Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File: sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier: 2ayiAWT/PFCT224uHdODzwKE/toIGqlK3Iso183QALQ=
Subject key identifier: 4E:BE:80:06:03:2A:29:19:B2:23:BA:ED:38:D2:3B:CC:73:4C:E1:24
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer: /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial: 01A17C2972AE3981BCE7794A29C4D57071D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 07:00:53 +0000
Manifest this update: Tue 27 Oct 2026 07:00:53 +0000
Manifest next update: Wed 28 Oct 2026 07:00:53 +0000
Files and hashes: 1: cJdPxb0RSH0QMcbmsxnfVVZLI9o.roa (hash: 7Mc+8VOQ2R5S9UUsL5A35++MoKrgCRu3M3X3wsPiNFQ=)
2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: dU+WGQio4Xr52GoZ9llUMIwITk6uL3IcXR4p5PFzvlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:72:ae:39:81:bc:e7:79:4a:29:c4:d5:70:71:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Validity
Not Before: Oct 27 07:00:53 2026 GMT
Not After : Oct 28 07:00:53 2026 GMT
Subject: CN=4ebe8006032a2919b223baed38d23bcc734ce124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:26:9e:20:66:52:fc:e7:bf:70:64:ad:b3:
40:55:a4:c5:eb:66:55:71:2e:35:20:c8:cd:bf:1e:
9f:d4:93:c1:5b:a9:b9:e4:ea:9e:66:e4:b1:a4:b7:
2a:a6:89:c4:a1:ad:3b:23:00:fe:d0:29:8a:75:cb:
67:17:06:0f:c7:b6:0b:0e:f8:ea:e6:b0:d2:d5:9c:
42:7f:6a:c7:c2:3c:49:08:13:c3:af:2b:57:2e:0d:
3a:a8:af:cd:d0:9d:13:c6:6d:9d:61:b1:08:5c:ec:
58:f7:11:59:2b:5e:6e:69:c9:15:03:b7:bf:8e:91:
36:1a:dc:54:0f:23:5a:36:47:eb:47:b6:ec:49:bf:
68:08:70:c7:4c:a0:0a:bd:80:f3:c6:61:d9:93:01:
c5:6c:42:1c:54:2e:65:63:4d:e1:fb:e4:1e:7f:b3:
b9:1b:0f:dd:e9:70:36:4c:ca:fa:e2:70:98:ed:6e:
69:44:63:0f:5a:b6:6a:6e:bf:f8:54:db:48:f0:f0:
a0:86:94:2d:b4:92:ef:0a:2d:b4:9e:b8:17:43:27:
21:5d:3d:5c:59:44:82:6d:62:be:0a:0a:97:d9:b5:
3e:96:c7:c0:39:b0:42:bf:05:75:6b:bb:00:52:16:
f4:4a:c3:f8:78:c0:71:9e:f6:bc:6a:8a:fb:29:38:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BE:80:06:03:2A:29:19:B2:23:BA:ED:38:D2:3B:CC:73:4C:E1:24
X509v3 Authority Key Identifier:
keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c8:8a:8f:c1:f5:7a:59:4d:ed:d5:05:24:3f:f5:29:9e:d8:
b3:90:7b:97:7f:68:e6:e7:8b:d8:61:2d:e1:50:fc:2f:b4:87:
04:a2:fa:05:57:0b:f6:11:1d:10:f3:ee:37:10:90:a1:16:ae:
6d:71:c0:64:55:cb:2f:47:56:88:34:41:81:40:64:ca:08:75:
08:f6:bf:0c:87:de:36:57:e1:2d:c0:8a:80:09:c3:00:35:87:
48:87:9d:ba:39:0d:a3:a2:96:ec:5b:c9:77:4b:93:82:ae:6b:
3a:64:70:4f:07:ef:65:8e:99:c5:ce:da:53:61:1f:e4:3d:49:
f3:92:3b:3e:b1:4e:2f:28:90:e2:da:1d:13:db:9a:f9:89:e1:
f4:ed:03:b3:a6:95:73:2b:ed:12:59:5d:23:dc:d4:e9:c0:d8:
a5:ee:82:5d:b9:78:9a:8b:f5:5a:d5:4c:c7:e6:92:46:d9:ac:
90:ac:38:0b:5f:b0:86:28:0a:b5:42:cc:1c:83:d2:19:a0:93:
8e:5a:9c:bf:20:ff:f9:6c:33:69:ff:dc:d4:66:16:35:fd:4e:
8c:01:31:db:ba:74:dc:6d:46:ff:d4:28:70:13:ac:e5:1a:ad:
45:7d:05:41:ce:9f:98:74:98:1a:ad:09:b5:1f:32:a0:f6:ac:
8b:ab:98:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:59:39 2026 by rpki-client