Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: j+DtaVx2GrVyx8rVOJQF5CYQ9C5Cf3tayyfaLVI+oMw=
Subject key identifier: 8F:9F:6E:B4:3E:2D:81:29:2D:0C:92:EA:98:66:38:4E:C9:DF:23:87
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 01A182D0C6E2AE2473998A6F3455D50B9533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 1AD8
Signing time: Wed 28 Oct 2026 14:01:22 +0000
Manifest this update: Wed 28 Oct 2026 14:01:22 +0000
Manifest next update: Thu 29 Oct 2026 14:01:22 +0000
Files and hashes: 1: 0tjlFCD9R3QvhuaUb8R98x3yaAA.roa (hash: QW/Cv+tz1AwpdParcrVZ17Ri4asuS8geM/KpLVI71iU=)
2: RYe-A-tcBgsvnTviE-ENg27AeMY.roa (hash: BIG9Ev2/ZDOm8EsC2U3aW/Qd5R8vFaAuiSgknEWjyDA=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: HltHznDz5ibexGR6PrCrjcppDFRaZQG4tEGwKFWfW/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:c6:e2:ae:24:73:99:8a:6f:34:55:d5:0b:95:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Oct 28 14:01:22 2026 GMT
Not After : Oct 29 14:01:22 2026 GMT
Subject: CN=8f9f6eb43e2d81292d0c92ea9866384ec9df2387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:a6:23:71:62:2f:12:ea:10:ef:e5:78:2f:
e5:78:02:68:60:9b:73:8b:7f:43:5c:3b:39:e9:77:
46:6d:d2:9d:a4:7c:b5:9a:45:60:fe:ee:26:cc:7a:
87:aa:1b:68:73:50:fa:d3:f6:f9:27:e9:fe:e1:10:
ec:c7:6e:64:7a:45:71:12:3d:6f:8a:6f:6e:f4:9e:
b2:f3:1d:ee:8c:45:c1:e8:db:e2:9c:ce:40:30:75:
09:5b:d3:92:b0:a0:b3:37:a7:b8:80:f7:21:4a:94:
39:58:1a:b7:bf:db:e6:5c:19:1c:f0:a7:f7:5f:33:
22:06:c7:8a:0a:00:39:25:02:5b:e3:21:48:da:36:
c0:69:92:0e:e1:53:72:49:77:47:9d:a5:de:cf:54:
75:ec:8f:04:ae:3b:f6:a9:0a:62:1e:5c:f4:bd:61:
33:f2:57:5c:19:7b:48:fe:6f:6b:46:1e:9c:ed:f8:
85:2b:c1:74:0c:d1:49:95:dd:8d:16:9a:53:44:78:
54:da:fc:b3:54:29:45:6c:42:58:3e:3d:04:90:2b:
ee:ba:5d:47:c9:ee:0b:e4:32:dc:31:67:88:dd:7e:
99:ef:86:e6:83:e9:7a:03:32:a0:6f:8e:55:c9:ba:
20:2a:09:45:98:77:89:79:0f:5f:3c:94:4d:60:35:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9F:6E:B4:3E:2D:81:29:2D:0C:92:EA:98:66:38:4E:C9:DF:23:87
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7a:6a:62:23:db:8e:15:97:de:10:5b:03:ea:af:8e:b2:af:
ab:14:e9:8b:e0:a9:6b:25:28:27:f8:8a:aa:6e:8d:60:c0:75:
8b:18:22:fb:19:bb:05:79:47:a3:c5:21:49:b4:e7:b5:ba:9f:
29:ba:dc:8b:15:e5:0c:93:cc:87:8d:60:3a:78:75:32:b2:23:
fd:d8:00:e9:d9:d5:d1:cc:2a:18:9a:06:4e:ac:58:df:f6:e6:
00:95:e6:14:3d:3c:6e:24:e7:1b:08:e2:ec:cf:31:ca:a9:08:
47:3f:36:bf:e6:86:dc:62:15:fd:83:ed:5e:39:6a:c1:73:2b:
53:a2:01:c6:07:e1:0d:ae:af:38:1a:88:30:f8:91:1f:01:13:
93:50:6b:a3:08:85:44:5c:6a:24:0a:03:bd:52:3d:9e:42:e5:
e9:75:67:80:9c:89:d1:1a:45:d6:bd:00:71:e7:63:18:0b:fe:
fb:43:69:fc:17:eb:50:86:e8:64:d1:fe:df:ab:2a:07:70:e0:
a6:b7:6d:82:51:57:46:6b:43:af:c0:91:e2:20:6a:94:08:28:
a4:20:7d:a2:c6:a9:10:ea:b1:6a:c6:32:1f:34:77:a2:40:e8:
d1:c1:c2:9c:69:44:b6:b7:01:04:0e:bd:3e:a0:ab:c4:c8:45:
94:f4:1e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:46:18 2026 by rpki-client