Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
File: anKTCVpV8Nd-JRZOfXS3qKI530c.mft (raw, json)
Hash identifier: UJPg+h1muIQTQ1HxA7NCkqz8w0Q0NsxJWVLLpByIMV8=
Subject key identifier: 10:11:B8:54:2F:7D:35:D4:92:A6:5A:81:2A:2C:F1:EB:39:CA:89:ED
Authority key identifier: 6A:72:93:09:5A:55:F0:D7:7E:25:16:4E:7D:74:B7:A8:A2:39:DF:47
Certificate issuer: /CN=6a7293095a55f0d77e25164e7d74b7a8a239df47
Certificate serial: 01A0CF6CE360B73740DB7F48E03739F2E189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anKTCVpV8Nd-JRZOfXS3qKI530c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
Manifest number: 2E
Signing time: Wed 23 Sep 2026 18:00:14 +0000
Manifest this update: Wed 23 Sep 2026 18:00:14 +0000
Manifest next update: Thu 24 Sep 2026 18:00:14 +0000
Files and hashes: 1: 1-eOJkO9YL4xZg--gf6qwumHEDtk.roa (hash: GR80Sq/bTbd5unKoNza5U5i+PbZ/S05QHDYglZZW7qo=)
2: 4asxyyWddWEKpcZjuR_8NaNYv7c.roa (hash: SpZcARQwDiAhzirfuI9PBLqIEmPOzdCFIvD8FEKL3W0=)
3: anKTCVpV8Nd-JRZOfXS3qKI530c.crl (hash: KT/RfBCCu0jy1h1LvP2SQW/3RC14Pm4VSNBfC+P6nIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
rsync://rpki.ripe.net/repository/DEFAULT/anKTCVpV8Nd-JRZOfXS3qKI530c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:e3:60:b7:37:40:db:7f:48:e0:37:39:f2:e1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7293095a55f0d77e25164e7d74b7a8a239df47
Validity
Not Before: Sep 23 18:00:14 2026 GMT
Not After : Sep 24 18:00:14 2026 GMT
Subject: CN=1011b8542f7d35d492a65a812a2cf1eb39ca89ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:c1:ae:f8:68:20:4a:21:0f:98:20:6e:12:
66:23:f3:06:67:f8:ea:43:28:90:4c:e3:2b:39:35:
58:c5:7d:b6:05:81:42:7d:90:61:cd:1f:8a:c6:4a:
d3:89:e6:15:87:60:b8:b2:ed:f9:d6:61:89:b9:2c:
fb:e4:17:81:cf:36:89:cd:60:e5:95:98:1f:93:a2:
b5:2f:13:7b:a5:96:e8:d6:f8:02:c1:f3:7c:5e:f4:
04:f8:6d:ee:35:f2:f4:7b:6e:00:cb:5e:f0:fe:8f:
c4:4b:15:2d:03:2e:ea:f2:7f:24:fe:d1:a0:05:f8:
4e:4b:72:36:c4:a3:c4:e2:10:48:af:49:e1:92:4a:
bf:ed:d3:1a:bc:99:d1:12:b9:2b:a7:76:9e:84:26:
5d:d2:24:d3:fb:10:30:88:79:3d:33:c5:a0:27:25:
06:0d:4a:66:03:78:da:16:a0:22:fb:8f:14:62:5d:
cb:81:79:3e:6f:87:4f:aa:24:05:c5:fe:67:6e:98:
e1:a7:8f:b2:eb:f5:7b:1d:32:fe:e9:43:21:58:41:
1d:be:f7:9d:36:97:72:8b:c4:67:af:19:aa:1e:39:
a2:7c:8f:9f:83:af:c1:e8:23:49:53:00:ef:6a:6a:
b4:a3:50:aa:21:41:19:93:a2:f2:da:1a:47:57:f0:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:11:B8:54:2F:7D:35:D4:92:A6:5A:81:2A:2C:F1:EB:39:CA:89:ED
X509v3 Authority Key Identifier:
keyid:6A:72:93:09:5A:55:F0:D7:7E:25:16:4E:7D:74:B7:A8:A2:39:DF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anKTCVpV8Nd-JRZOfXS3qKI530c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:42:44:93:12:40:cc:bb:38:c0:20:00:7e:cb:4d:da:3e:4b:
48:64:67:3a:c3:08:9c:8d:7f:45:57:e1:66:d2:7d:61:8a:12:
ed:04:eb:50:ea:a9:8e:25:da:71:e5:cf:98:16:35:e5:d7:3b:
9b:78:c1:76:2d:51:76:d5:cc:c1:ec:ba:cd:6a:d5:92:fe:61:
98:e4:06:e9:e9:5d:56:d2:19:34:7b:f9:73:65:4b:1f:01:af:
ee:df:16:74:62:ef:40:20:d0:a0:8e:b8:a4:45:5e:57:4c:f7:
37:53:7e:50:90:1d:90:d3:a0:2e:06:99:09:1b:8e:2b:71:87:
db:74:0b:cd:45:21:99:ac:4b:28:ce:8a:97:78:13:04:d9:4d:
ac:03:3a:7f:eb:03:dd:ea:3b:9b:12:97:2a:d4:76:ec:a5:a1:
c5:f8:24:fc:6f:0d:0d:08:03:72:64:b0:7a:6e:54:17:12:bb:
69:16:8c:f0:25:c1:f7:d3:f8:15:31:c7:a2:12:2a:0e:aa:ae:
dc:e6:a0:74:75:6e:b0:60:2e:c4:37:7c:d9:3d:61:3f:4d:8c:
2c:99:65:fc:9b:77:f8:ec:3f:d3:8d:de:a3:cf:83:d3:b8:46:
fe:44:0c:ef:4a:20:f3:3e:0f:77:b7:43:14:7c:06:a8:1c:ef:
49:84:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:11:56 2026 by rpki-client