Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File: sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier: HPl6EaeMLvB62xsrE+gizu4OFWL0J6I5UNEm3hKt1aU=
Subject key identifier: 16:B5:2E:3A:5F:57:13:57:D6:63:BB:69:34:9C:52:99:45:26:5E:B4
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer: /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial: 01A180068046078942E97B0F36CA502E1C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 01:01:11 +0000
Manifest this update: Wed 28 Oct 2026 01:01:11 +0000
Manifest next update: Thu 29 Oct 2026 01:01:11 +0000
Files and hashes: 1: cJdPxb0RSH0QMcbmsxnfVVZLI9o.roa (hash: 7Mc+8VOQ2R5S9UUsL5A35++MoKrgCRu3M3X3wsPiNFQ=)
2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: tcD98t/v4AIJssJhNpy5lQuLQOgRNe1mpAev/J06XGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:80:46:07:89:42:e9:7b:0f:36:ca:50:2e:1c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Validity
Not Before: Oct 28 01:01:11 2026 GMT
Not After : Oct 29 01:01:11 2026 GMT
Subject: CN=16b52e3a5f571357d663bb69349c529945265eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:89:10:f9:ca:b6:02:48:1c:0d:25:f7:55:
ad:ef:05:5c:e2:46:99:55:24:03:a5:93:e8:8a:f6:
66:89:96:de:8e:7e:20:92:65:09:33:2f:65:bb:75:
e3:0d:4f:57:99:18:a6:85:13:d7:3e:67:48:f3:dd:
47:f3:8c:9e:b5:96:52:d3:44:bf:e8:67:00:85:d3:
65:e5:dd:5b:af:96:62:47:63:af:5a:8e:4d:b4:47:
ab:3f:f7:f8:23:6f:c8:b1:ad:df:cd:76:53:0b:93:
c1:8e:1e:3a:fa:2d:71:42:84:3f:5c:04:08:5b:f3:
29:6a:67:40:2d:52:f6:f1:1c:de:ac:14:88:14:cc:
67:d8:43:7d:b5:f0:1c:e8:03:a7:2a:34:ff:59:3b:
d3:c2:33:4c:8b:4a:c3:04:46:11:b3:70:e2:0b:9d:
4b:b0:46:af:c5:3d:60:80:c5:bd:c8:f1:45:49:89:
7d:fb:3a:c9:7e:73:2f:20:03:a6:59:9d:ff:b5:44:
65:58:9c:d0:e9:90:e3:94:d5:5e:14:b9:d5:a0:4a:
bf:af:e2:ea:ce:31:81:cf:b9:e8:38:3b:48:84:02:
f3:ce:b2:52:30:33:c2:97:3c:5d:1a:75:b5:fc:ba:
0c:4a:4a:ee:ec:5f:76:e6:46:bf:07:0f:79:fd:50:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B5:2E:3A:5F:57:13:57:D6:63:BB:69:34:9C:52:99:45:26:5E:B4
X509v3 Authority Key Identifier:
keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3e:33:ea:2d:14:fc:87:af:44:3a:87:b8:d2:67:19:23:20:
0e:bc:80:c7:2e:5c:29:21:92:e0:a3:7b:4c:3f:e1:ad:ea:5d:
cf:2d:08:94:a5:4b:87:84:91:3f:56:bb:7d:08:c6:02:23:db:
2e:44:89:73:29:90:18:8a:5a:99:45:2d:23:32:67:36:d5:5d:
61:3b:06:c9:17:ba:ed:c8:88:57:c5:5f:99:02:f4:1f:48:9c:
35:e9:09:d0:d3:4e:44:88:2d:f0:f5:45:d2:b7:d8:10:11:5c:
51:6c:0b:c8:c6:03:b4:3e:1f:c3:ca:d5:70:32:c0:ff:14:10:
bc:c8:82:d1:75:ef:8d:9f:b2:2d:aa:e8:ac:73:ba:96:d2:10:
2f:46:8a:cc:6f:a9:c7:ae:a2:07:40:7c:d8:7a:40:87:a7:97:
27:20:48:7c:97:bf:b1:a1:21:e7:aa:8c:e7:dd:1f:62:bf:f3:
66:26:76:fa:24:8e:9a:e5:84:0d:68:86:9a:05:1c:8f:75:17:
19:11:a1:24:db:e8:44:83:e7:d7:2c:b6:0b:27:3e:f4:de:cd:
ae:3c:bd:29:63:ce:18:f6:0b:e8:19:7b:01:3c:1d:ba:53:c0:
8d:6c:66:62:11:0e:5b:aa:18:01:e9:6e:85:30:93:c6:89:32:
cd:f1:64:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:15:22 2026 by rpki-client