Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: d8LMwl5FzVlpy5wV7AfCQOy/sW+WP5LDCMJ/P+vn09U=
Subject key identifier: BD:2F:17:27:66:2F:9D:63:2F:53:CF:C7:E9:E6:24:7C:94:C1:93:75
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 01A17E85C1979A2E158307CC48420534A35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 1A59
Signing time: Tue 27 Oct 2026 18:00:57 +0000
Manifest this update: Tue 27 Oct 2026 18:00:57 +0000
Manifest next update: Wed 28 Oct 2026 18:00:57 +0000
Files and hashes: 1: ZMUCUaol16FS16uvGYc5LMi3mms.roa (hash: 1PMSBIos5jL1U1+prZU3noEZyRlQ7CsZEb3CRHH/Kmg=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: ZlVNk/ZkCLQUhS8EbbJbvn8si/dwhf+a9H/aOdvHbFE=)
3: tTSdWCx25FCn0IY4HobZWct52gk.roa (hash: fHmHb3pigGy4UNI0P79QY+ZoI7ILqOgBSDwz0m8aRvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:c1:97:9a:2e:15:83:07:cc:48:42:05:34:a3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Oct 27 18:00:57 2026 GMT
Not After : Oct 28 18:00:57 2026 GMT
Subject: CN=bd2f1727662f9d632f53cfc7e9e6247c94c19375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:f4:89:57:00:f8:09:5f:e4:f7:0b:8d:68:
df:2e:66:45:fb:21:98:c1:37:95:9c:5d:fe:e7:30:
d9:df:41:e4:b2:1a:6b:db:0c:48:af:c4:3f:a2:ac:
75:7a:47:d6:38:c0:51:32:3a:d3:9b:97:3b:e8:dc:
7d:1d:c1:75:ae:06:92:81:b0:16:50:57:c0:25:48:
b7:d8:eb:e9:95:01:d8:0e:95:62:e7:d7:ec:10:e4:
69:65:3f:aa:ad:9b:a2:6f:e0:57:f7:37:fe:8e:ad:
0e:ba:cc:1d:1f:58:7f:38:11:7a:b0:73:f6:6f:db:
1a:e2:c6:c1:b6:f7:25:2b:df:b8:11:35:92:2a:04:
4a:b7:46:fb:3a:4f:27:c9:e0:41:ad:b6:c4:36:25:
b7:3b:4d:e8:5a:6e:75:8e:cc:18:84:cc:ee:cd:5d:
7a:cd:95:29:b0:4b:1d:69:21:3b:fd:91:9c:e1:ca:
5f:2c:8e:29:d4:c5:af:56:27:92:32:f9:24:06:08:
2a:f9:63:3e:61:c8:13:12:59:62:4e:03:c7:2e:41:
2f:f5:ef:ab:5c:2a:74:28:a9:5c:81:d2:4e:75:d3:
85:05:38:16:48:b3:55:f4:9f:0e:88:51:d9:b4:3b:
0d:66:8f:28:c3:19:b7:d1:2a:ac:b4:28:0f:00:87:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2F:17:27:66:2F:9D:63:2F:53:CF:C7:E9:E6:24:7C:94:C1:93:75
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5e:ea:01:31:62:cb:04:68:33:7a:b9:c5:8c:ea:ef:9a:3c:
16:b2:f3:82:e1:ea:c9:bc:ad:4e:18:83:78:44:6c:67:f3:e8:
90:5b:b8:db:83:c8:70:0f:b0:65:d3:4e:91:44:2b:7d:96:dd:
0d:5a:2b:7f:f0:98:0c:d6:f7:8c:e9:a2:87:45:33:75:0e:42:
bb:41:54:95:7f:ba:63:01:3d:fa:54:c5:2e:85:8a:ba:b9:4b:
5f:30:f2:e3:9d:71:8b:c3:ad:36:c0:97:09:4f:ee:e0:ee:fd:
ce:0b:93:9e:e6:51:c1:b6:90:e7:c0:94:bd:58:cb:eb:65:8e:
38:13:ba:74:1e:25:22:a7:37:f5:65:de:6f:e3:dd:a4:61:80:
75:c9:ff:39:47:41:ba:97:ec:8f:be:c9:ca:55:20:75:ce:29:
f4:15:5e:54:23:ee:af:ea:6f:67:28:70:d9:19:a8:a9:32:6e:
19:12:1e:8c:47:34:ac:03:78:6e:9b:4a:be:9d:a1:ed:28:e6:
c0:b0:cd:8e:2c:ac:44:e1:b5:54:83:70:ba:e0:39:ae:f2:7d:
d6:4e:55:b7:c6:a4:e1:99:d3:a0:5b:49:d5:a3:52:0c:fc:ec:
9e:4d:ca:64:b2:1c:2d:c7:60:25:70:e8:23:25:47:0c:8b:5c:
36:9f:70:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:46 2026 by rpki-client