Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
File: RI63RgCeGCwI7YT4F30ACKZIWD0.mft (raw, json)
Hash identifier: avDcastR7U6ER3yEdMBcwx5d4uzCLWSNZ7PVq//sDGg=
Subject key identifier: D5:3A:E4:71:AA:16:F2:C6:46:7F:0F:9E:E7:0B:E5:02:CA:D2:58:B7
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Certificate issuer: /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial: 01A17F9872AE08B8B5D4EFD1D1125ED81404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
Manifest number: 0276
Signing time: Tue 27 Oct 2026 23:00:59 +0000
Manifest this update: Tue 27 Oct 2026 23:00:59 +0000
Manifest next update: Wed 28 Oct 2026 23:00:59 +0000
Files and hashes: 1: QVq18C8a73aIQH-AcKRLMzpO3YQ.asa (hash: 2HTUzLpfDHOgyVFMt6dJ4aJ9WtaWtmAe0f3l6ljlAeU=)
2: RI63RgCeGCwI7YT4F30ACKZIWD0.crl (hash: phS4/D1PyBFILAxVT1x5y2cgZadBxS3GpmQ63VR/2ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:72:ae:08:b8:b5:d4:ef:d1:d1:12:5e:d8:14:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
Validity
Not Before: Oct 27 23:00:59 2026 GMT
Not After : Oct 28 23:00:59 2026 GMT
Subject: CN=d53ae471aa16f2c6467f0f9ee70be502cad258b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:05:cb:98:aa:6d:77:38:a4:78:94:43:13:
68:2f:32:d9:ac:44:2b:85:f3:ca:67:92:8e:98:a1:
07:89:9c:a6:cc:8f:6a:06:5e:ca:5c:d2:dd:3a:3c:
3e:00:e1:6f:bf:f5:8c:bc:fd:88:8e:8c:a5:be:ff:
6f:1d:ab:82:39:2b:39:50:69:49:4b:a6:c8:f4:1c:
fd:f7:70:82:3f:9d:2a:89:e6:e6:65:10:fb:e4:5f:
cb:89:bf:8a:fa:b0:e2:08:20:02:c3:75:c4:90:64:
4f:00:6d:ae:3b:a9:fd:be:4c:06:69:55:65:76:33:
16:f7:62:2e:2a:ac:1b:8a:33:93:b4:b1:27:ea:03:
0a:cb:c7:02:59:35:54:40:d5:67:1e:ec:90:c5:44:
1e:c3:12:f5:c0:91:cc:21:97:c5:0b:be:36:97:1c:
8f:32:94:9f:7c:37:ff:5b:07:33:c1:73:07:44:c7:
e2:46:84:3c:79:54:4e:88:28:2c:34:32:47:0a:c8:
d2:b3:6c:07:bf:a2:e8:8c:dc:ce:c7:1a:bc:93:1d:
04:42:68:55:36:3b:33:51:2c:84:ab:4e:ab:3d:13:
a8:3a:1f:aa:ee:fe:b9:8f:6e:1e:3a:27:a1:fb:f5:
fe:79:87:29:11:19:0b:3b:23:6f:a3:99:d8:9f:e2:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3A:E4:71:AA:16:F2:C6:46:7F:0F:9E:E7:0B:E5:02:CA:D2:58:B7
X509v3 Authority Key Identifier:
keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:22:a2:b2:40:f2:7f:3c:6c:40:0d:bb:10:cd:36:15:44:46:
c2:a8:75:15:a4:be:07:eb:4a:87:8d:e1:03:6d:69:7c:27:41:
08:03:69:a7:86:01:d3:d2:2d:55:d6:df:93:13:a3:ad:9f:bf:
65:dc:76:87:1b:11:c2:3d:cd:9b:e1:1c:9e:3b:fa:dc:7b:13:
7a:2e:01:59:53:ae:e6:4f:78:c3:7c:e7:bb:2c:e3:c8:c3:0b:
84:62:dd:9a:7a:8f:18:0e:1a:90:8b:80:e4:bf:bd:c6:0f:5a:
ea:45:71:c0:cd:0a:c5:1c:36:f9:71:03:3b:b9:88:22:c3:1a:
c5:9f:11:f8:c9:ee:bf:04:2d:7a:d4:92:c9:90:69:e0:dd:fc:
8f:dc:81:36:ce:94:e9:2c:c7:8b:20:10:3a:05:9d:13:f8:0b:
7e:c2:ec:df:5a:c4:7c:d9:25:d9:7a:93:05:c5:86:07:4a:f9:
17:d9:0d:3c:3b:c4:5c:6f:d1:79:e4:54:80:ec:5c:3e:2d:7c:
b5:9e:55:30:94:6a:5c:9c:ac:b5:3e:23:30:96:8e:9f:18:c8:
10:ce:47:32:47:ba:2d:7e:28:2a:d7:f9:f9:bf:86:8a:19:fa:
3d:3f:13:6d:73:80:88:c1:4c:74:61:c5:46:e4:6b:50:75:fa:
4f:13:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:38 2026 by rpki-client