:AD
X509v3 Authority Key Identifier:
keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ca:aa:fb:f3:6c:4f:f2:a6:fa:80:ad:c3:8e:d0:ec:34:09:
a2:a5:81:09:d0:96:26:b9:85:28:09:5b:e9:fa:a9:12:04:c0:
40:42:2a:3c:a0:e7:39:5d:11:e0:e7:7e:88:30:ec:8e:67:85:
48:38:fd:f5:1d:f8:4a:51:74:da:84:61:d5:44:07:b2:9d:d2:
6b:7b:61:d1:cf:a5:cd:8b:2b:6f:e3:84:96:d8:e8:ba:70:1e:
5d:e2:59:aa:49:76:44:24:bb:e7:e2:91:dc:af:9f:b9:7c:27:
86:5f:94:2a:36:d0:e6:15:bc:1f:f0:59:2c:22:0e:28:44:92:
28:89:25:e4:9b:63:3f:61:a3:ec:5a:f5:0c:7a:a0:ae:77:00:
1f:12:3d:57:bc:ce:dd:5b:14:09:8f:3c:8e:ec:c6:13:b1:41:
ed:73:ae:d3:20:ac:4d:13:ef:7f:65:e1:31:bd:5d:7a:a1:94:
a2:bf:0f:72:14:f3:48:d8:a9:16:e4:55:4a:ab:dd:50:7a:5b:
b8:0f:8a:8d:61:73:82:0b:a0:5e:84:bc:84:ae:86:a0:fb:b0:
11:a0:99:da:90:47:66:55:34:53:fc:fc:37:d9:7a:2f:da:1a:
1c:b3:70:2c:4a:11:92:83:99:00:7a:a5:a8:79:e9:74:01:dc:
e1:33:ac:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:34:35 2026 by rpki-client