Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: t9PK+7eP4FvEV8UwakG4/rLvER63KA1gkvT4Y+aIcOU=
Subject key identifier: 6C:C9:06:88:BA:C4:33:2B:B9:1D:F3:29:63:03:49:10:57:80:6D:44
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 01A15F687DD5BCF9287AE8689226C308CE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 1AB6
Signing time: Wed 21 Oct 2026 17:00:45 +0000
Manifest this update: Wed 21 Oct 2026 17:00:45 +0000
Manifest next update: Thu 22 Oct 2026 17:00:45 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: 9xRja/Lv7mQP4hDHJQZYb6y8SATa44kW/heUcMbF85g=)
2: A0zEfLP6aje6siYVgtOIFTUv-gA.roa (hash: U3yH+f7j1agPNZjyy4FkXU1kfVyaRAeAIT0ypJqPwSA=)
3: C96r7R6Mb5GqlprR3I_no-ERD4g.roa (hash: NLf7EUxe3BSu+odq1YzXIDULHf2Z5URrNMh4SALrwlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:68:7d:d5:bc:f9:28:7a:e8:68:92:26:c3:08:ce:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Oct 21 17:00:45 2026 GMT
Not After : Oct 22 17:00:45 2026 GMT
Subject: CN=6cc90688bac4332bb91df3296303491057806d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:57:87:8f:4d:6f:6b:16:10:57:98:db:c9:
e9:1f:84:0d:9d:e4:d5:04:c1:59:eb:d1:a0:72:d9:
d7:15:a8:db:c9:b6:ce:f2:e8:c7:fd:b7:3a:f5:91:
fb:a8:aa:0c:2f:61:56:a0:9f:47:7e:c7:f4:e3:fd:
ca:8e:71:4b:04:4e:d1:1e:69:9d:ac:75:2d:d2:31:
74:97:d7:5d:6b:ab:cd:06:53:38:9d:5c:14:a2:45:
00:35:5d:54:be:b6:70:69:3b:55:23:96:7a:1d:b1:
da:0f:c3:51:ba:3f:f9:37:61:70:4c:7a:7c:d2:75:
93:61:a3:fc:83:ba:e7:e6:b9:b4:00:32:e7:24:d5:
2b:3f:75:3d:55:17:db:32:18:1e:23:14:5d:9c:46:
da:73:8b:26:d5:51:b8:74:89:b1:0b:9c:cf:74:00:
1f:10:06:c8:8e:dc:26:bf:7f:8b:4f:54:5e:1a:15:
4f:2a:da:6e:f9:40:ce:71:63:b6:eb:d8:81:bf:0c:
cc:77:72:2c:8a:43:0d:66:0a:df:a5:d0:4f:ac:00:
e5:8f:ee:ff:c4:46:38:88:16:6c:18:97:85:dd:2d:
06:11:61:d4:dc:3f:42:e7:42:b7:7c:13:67:8d:50:
17:e1:c0:74:35:91:15:ea:d2:f6:eb:1a:b4:f2:a4:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:06:88:BA:C4:33:2B:B9:1D:F3:29:63:03:49:10:57:80:6D:44
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:da:21:81:97:c3:23:77:ed:df:13:1d:d5:63:c4:f1:06:42:
31:05:9f:68:55:63:4e:bd:55:f5:26:38:bb:2f:c5:7d:98:e7:
e0:e0:08:c9:d4:cf:42:72:5a:08:0d:62:34:7b:22:1c:07:2b:
58:d6:86:2c:01:f7:3c:8e:1a:f8:00:ef:38:63:cc:e9:7a:8d:
33:f4:ee:f7:30:8e:b1:8b:94:6a:8e:ac:1b:2f:22:ab:24:22:
27:29:b5:4d:99:28:8f:0d:00:08:7f:d8:cb:22:30:88:e6:e6:
06:9e:53:4e:68:3f:10:9c:63:e1:84:94:b3:50:f9:16:49:f0:
ba:8f:f1:ce:e9:15:09:c9:c6:b8:85:92:d3:5e:47:cd:25:b6:
ca:5a:89:d0:b2:0c:3a:53:11:ea:68:9c:7b:76:16:3a:8e:d4:
36:2c:80:2c:b7:d2:68:23:5e:88:8d:60:e6:03:10:8c:9f:c5:
01:61:c0:d2:73:26:82:99:7f:f3:5c:b2:0f:fb:34:e1:ea:9e:
49:ab:83:e1:b1:31:79:b6:4b:b9:c1:ea:4b:de:94:5c:78:b6:
56:35:27:cc:ca:3f:6d:ae:b1:12:78:3f:be:7c:89:0a:2d:26:
1a:c5:38:97:b5:32:59:df:e3:b2:dd:0c:54:9b:8e:c7:d0:7f:
a5:77:2c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 04:22:36 2026 by rpki-client