Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
File: rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft (raw, json)
Hash identifier: 9lMfxmP62kSfxbCdnGAWdHTBN97Aeki5gmRTywpGA7E=
Subject key identifier: 6D:38:84:44:78:80:CA:95:53:34:0F:20:B7:81:C8:8A:86:62:DE:37
Authority key identifier: AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
Certificate issuer: /CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Certificate serial: 01A0E174222027AD424F9CD7E3D4F73E7BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
Manifest number: 0202
Signing time: Sun 27 Sep 2026 06:01:19 +0000
Manifest this update: Sun 27 Sep 2026 06:01:19 +0000
Manifest next update: Mon 28 Sep 2026 06:01:19 +0000
Files and hashes: 1: rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl (hash: 0dFxkZi57NYCyyYN1iVeTClVYco1DAEWG5g2zRqufCg=)
2: rcclP2fW2M9d6FzhFGpcIug6Slw.roa (hash: Ah4o3LwYLB7WSaBBzcrCq3rn0s5Unn57tKa0V6nN2u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:22:20:27:ad:42:4f:9c:d7:e3:d4:f7:3e:7b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Validity
Not Before: Sep 27 06:01:19 2026 GMT
Not After : Sep 28 06:01:19 2026 GMT
Subject: CN=6d3884447880ca9553340f20b781c88a8662de37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:eb:f2:7f:2d:32:be:99:e6:91:b8:8d:b6:
a2:1a:15:50:7c:bb:c4:b5:a0:3f:f8:a8:47:bd:ca:
3b:12:90:ad:0a:10:4e:52:9e:a5:55:54:61:ef:e1:
a6:96:ff:d3:1c:ad:54:bb:5e:63:f9:87:b9:d8:63:
d5:6c:1a:a7:07:d4:fa:61:6c:71:2a:b3:7b:5c:63:
24:95:d5:a7:b7:96:7b:d0:b8:71:50:72:72:4e:3f:
e8:a2:63:28:c4:a0:46:99:ea:59:87:cf:48:eb:b0:
63:fe:95:35:79:34:06:f8:4b:55:2e:39:62:2f:6b:
35:b8:29:d2:63:df:18:be:d0:c9:84:7f:32:b9:c2:
d1:60:83:46:a6:25:2b:b9:b6:12:38:91:bc:e8:0d:
6f:71:7a:9b:fb:b3:17:d1:98:22:d2:97:2a:51:b5:
71:e1:c2:bb:05:48:4a:8c:ea:cb:c0:fe:5b:d1:03:
d9:2c:9d:8d:9a:a6:27:4f:15:3b:19:eb:e2:54:23:
f5:4b:39:45:b2:54:f7:68:cc:bc:97:5d:82:6a:c2:
84:b3:ca:55:c2:09:84:31:38:c5:63:15:e5:9d:a4:
7a:dd:7b:0c:97:c4:8a:19:b4:f9:d0:73:16:19:10:
ad:09:90:13:c2:13:41:87:25:7d:a1:04:ba:dc:e0:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:38:84:44:78:80:CA:95:53:34:0F:20:B7:81:C8:8A:86:62:DE:37
X509v3 Authority Key Identifier:
keyid:AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a1:5e:a3:7e:bf:cb:c2:db:dd:52:2e:35:d7:fc:af:00:95:
8b:fb:47:c2:b7:8a:ae:22:6a:c6:24:9b:29:8e:0e:24:cc:a9:
69:a9:84:77:79:12:f4:ac:72:84:f6:4f:ff:55:c0:a6:53:50:
2c:cc:14:6a:63:58:67:5a:ba:12:6a:61:c5:b8:b8:26:f7:38:
39:5a:ff:0b:2b:45:83:b5:6c:15:c0:87:23:fe:da:3c:c5:e9:
83:51:83:e7:92:f4:21:66:34:f1:10:fb:c9:05:6c:77:f3:f8:
b7:75:54:52:e4:4a:b0:19:e3:4a:0a:2f:06:5b:f5:b4:f9:d2:
21:2b:ee:fd:11:26:bf:2e:23:d9:89:93:bb:09:56:81:0d:43:
b2:db:e7:91:ff:5b:ca:d1:a6:ea:36:66:96:f3:10:fb:c0:01:
dd:05:6a:f6:f7:b0:11:d0:e5:42:28:d1:ea:ac:af:b5:a7:14:
30:b1:06:f4:ca:16:82:f2:e2:86:d9:da:15:c4:62:3a:4f:40:
de:7c:07:11:34:48:11:d7:62:cc:a4:d7:38:53:5e:ad:46:57:
a6:00:e3:68:db:d9:63:14:28:1e:ef:88:19:87:af:60:49:0f:
38:4b:b1:e9:ed:a0:d1:3e:e7:9c:ba:52:0a:e0:f6:0f:aa:a2:
d9:b6:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:03:00 2026 by rpki-client