Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: +fJ/DOyYEsEc2+6vjxuxFV3AtUpxhbASXX83G1kk+9M=
Subject key identifier: 37:0F:47:71:52:EA:89:68:33:8A:89:60:50:66:1A:6B:80:A2:2F:59
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 01A18A5317EF20175979648B49BF11886D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 1A5F
Signing time: Fri 30 Oct 2026 01:01:03 +0000
Manifest this update: Fri 30 Oct 2026 01:01:03 +0000
Manifest next update: Sat 31 Oct 2026 01:01:03 +0000
Files and hashes: 1: YFuXlkN-MljNRVYZCMihnQz4RoU.roa (hash: ZnDgTtky6cYn6D0/F0mae8ReoG9f3tqFA2qYPiw3SoE=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: gfazcCa1mqOdbYrKZTRNqwHFPVehcKhl4CuGRraXRoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:53:17:ef:20:17:59:79:64:8b:49:bf:11:88:6d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Oct 30 01:01:03 2026 GMT
Not After : Oct 31 01:01:03 2026 GMT
Subject: CN=370f477152ea8968338a896050661a6b80a22f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:34:e8:8a:cf:a3:30:2b:a8:ea:3d:a4:5e:
21:ca:83:ff:fa:1e:79:48:b4:76:12:f6:57:f8:60:
a1:20:0f:aa:5f:f8:ad:52:4f:3d:27:7f:7d:3d:6c:
f5:5a:f5:67:47:bb:d2:8b:14:04:3c:48:1e:11:5e:
a0:19:1b:61:c5:66:ad:39:7b:1b:fc:1c:ee:b1:7b:
a1:7e:cc:b5:3a:69:af:52:85:16:8d:1b:e6:50:ae:
98:ec:f3:d8:c5:13:f5:33:4a:bf:42:80:10:8d:7b:
bd:8a:71:fc:e9:0c:1e:cf:df:b7:7c:bd:d8:a1:0f:
a3:5f:fc:a2:9e:d8:38:a6:f6:45:20:ae:01:31:5a:
b0:07:dc:a2:c7:cf:0c:c0:a7:9d:e7:d6:c5:75:b6:
79:0e:cf:8c:e9:b4:d7:cd:d8:1f:8b:d0:5d:fd:7b:
fa:a1:ad:02:87:8b:54:a0:c2:d9:2a:47:84:0d:4f:
bb:56:9c:b5:5a:74:ff:b2:13:0f:7f:ae:14:d6:5c:
1a:7b:8e:db:a1:e1:03:78:59:4b:54:4b:4f:6c:c4:
3e:25:9c:ae:b0:1c:e0:8e:97:43:0e:6a:d7:f1:6e:
eb:23:e7:4d:1e:cf:af:a1:94:69:c2:bb:29:11:05:
29:41:17:fa:c7:c8:8f:b8:8b:e2:6c:d3:15:43:53:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0F:47:71:52:EA:89:68:33:8A:89:60:50:66:1A:6B:80:A2:2F:59
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:47:5c:d6:ed:88:c6:a3:40:d4:5a:b3:d4:85:18:ab:46:63:
75:02:04:8a:a5:a9:d3:48:fb:b4:a2:64:8c:06:01:9d:68:78:
63:39:42:82:d4:09:dc:cf:47:74:74:28:e3:eb:d3:63:44:7f:
6e:41:2f:fc:e4:14:0e:e8:c9:d6:46:e3:96:64:0e:dd:5c:c7:
43:2b:20:2a:99:eb:7f:ee:89:b5:56:24:2b:a4:5e:21:9a:d7:
65:45:81:86:f2:f7:38:fe:8e:10:9a:1c:d5:ad:16:c2:90:5b:
01:7d:10:cb:63:82:b6:38:db:71:2e:b1:7f:88:2f:ec:fb:21:
ac:07:e9:85:a1:21:b4:a0:4b:93:c1:e3:6f:18:73:d1:f7:d4:
53:4a:f0:dd:ef:31:7c:c4:71:1d:b4:a9:7a:25:48:15:f7:8e:
aa:94:83:4a:cf:05:be:8f:61:4d:b0:3f:c4:03:0a:ec:0f:56:
c9:6e:9f:79:ce:c0:c5:eb:38:31:52:49:8a:63:4d:ba:1a:80:
21:a7:4a:fc:94:8f:d4:d7:cc:07:e0:e7:28:fc:fb:4c:a9:dd:
2a:6c:87:66:df:78:80:76:2a:1b:cb:d5:71:69:ae:92:87:db:
19:c4:f2:7f:a2:cc:a3:65:e5:53:f0:75:c3:04:f5:2e:f6:58:
d2:7a:dc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 06:42:57 2026 by rpki-client