Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: TGpbvmuFevrVdJ9ThYHljV253/V+8kR634EIJXIDsRc=
Subject key identifier: 35:AC:A3:27:AE:05:95:88:0B:96:65:AC:1C:DD:D6:17:BF:7D:47:5E
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 01A0D64C4F40D79475FA529EE116CF0C415D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 02:02:00 +0000
Manifest this update: Fri 25 Sep 2026 02:02:00 +0000
Manifest next update: Sat 26 Sep 2026 02:02:00 +0000
Files and hashes: 1: Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa (hash: QbDgZoN3ZU6/bS/m4FLoXm7lSijDZPcbyRN3YX/mppU=)
2: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: EOKl2WU6tvJz3WfPWSskJFaTzDIYAzxQrKtVPVOLfxk=)
3: hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa (hash: ZhalI/LOgKiAuv67zXxSUEKRpEQkU7//oKdzXd9ydyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:4f:40:d7:94:75:fa:52:9e:e1:16:cf:0c:41:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Sep 25 02:02:00 2026 GMT
Not After : Sep 26 02:02:00 2026 GMT
Subject: CN=35aca327ae0595880b9665ac1cddd617bf7d475e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:c9:74:06:36:af:55:e9:3e:1d:73:4d:91:
27:db:3b:1e:5d:d3:74:83:62:63:e6:77:9f:41:bd:
d3:b5:9f:8f:62:0e:31:05:c7:79:95:88:ff:96:7a:
f1:e1:fd:1f:79:9a:b8:3b:72:e6:aa:55:a1:08:f7:
9c:3a:7e:72:8c:6d:b7:ad:ef:6b:9d:91:ee:25:58:
65:b2:7d:22:e2:88:89:dd:fa:1b:41:b5:cb:95:80:
59:2b:f0:4e:78:c5:b0:83:65:d0:64:ad:03:bf:c9:
1c:ad:56:0e:c0:29:48:5a:01:02:6e:b5:ad:25:4f:
58:f3:99:1a:03:3b:62:61:d3:02:3a:85:1a:10:f9:
6e:6f:26:62:16:a5:07:86:11:cb:f7:1b:10:35:80:
fb:5a:55:f7:02:c9:2a:b6:6a:34:f4:4b:b1:2f:78:
e8:ca:7f:c7:da:b5:8e:88:60:44:cd:8e:12:b1:6c:
e9:51:0e:b1:66:cc:95:e2:a4:25:4b:09:7c:f3:2e:
89:c4:97:de:18:da:bc:da:c8:80:7a:9c:90:36:de:
db:51:81:b6:2d:10:dc:98:d0:69:be:45:e6:2a:8f:
8c:e8:15:f7:c4:e2:1b:a2:b2:b6:ae:4a:77:d0:5b:
2a:91:07:2d:88:7c:41:47:4c:6c:05:a4:38:14:c3:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AC:A3:27:AE:05:95:88:0B:96:65:AC:1C:DD:D6:17:BF:7D:47:5E
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:78:ad:62:32:62:59:93:92:f2:18:51:18:0f:ab:62:8a:e1:
58:40:bc:5d:db:58:51:c9:bb:74:25:c0:d3:23:7a:c1:4a:fa:
e7:4c:b9:03:e3:e8:fb:ab:8a:7c:93:b3:c2:32:fd:9e:84:c8:
89:98:8f:f3:d3:a0:b6:c4:7c:b1:0d:32:68:7d:0b:b8:61:2c:
f6:a0:51:ef:93:23:e0:4b:0d:8e:f8:29:8b:f1:d1:d7:9c:8e:
4d:72:70:d1:02:3c:00:13:96:47:f4:09:6c:50:86:20:f6:27:
2c:ff:8b:0f:fa:3d:e1:ee:f5:1e:29:6e:d1:7c:62:13:d3:6e:
e6:4f:df:d8:00:27:b8:35:08:64:ce:76:cf:05:ca:95:46:e2:
da:19:90:4a:65:f4:9f:89:06:5e:46:b6:88:74:a5:5d:8f:16:
ad:77:68:6d:56:9a:20:da:97:2d:4c:63:bc:f0:0b:19:de:15:
d2:87:05:25:02:12:41:85:d1:a4:98:39:db:4a:0a:bc:b8:92:
e6:be:c1:36:72:7a:3f:09:a3:08:85:49:23:e0:b3:93:4d:15:
e2:c3:92:f7:14:11:be:8d:4f:f7:09:3d:28:29:98:96:27:93:
77:67:3b:53:ae:f1:98:ec:cf:23:d0:fc:6c:3b:8a:01:fe:fb:
5a:05:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:50:58 2026 by rpki-client