Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: wq7DtEJ0XO6slAyvgVJ2yo4qsDOQIPGoq09TZN5Un/g=
Subject key identifier: 8F:DA:BE:C6:95:0E:D2:DF:71:C5:77:23:BD:79:16:E8:1E:6E:82:78
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 01A17CCEC879F046DC5B14553DE9CAC6BFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0F94
Signing time: Tue 27 Oct 2026 10:01:28 +0000
Manifest this update: Tue 27 Oct 2026 10:01:28 +0000
Manifest next update: Wed 28 Oct 2026 10:01:28 +0000
Files and hashes: 1: P5elOkBLveGl1Ib_d-hIHalet_Q.roa (hash: yhnDVPZx7UIZ7b78IbUGd3YNtEhVBShWgFfNgBkV6AE=)
2: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: VXlyLzUfi+hdhsJIRdNXECYMkp7mG9Sj1TuJAusePSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:c8:79:f0:46:dc:5b:14:55:3d:e9:ca:c6:bf:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Oct 27 10:01:28 2026 GMT
Not After : Oct 28 10:01:28 2026 GMT
Subject: CN=8fdabec6950ed2df71c57723bd7916e81e6e8278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:85:8b:94:81:62:c0:53:60:dd:2d:75:09:
6f:27:4c:de:b1:7f:58:32:25:d1:d8:7a:d4:4e:b5:
6d:90:ac:ce:0a:c6:50:38:b5:92:0b:70:a8:4a:19:
df:cb:5b:ed:a9:39:43:93:48:83:40:04:d9:af:4c:
02:27:63:bc:1c:ed:55:a1:5b:cc:a1:3c:01:89:31:
dc:0d:40:65:89:11:44:f3:e8:2c:74:ef:ae:3a:d7:
ae:5c:bb:c0:5c:7d:0a:55:b5:77:0e:29:14:a8:90:
6d:da:4c:90:dc:92:2e:28:79:c7:95:ff:40:d7:7d:
24:79:3b:1f:69:d0:45:d0:a0:42:68:e5:7d:fd:99:
bb:24:58:97:01:7c:be:8d:7f:ca:27:26:87:70:42:
ab:91:dc:e0:a7:51:84:c6:e4:fc:b8:20:fd:15:69:
20:d6:26:2b:e4:d5:30:dc:77:2d:59:69:da:a2:22:
36:42:b6:e5:e2:75:ba:3c:8d:24:24:f3:46:0e:59:
1e:63:bd:51:ba:ed:cb:f2:33:00:d5:c4:03:f0:39:
83:56:d5:6e:9f:e2:b9:e1:6b:f1:7d:aa:81:d0:20:
eb:4b:b0:d4:f7:33:99:06:3f:5f:3e:25:11:06:e7:
e5:85:30:01:07:49:b6:f7:77:cf:c4:49:c9:8f:40:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DA:BE:C6:95:0E:D2:DF:71:C5:77:23:BD:79:16:E8:1E:6E:82:78
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fb:3b:59:ac:87:78:94:bc:c2:9f:63:50:f2:4e:5e:b6:5f:
12:66:91:68:56:28:fd:2d:dd:bc:85:7a:c0:b1:2a:d0:79:99:
1e:a6:f1:99:3b:ea:5d:dc:f7:1d:5b:ae:a8:52:9e:4a:ed:48:
11:25:70:a6:ea:5f:0a:0b:33:2a:a4:32:e5:6f:23:72:66:4a:
04:63:20:82:5f:5e:24:34:b3:c7:95:4d:55:f2:66:8f:52:bd:
06:de:e9:d7:32:35:52:10:ef:74:0b:5b:91:f6:f8:08:97:ad:
07:7c:08:5b:8b:3e:b7:84:64:95:27:3e:5b:fa:1c:bd:8b:f5:
e9:7b:d5:bb:ea:74:7c:27:be:37:66:91:c0:31:97:c3:47:47:
de:27:6e:10:e0:53:4d:63:57:b6:7a:5c:2b:6c:63:6a:d1:ba:
43:fc:6f:6a:d6:21:e0:38:24:91:22:dc:1f:bd:89:af:5c:7e:
71:1b:41:6b:8a:c9:55:68:ee:1e:1d:e2:4f:d6:16:b5:52:84:
2d:12:07:56:32:85:02:52:21:02:ea:3b:82:9a:15:cc:6c:dc:
bd:e5:6a:20:69:51:26:d7:c0:1e:19:fe:b3:d5:f8:f7:97:58:
a8:f7:3f:d7:16:49:fc:89:77:41:36:5a:74:9e:70:6c:12:04:
c8:ce:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:59:48 2026 by rpki-client