Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
File: rAX0aJpExsm7ECrDExtucFNOr0U.mft (raw, json)
Hash identifier: i7z1/3tJixNh9ySQq6tXdF2CmuzFJVPQIJQaLiqYj6U=
Subject key identifier: 00:13:9F:D8:5D:E2:CE:34:73:18:3B:E2:7D:6B:E9:9D:D9:1A:D2:0F
Authority key identifier: AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
Certificate issuer: /CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Certificate serial: 01A15176EB7BC22FD23C4BB2AE119F8D4D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
Manifest number: 0128
Signing time: Mon 19 Oct 2026 00:01:50 +0000
Manifest this update: Mon 19 Oct 2026 00:01:50 +0000
Manifest next update: Tue 20 Oct 2026 00:01:50 +0000
Files and hashes: 1: 8KpPDxsbWUdm2uUdpYhleeRGrAY.roa (hash: onwtO6lm790hsvkHwCBWU4djLXwDxoFOKGLkdsUwJNE=)
2: GiGclhLqZFLRsgCRYA0MC4_mt7U.roa (hash: TNhQmFU9fhhz9PaprjVTJQ3o1TKkQSYQEMCYW6CwS90=)
3: rAX0aJpExsm7ECrDExtucFNOr0U.crl (hash: qnEwY0sTuHYol4nGvU8L6E9KFWq3UjHOESPjWUCfqlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:eb:7b:c2:2f:d2:3c:4b:b2:ae:11:9f:8d:4d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Validity
Not Before: Oct 19 00:01:50 2026 GMT
Not After : Oct 20 00:01:50 2026 GMT
Subject: CN=00139fd85de2ce3473183be27d6be99dd91ad20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:98:bb:13:c5:11:f8:f3:02:33:1c:6a:7f:
54:be:48:a3:92:bf:37:af:4a:92:2e:d5:84:0a:9f:
ba:19:65:42:68:c0:3f:46:8f:ee:e0:5f:61:15:f4:
79:97:31:6f:61:62:a6:dd:fc:98:bd:4f:79:41:f1:
5c:97:b5:22:4b:a4:39:78:17:23:fd:be:b5:cb:8d:
bc:9e:30:dc:39:3e:c7:6b:0c:c0:b4:7e:41:63:85:
bc:79:9c:6a:f0:8d:3b:f8:9b:5e:de:21:9e:6a:3a:
e0:9e:35:7b:47:59:b9:41:49:29:59:6e:79:31:e5:
c1:e4:e9:09:81:46:be:6a:30:77:27:d5:0a:3a:aa:
2e:40:22:74:d6:3b:b5:b3:75:b1:a4:2c:f7:aa:e8:
28:62:79:e3:64:c0:02:08:5a:52:39:26:e0:bd:6f:
61:56:a2:cc:69:69:06:17:8a:bc:94:b0:24:83:83:
29:70:a8:bd:ce:61:a2:b9:65:6e:74:f5:44:c9:6b:
bc:92:1d:9e:75:a7:c9:26:98:61:3c:1f:36:1e:a4:
15:90:6c:a5:de:36:e2:b1:8a:5b:7d:c0:a7:3c:99:
fd:31:17:20:a2:75:7f:fa:d4:e3:be:d5:47:fc:b4:
5e:a5:54:f0:14:70:c1:b2:9e:84:65:bb:f9:cf:23:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:13:9F:D8:5D:E2:CE:34:73:18:3B:E2:7D:6B:E9:9D:D9:1A:D2:0F
X509v3 Authority Key Identifier:
keyid:AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:92:ed:2b:30:2d:fa:d8:7b:01:01:a4:8f:94:b1:57:19:d9:
ad:32:49:59:35:90:f5:a1:bf:f1:be:8c:e0:1d:f2:7a:8f:33:
4e:43:8e:4b:29:1e:64:d8:1c:55:48:3c:01:b9:c2:19:62:0c:
a2:ba:4f:12:18:ca:bf:18:6f:df:93:4f:cd:11:e5:3a:1e:56:
29:03:83:b9:05:d0:e3:16:73:26:47:a0:ee:e2:b4:aa:41:43:
61:bc:97:36:22:09:b2:3f:41:5b:9d:68:f1:cb:62:7b:95:7d:
f7:9f:07:59:4b:9c:0a:56:a4:4b:7b:41:c9:f1:88:aa:91:9c:
d6:36:20:95:3b:c0:b7:5a:e6:a9:04:d3:e1:54:89:0e:4a:2e:
0f:94:73:d3:3f:24:11:5d:e7:78:77:e6:87:3f:3d:d5:a0:5e:
88:83:29:e6:69:04:29:5f:15:ab:88:6d:2e:5a:de:f6:0a:29:
da:5f:ac:ec:cd:22:35:cc:a3:e9:21:38:8f:f6:65:39:51:e8:
c2:d3:2e:40:f8:4f:48:77:34:b5:c1:f9:43:16:15:1e:90:e9:
97:6f:5f:d0:a9:61:2c:bf:69:80:b2:7a:de:9e:51:68:c9:48:
19:63:6b:b4:24:4e:32:e3:8c:c0:fa:38:ad:8c:14:6a:59:58:
bc:62:d3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:04:24 2026 by rpki-client