
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: V9hDoZT84LBubNan2fugVTt2oHZKgsfuKpSJI3ciyVY=
Subject key identifier: 36:85:46:AE:C3:0A:39:C8:9A:5E:50:47:E3:3C:FA:E7:55:D4:C7:76
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 01A17D72F16EAD02C7795FD93AEA9CC37CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 0A71
Signing time: Tue 27 Oct 2026 13:00:47 +0000
Manifest this update: Tue 27 Oct 2026 13:00:47 +0000
Manifest next update: Wed 28 Oct 2026 13:00:47 +0000
Files and hashes: 1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: MPER6ngG5WkaZzPvwD2i6lMQhdYweDwlg59td+NHLBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:72:f1:6e:ad:02:c7:79:5f:d9:3a:ea:9c:c3:7c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Oct 27 13:00:47 2026 GMT
Not After : Oct 28 13:00:47 2026 GMT
Subject: CN=368546aec30a39c89a5e5047e33cfae755d4c776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:4a:5f:d2:9f:a5:60:9f:44:61:cf:22:55:
1f:52:c7:60:64:6d:93:3b:4e:3a:cf:a9:0a:5d:7f:
8f:ef:97:c0:df:da:6d:7c:e3:85:1b:fe:6d:f3:b7:
f4:74:ba:4c:0d:28:18:64:f7:d8:2a:d8:e7:2b:eb:
ca:9f:d0:8d:5d:72:59:1e:25:4d:dc:c4:24:df:5a:
5c:de:bc:50:c1:30:2d:55:99:74:54:d5:a9:76:ba:
f0:c1:97:72:2c:f6:ac:3f:a3:3a:c5:db:bb:9d:31:
f0:bf:b5:50:c4:6a:b3:75:ce:81:e2:ad:4b:37:2d:
bb:fe:03:bd:ae:d9:50:cb:6b:24:9e:b7:56:9d:44:
00:18:81:f6:ad:15:bc:c3:b6:1d:43:5c:02:05:62:
1f:81:cd:3d:37:e8:a2:4b:9d:3d:13:00:5e:21:88:
69:f9:a8:d7:71:63:6b:48:9d:d2:9d:e7:c7:53:4a:
eb:64:fd:16:c3:64:9b:3f:bc:4c:a4:62:26:23:c2:
22:fa:f8:36:0c:fd:e4:2b:8b:5f:70:06:c1:8b:78:
dc:9e:df:a7:26:2b:6e:89:8a:fa:50:ea:f4:d2:c2:
2d:70:af:c9:17:f8:29:f0:aa:8e:4a:ec:56:58:e8:
19:4c:1b:4c:a8:20:63:76:cc:b7:4d:f1:c1:5a:70:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:85:46:AE:C3:0A:39:C8:9A:5E:50:47:E3:3C:FA:E7:55:D4:C7:76
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a9:c2:40:03:58:38:04:94:30:26:9a:14:9d:6f:60:0a:71:
da:fd:d2:8e:5e:d9:1e:b7:ff:8b:db:3f:7c:b9:93:b9:69:35:
83:bc:5e:76:1e:86:0e:a1:12:77:b5:38:bc:03:ea:fd:83:b8:
25:67:4c:21:d1:8b:2b:b2:44:12:5f:22:96:93:f6:48:e9:4b:
d2:3a:9f:ea:f5:9b:eb:0e:9f:3a:ad:16:fd:75:bf:0e:b0:ab:
d8:f8:32:00:fd:d6:38:f1:da:eb:2e:f2:9d:b4:18:a4:12:be:
e2:0a:c0:90:4c:b2:a9:d1:7a:bf:48:5c:ca:1c:ef:e3:ff:e6:
03:b3:6e:a5:5c:75:a5:a1:b8:21:52:97:97:ef:2f:9e:32:f5:
2d:a4:8c:ea:be:69:77:c1:de:15:a5:3f:0c:a8:f1:d9:4a:36:
d3:83:78:de:86:ff:68:e8:8e:58:9d:1d:b9:55:8a:66:67:f7:
7d:01:07:c9:87:ae:42:d4:36:97:35:95:df:83:37:6d:cb:3a:
6e:86:c2:42:e5:7b:43:c4:25:f5:33:92:ed:a9:b8:d0:50:a0:
cf:67:e7:3f:b0:30:a9:e4:fc:ba:67:61:84:93:1a:04:0a:46:
7a:9f:b4:5d:53:43:74:2e:81:1d:ee:68:86:aa:9f:1c:f7:24:
c7:34:34:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:38:11 2026 by rpki-client