Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
File: aDjbfmmRJ9pMHFpek_RPMCtihjs.mft (raw, json)
Hash identifier: 8mV1fiGMjgoO8LlPdwje8IQwVa0UpAmcXSRsMuTxfik=
Subject key identifier: 73:03:CD:44:57:24:DF:0C:43:B9:2E:49:BF:2E:6A:DA:65:96:EF:17
Authority key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
Certificate issuer: /CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Certificate serial: 01A1DFB9BC8D18558EAD053BBD6ACAA66461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 15:00:53 +0000
Manifest this update: Sun 15 Nov 2026 15:00:53 +0000
Manifest next update: Mon 16 Nov 2026 15:00:53 +0000
Files and hashes: 1: a1IDt2xomxWARvsJeU8MLNXS4IU.roa (hash: 426ydjesv20i56PFyO1tKmNiavKTm2qYefp1CVawqKM=)
2: aDjbfmmRJ9pMHFpek_RPMCtihjs.crl (hash: E4CoROGGTIGhrwg17vs7DHf32XmyYaK2+LV0RVJfLcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:b9:bc:8d:18:55:8e:ad:05:3b:bd:6a:ca:a6:64:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Validity
Not Before: Nov 15 15:00:53 2026 GMT
Not After : Nov 16 15:00:53 2026 GMT
Subject: CN=7303cd445724df0c43b92e49bf2e6ada6596ef17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:93:c3:77:cc:b8:21:91:e2:6b:77:52:b7:11:
86:34:08:6f:8a:44:0e:82:30:4e:87:b3:ed:c2:7a:
05:96:cd:49:65:1d:a3:99:11:00:6b:0f:66:62:d8:
fc:d3:bf:b6:a9:f2:f7:c1:5a:fe:bb:4b:48:1b:ef:
27:9c:a6:6b:63:ec:e3:0d:7d:f6:74:c2:8d:54:42:
30:5f:a0:42:1b:89:0d:6f:b9:27:0d:cb:ae:47:61:
04:70:3a:58:f1:7b:84:fc:98:ce:2a:80:17:fb:6d:
6f:c6:83:20:ed:6f:86:b2:16:c5:37:da:90:f2:ff:
2d:53:25:8a:7e:82:33:62:f8:1e:16:19:48:87:2e:
96:4c:ba:94:86:78:2d:d3:4f:08:42:95:7d:f3:a7:
0d:86:94:da:a4:37:31:b9:6b:72:dd:e1:4b:a4:2b:
ed:1b:b5:35:8a:5d:54:95:e3:e7:66:0e:49:0d:c8:
c3:86:51:fd:1a:2d:4f:8d:32:4e:4c:da:8f:1a:ab:
1c:69:a2:34:5b:a7:78:ae:a2:06:8a:de:65:de:d9:
67:1f:a4:24:45:ad:f2:56:21:0a:b4:3b:a7:e7:ea:
db:b1:52:63:65:3e:20:fd:39:29:6b:07:7b:2b:74:
a0:60:55:02:69:d8:a9:81:20:97:17:0d:7c:75:9c:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:03:CD:44:57:24:DF:0C:43:B9:2E:49:BF:2E:6A:DA:65:96:EF:17
X509v3 Authority Key Identifier:
keyid:68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:82:52:fc:5b:bb:96:aa:86:ba:f3:c2:92:cc:e4:1a:45:08:
99:77:f4:c5:67:46:c6:76:ef:28:57:d5:ac:8d:1b:44:91:e5:
2c:ca:4b:65:20:80:e8:b9:80:4a:1f:93:8b:cd:f6:04:00:ea:
46:46:2b:4e:89:76:14:a4:57:73:48:3f:52:58:91:19:24:21:
93:5e:75:d9:5c:a4:81:9e:15:db:fe:43:b8:0d:30:00:9e:ac:
f5:09:2f:d5:d5:bd:7c:d4:72:98:cf:1e:ae:29:ea:66:0a:27:
c8:2e:2d:49:07:ad:19:0f:35:0f:ce:05:75:2b:01:36:f1:51:
f9:e2:09:31:b5:9b:fa:42:a0:3c:21:ea:fb:5f:ce:20:c2:7d:
b3:cd:aa:f2:b4:b9:4a:4b:d9:8a:c3:2c:0f:d6:68:91:4f:33:
39:4d:74:3b:c4:77:62:11:c2:75:64:1d:82:e8:b5:39:58:9f:
36:ec:db:bc:36:41:4d:fc:0d:f1:ce:29:ce:c0:99:30:9c:59:
c3:f2:67:f6:1b:13:cd:93:45:37:2d:bf:2c:32:61:91:70:06:
39:f4:c5:57:7f:c7:88:54:4f:d4:26:66:03:c6:51:eb:9d:31:
1a:01:25:05:0f:41:55:98:28:40:a2:3d:b9:18:28:fc:81:3a:
de:b2:8c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:17:26 2026 by rpki-client