Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
File: rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft (raw, json)
Hash identifier: f4s8LuXN7xzUEaoswykFYiBChKH7xHmp5Jy3IbTgiv4=
Subject key identifier: 30:D1:A6:E3:9A:A0:33:66:8C:83:1F:3E:FF:5E:DA:93:4E:70:B7:95
Authority key identifier: AC:C6:E6:DF:87:D9:99:6C:5A:23:57:40:EC:5E:43:AF:D2:DE:D8:F4
Certificate issuer: /CN=acc6e6df87d9996c5a235740ec5e43afd2ded8f4
Certificate serial: 01A1249D7478FC32F8FF395A8F6C2239117B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
Manifest number: D2
Signing time: Sat 10 Oct 2026 07:01:00 +0000
Manifest this update: Sat 10 Oct 2026 07:01:00 +0000
Manifest next update: Sun 11 Oct 2026 07:01:00 +0000
Files and hashes: 1: QSWjo5_DxLn3VxAudtaPC2FnwM0.roa (hash: 1mFyEckr7ZMS8v3pxO2ED4j5izEiaVLcu9avDOseeO0=)
2: rMbm34fZmWxaI1dA7F5Dr9Le2PQ.crl (hash: GrR4/sg0FUB5c7AW3bBLvBlDkWsrkVDGc+ozcXYPkDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:74:78:fc:32:f8:ff:39:5a:8f:6c:22:39:11:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc6e6df87d9996c5a235740ec5e43afd2ded8f4
Validity
Not Before: Oct 10 07:01:00 2026 GMT
Not After : Oct 11 07:01:00 2026 GMT
Subject: CN=30d1a6e39aa033668c831f3eff5eda934e70b795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:f9:08:50:55:b2:c0:6e:d5:e7:c6:f7:c0:
a2:a8:6b:b8:79:c9:35:a1:0a:75:c0:04:3d:f2:83:
3f:92:25:bb:fd:6a:bb:9f:d7:fb:20:5e:59:eb:5c:
b1:05:ab:b2:63:43:7b:9c:2a:bb:d6:7e:cd:43:f2:
8b:46:f5:f2:27:4d:d9:03:65:8d:8e:36:ea:33:16:
78:21:24:ee:8a:19:93:e6:f9:e2:9f:d5:28:f3:52:
0d:79:6d:1a:30:43:1e:7a:eb:67:d3:a7:65:26:33:
46:f4:61:4c:a6:c7:1e:dd:b4:5a:ed:bd:d0:19:9e:
f1:e4:7c:1a:31:c0:29:39:13:1f:2c:75:aa:8e:eb:
92:7d:72:af:64:08:a6:96:8c:42:51:bb:90:da:41:
98:14:8c:bd:19:4c:06:9e:bb:17:86:20:ee:34:69:
3a:cf:0b:f3:1a:aa:cb:9f:0b:23:83:65:b8:bf:6a:
44:42:15:89:0f:ad:ae:32:d3:8c:e3:ad:6b:08:2f:
e0:52:99:08:8c:9f:10:56:1a:a3:a7:7e:b1:83:15:
9f:cc:c6:cd:f3:35:aa:1c:2a:00:91:bc:c0:e9:77:
26:2f:0a:29:8f:6d:c4:38:81:9f:32:25:bb:53:7a:
b7:99:23:3b:a2:30:05:bd:59:1d:ad:ae:d8:de:e3:
23:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D1:A6:E3:9A:A0:33:66:8C:83:1F:3E:FF:5E:DA:93:4E:70:B7:95
X509v3 Authority Key Identifier:
keyid:AC:C6:E6:DF:87:D9:99:6C:5A:23:57:40:EC:5E:43:AF:D2:DE:D8:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f6:cf:75:0a:0d:65:70:ce:7f:33:a2:80:2c:09:5e:98:ad:
e7:03:87:57:9a:dd:a9:e7:dd:04:3f:81:6a:27:82:16:dd:a2:
ae:c4:8c:a8:e9:56:0f:c0:58:b1:75:45:9c:0a:51:80:6c:9c:
44:81:66:57:20:d7:06:cd:9f:b5:0d:6d:6e:55:77:fb:76:a3:
8f:18:d1:30:4d:36:36:bb:a0:0f:66:82:c0:c0:09:71:e4:2b:
e5:49:74:af:2a:bd:57:dd:d8:86:71:58:96:25:d3:18:03:d7:
66:80:e7:73:14:16:4e:24:79:bd:1d:3c:11:3f:a1:2b:a2:1e:
3e:92:b5:4b:e3:9a:e6:f7:c9:4a:15:26:b0:fb:83:2b:b8:d8:
3a:2d:c4:ba:67:be:53:71:04:fd:cd:4f:3f:34:95:5b:a5:33:
0b:95:ab:27:bc:d1:b0:55:b0:01:ec:1f:92:18:0a:82:86:ab:
97:e2:af:59:2d:0c:56:ee:e1:e7:b9:81:01:0e:9a:95:3b:29:
9d:0e:0d:02:4d:44:0d:bf:b4:3b:76:67:fa:cb:04:f9:59:17:
e3:4e:9e:61:fe:0c:41:a4:11:4d:d5:bf:7b:ff:5c:38:83:df:
e5:06:a8:93:65:16:9d:e7:0f:13:95:08:5f:bd:50:c8:db:95:
03:95:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:07:32 2026 by rpki-client