Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: 5HoZmyqI1NtmJgKzXG318eU/smkZPgT8SU4OebFwJuw=
Subject key identifier: 50:A3:16:52:6E:51:40:4D:7D:89:42:98:2E:33:04:C2:EE:02:38:DE
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 01A180ABB706B81EE243F812523D807A8069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 1A5A
Signing time: Wed 28 Oct 2026 04:01:39 +0000
Manifest this update: Wed 28 Oct 2026 04:01:39 +0000
Manifest next update: Thu 29 Oct 2026 04:01:39 +0000
Files and hashes: 1: YFuXlkN-MljNRVYZCMihnQz4RoU.roa (hash: ZnDgTtky6cYn6D0/F0mae8ReoG9f3tqFA2qYPiw3SoE=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: r5N7u2Fy5rITrSmwalTExNsPvlqfXFRZZcF9NoxaMC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:b7:06:b8:1e:e2:43:f8:12:52:3d:80:7a:80:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Oct 28 04:01:39 2026 GMT
Not After : Oct 29 04:01:39 2026 GMT
Subject: CN=50a316526e51404d7d8942982e3304c2ee0238de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:cd:70:df:7a:96:7b:b4:e7:7d:79:28:18:
21:26:d7:43:d6:0d:7f:00:32:6a:ac:bc:41:db:7c:
ff:68:45:01:fd:d0:80:c6:d5:ba:c8:5f:25:ee:a7:
35:3c:68:95:dc:13:10:5d:d3:73:9a:07:ea:d1:06:
2c:2c:2a:56:ff:88:d0:c9:54:75:9e:27:34:a4:0d:
89:a7:ca:06:66:bf:0e:19:3d:38:77:04:73:ac:d1:
2b:93:5f:f2:e8:59:e1:14:90:2c:e2:73:a1:c1:ed:
96:79:f3:30:7f:66:f9:c3:f3:16:31:e2:3f:c7:f0:
dc:85:0a:95:0f:d3:84:89:73:92:ca:32:e5:17:25:
90:1e:49:f0:d3:c7:ce:88:dc:f4:0f:be:8f:df:d0:
b4:e7:7c:94:93:9a:2f:ac:dd:9c:57:3f:81:dc:e9:
1b:2b:46:c9:02:74:5b:3f:57:2a:56:52:07:42:a9:
64:77:0d:5e:a5:c4:76:2d:f6:e7:da:e6:0b:4d:3f:
23:ae:50:c1:e0:fa:a8:47:ba:d8:a3:c0:c4:69:20:
eb:91:dc:f5:09:20:2e:58:ad:d7:f8:f4:aa:df:1e:
5b:af:b5:f5:1f:83:13:6b:98:dc:1f:25:4d:b3:6f:
30:cd:9d:e0:e7:d9:a4:85:49:e5:0f:3c:d3:f7:48:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A3:16:52:6E:51:40:4D:7D:89:42:98:2E:33:04:C2:EE:02:38:DE
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:49:7d:dc:cf:38:88:14:14:bf:44:e1:b6:12:5f:71:a8:41:
44:6f:bf:67:61:fc:4e:e9:c3:82:6c:0d:a2:d3:42:77:47:4d:
0d:b0:08:2e:c8:47:93:43:ac:9c:bc:a9:8b:87:35:69:e6:7b:
fa:8a:a1:af:43:3c:43:17:24:dc:8d:c5:a4:e9:b0:b6:d4:14:
c9:63:a9:cc:b9:0f:1d:e7:3a:12:11:95:61:12:9e:f7:42:c9:
13:21:32:d7:c6:fe:5f:6b:5c:e6:19:04:cb:29:44:6f:78:dc:
d2:1a:4c:cf:cd:72:c2:66:5d:f4:f6:0b:71:6c:e8:6b:70:e3:
f5:4d:f6:84:93:05:9e:d0:8c:f8:93:04:ec:e4:16:d5:68:ff:
6c:e7:59:82:8d:39:11:45:9b:2a:71:23:9c:9e:1d:45:c7:1e:
9a:b2:c0:1e:88:66:ae:11:7c:7a:ea:84:d0:63:9f:b5:51:69:
8f:ad:14:24:26:80:a8:9c:4f:9c:7c:77:b1:bd:c8:d9:00:2a:
20:53:b4:c6:c3:19:77:b4:12:6a:4a:28:aa:5c:2f:10:ea:84:
fe:a2:4f:83:65:86:12:bc:f9:fb:af:2f:22:7c:8a:1b:0b:ba:
84:f5:49:32:df:51:3d:ab:db:93:90:08:59:aa:15:ab:77:87:
4d:5c:4b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:35:11 2026 by rpki-client