Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
File: rDxbVWwAUfY7zKUE6u6YM20K6n0.mft (raw, json)
Hash identifier: /vswmLPJrhfRXThfDzfUhGL0uTJ+ijrqfHBik2xjTOE=
Subject key identifier: 34:01:90:AC:47:AA:35:9D:00:F7:10:2E:29:3E:E2:09:FC:D4:25:2A
Authority key identifier: AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
Certificate issuer: /CN=ac3c5b556c0051f63bcca504eaee98336d0aea7d
Certificate serial: 01A108138849EA7D0A933BCB4704AA3B2D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
Manifest number: 0102
Signing time: Sun 04 Oct 2026 18:00:59 +0000
Manifest this update: Sun 04 Oct 2026 18:00:59 +0000
Manifest next update: Mon 05 Oct 2026 18:00:59 +0000
Files and hashes: 1: 8meTSesX-bzpkzyvx9ELA1ZiM5Y.roa (hash: wPyw7XGgTqagRr/B70qwK48d2umXqb3H9XJBsVrBmTU=)
2: rDxbVWwAUfY7zKUE6u6YM20K6n0.crl (hash: gYIgTBAGGxjGbNauze1JP0O5TPcvgPfYOBgM7PvM3IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:13:88:49:ea:7d:0a:93:3b:cb:47:04:aa:3b:2d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3c5b556c0051f63bcca504eaee98336d0aea7d
Validity
Not Before: Oct 4 18:00:59 2026 GMT
Not After : Oct 5 18:00:59 2026 GMT
Subject: CN=340190ac47aa359d00f7102e293ee209fcd4252a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:c1:df:4e:d1:19:f1:06:04:79:35:04:78:
e5:a1:76:cb:97:02:52:13:d6:32:78:f9:96:a3:3a:
bc:a7:51:49:d5:b9:db:30:b9:dd:4d:53:c6:31:a2:
a2:ad:c2:f1:6f:72:3c:1e:37:46:c1:da:aa:d4:09:
56:d4:db:6e:c2:47:7b:78:ab:8a:48:08:62:e7:18:
ea:50:72:bd:c1:db:86:1e:1d:7c:a2:63:cb:29:bd:
7e:73:80:f2:73:9d:0e:69:8a:fa:df:94:c2:03:77:
4f:c0:68:d8:39:61:22:62:c4:9c:87:1c:af:19:19:
11:d6:af:4b:80:f1:1d:12:ff:8e:db:1d:0f:7c:f3:
9a:fa:2c:86:ba:9a:ae:c5:1d:b8:43:75:f5:84:ed:
aa:3e:e8:e7:73:4d:35:d7:d4:3b:4d:78:55:73:e6:
43:90:f3:7b:82:36:c2:f7:c9:b8:14:2f:75:c0:cc:
e2:92:67:bd:7c:6d:83:75:4d:af:b0:75:43:e7:84:
94:de:c7:ab:a9:2a:a8:bf:8c:3c:a3:be:61:79:6a:
9c:53:a9:44:74:2e:69:83:f1:be:99:6f:dd:33:07:
d9:94:2d:4b:a5:7c:81:ab:6e:dd:45:1f:7e:3f:e0:
ae:78:9c:e3:99:70:71:00:c0:a4:8b:69:36:5a:9c:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:01:90:AC:47:AA:35:9D:00:F7:10:2E:29:3E:E2:09:FC:D4:25:2A
X509v3 Authority Key Identifier:
keyid:AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6d:8b:f0:a9:2e:23:98:1b:d8:55:ac:5b:10:fa:bb:45:d6:
09:1b:52:bd:ea:4e:5a:77:0c:64:ab:13:d9:d3:96:7a:a2:e6:
a6:74:5a:fd:8a:c8:62:bf:fc:3a:8e:87:31:ad:da:3e:0d:8c:
b7:10:7d:5a:7c:26:5a:c9:57:24:61:15:34:31:c9:b6:74:5a:
0d:f2:1b:90:98:73:d9:ec:4f:61:87:c7:89:b8:5f:85:e4:16:
bf:f3:5a:7b:2e:fd:9e:2b:07:a8:62:60:8f:3e:53:6b:d4:70:
e4:74:7c:83:60:6a:60:cc:3f:2a:a9:80:73:c2:40:1f:7e:27:
e0:e2:9a:44:3c:c8:80:cf:ac:59:5a:b2:f5:cf:32:a3:a8:2f:
3e:95:27:98:c6:cc:4e:04:bd:8c:f3:1e:1d:4a:f1:65:b2:b2:
88:0e:d9:fe:7b:b5:03:ba:60:4a:22:f6:8b:6f:92:46:cb:61:
09:d6:4f:33:ee:e0:c2:44:76:23:f5:82:e8:db:72:df:c3:74:
b1:83:be:d0:74:30:f7:94:0d:11:12:48:ef:77:41:ec:77:ae:
2e:2e:4b:4e:47:41:91:84:9e:77:fb:f8:1e:85:4c:cb:2a:e6:
92:0d:2c:82:9a:c2:e9:d4:3b:78:8b:37:3f:1e:a6:b8:47:55:
0a:1d:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:54:00 2026 by rpki-client