Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: cBdccXuAGlZVz1FQbOzYsqsObK7fEu9vNVRWtD7DPNI=
Subject key identifier: A6:C8:65:DE:BD:91:A8:19:F7:F8:17:4D:4D:32:3F:14:62:B2:16:DD
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 01A14FF57E2F6594074349E7C8514EEAE4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 1A43
Signing time: Sun 18 Oct 2026 17:00:51 +0000
Manifest this update: Sun 18 Oct 2026 17:00:51 +0000
Manifest next update: Mon 19 Oct 2026 17:00:51 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: IQTkgaYYQdU6CYxnyJkMm9jErwAWnhx68L+Qi15Q8ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:f5:7e:2f:65:94:07:43:49:e7:c8:51:4e:ea:e4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Oct 18 17:00:51 2026 GMT
Not After : Oct 19 17:00:51 2026 GMT
Subject: CN=a6c865debd91a819f7f8174d4d323f1462b216dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:b7:2b:62:78:b5:b6:ed:7c:18:56:60:cd:
6b:6a:9a:06:ee:c1:00:b3:1c:49:85:98:86:d8:32:
e0:43:a8:1e:99:df:e5:aa:3b:a3:a4:ce:d0:9c:10:
80:51:f1:0d:30:29:78:ea:0d:d3:3a:13:0b:29:e1:
50:45:58:73:28:3a:35:88:cc:59:49:6f:84:fb:f4:
9a:b4:58:fd:7d:f5:e4:0d:39:bb:d7:85:0e:ed:0b:
d8:04:c4:77:bb:0a:6f:9c:89:01:b8:11:51:9b:51:
65:bc:e1:ce:87:4f:7c:9d:c9:a5:5c:0b:ed:d8:c0:
a5:b7:19:87:1b:8c:fa:17:81:60:6c:16:aa:db:07:
6d:91:46:95:c8:d8:e5:ae:33:7b:7b:fb:f7:f5:4a:
e0:84:b0:f7:04:37:6e:c9:1b:b9:51:55:0c:2b:a6:
7a:26:29:81:97:d1:d3:d7:a3:bf:a3:fe:5f:c2:7a:
a9:50:b4:97:4f:c9:d6:a4:59:93:06:8c:3a:22:b7:
1a:19:f4:ad:da:b5:07:27:60:c4:65:da:a6:03:c3:
3a:06:2d:c9:b6:31:34:8d:fb:28:3d:e9:d3:4c:d1:
5f:96:5e:db:5d:ce:2c:54:d9:a4:e9:fb:d9:3b:aa:
70:e8:7a:e7:6c:d7:2d:59:9c:2f:7d:a8:5b:f7:89:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C8:65:DE:BD:91:A8:19:F7:F8:17:4D:4D:32:3F:14:62:B2:16:DD
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c6:88:2d:a4:8d:a4:42:f6:3a:19:54:4b:89:52:54:53:77:
e6:d8:51:f4:40:b1:f5:27:93:4a:8f:04:98:37:2f:0b:86:c4:
56:08:45:6e:47:3d:77:72:4c:3b:c1:de:96:7b:68:7b:c2:41:
0e:17:1f:f0:a6:c1:6f:56:00:c5:81:84:ca:a1:a0:8e:60:b7:
73:1a:86:f2:64:ee:9d:63:b6:f4:ea:5e:16:3f:fa:b5:cd:cf:
6e:ae:6b:e3:7c:b6:81:31:06:69:70:ea:3a:7e:e3:dc:61:ba:
2a:06:18:ab:41:15:0d:53:cf:64:e5:2a:db:3d:5c:a5:24:1a:
17:7a:47:81:56:4f:12:b2:7b:bd:1a:b8:44:47:b8:a8:1e:bd:
f4:90:ad:ef:53:26:a3:72:79:b6:5e:17:f5:0a:6b:83:7f:89:
22:1f:2b:b5:31:76:98:44:a4:41:eb:8a:86:8a:8c:a9:aa:40:
22:a7:e6:37:d8:68:d6:3e:5f:b8:18:75:37:7d:85:a0:65:5d:
28:00:b6:37:ce:a4:bd:e4:cb:bc:54:e7:58:ab:8d:c6:f3:f0:
98:95:b5:59:1c:d7:84:49:30:ce:49:5d:aa:05:8d:9f:42:31:
e6:f7:02:ee:ce:05:c2:39:e1:ca:8e:49:f9:9e:24:47:94:6f:
e4:b4:86:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:08:07 2026 by rpki-client