Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier: AupFxAb20N8IKTdC3JPm8t1VcBZENd3afvhdpB7sTao=
Subject key identifier: B8:49:BC:59:99:7B:39:F2:30:14:69:A4:F7:40:76:02:BD:C7:74:C2
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial: 01A12955FBCFEF5E2D802E95E6FCA6FB677D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 05:01:03 +0000
Manifest this update: Sun 11 Oct 2026 05:01:03 +0000
Manifest next update: Mon 12 Oct 2026 05:01:03 +0000
Files and hashes: 1: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: raVt0ns55jPs0t5YnVx62wovHaqYGpuBUTgaxisP6Tk=)
2: cQbewkFEZ4acO97jlQJ5WKuKd7A.roa (hash: nw0VsiavZiymn/xF8CuU14khn+rz47RFDCWUotkUcgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:55:fb:cf:ef:5e:2d:80:2e:95:e6:fc:a6:fb:67:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Validity
Not Before: Oct 11 05:01:03 2026 GMT
Not After : Oct 12 05:01:03 2026 GMT
Subject: CN=b849bc59997b39f2301469a4f7407602bdc774c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:98:b6:59:da:47:97:4d:6a:05:4d:31:7f:
a1:6d:90:6b:96:80:62:fb:67:62:9d:0d:46:01:b6:
44:dc:4a:ae:79:00:fb:40:72:3d:60:0f:0d:98:f4:
2e:28:34:57:39:fc:0b:69:9e:28:5c:99:b5:3a:d6:
af:eb:97:42:70:68:4a:08:6c:13:53:38:00:f3:b7:
bd:09:91:a7:1f:b6:7f:70:5d:a4:03:05:21:3d:b7:
6c:cb:33:d7:ad:38:ba:37:e6:f6:05:ac:69:c6:ce:
dd:3c:a9:e2:98:d5:b2:03:96:a4:a0:18:bb:e6:d7:
80:61:18:99:81:59:fb:2e:0a:18:c1:b8:9a:3b:01:
4a:ef:2f:8e:42:0c:3c:f8:4a:ac:5d:82:22:67:34:
ac:a1:fa:ab:8e:e4:05:89:fc:da:0b:f8:55:f4:c9:
01:4f:04:15:7c:fd:20:5f:31:f4:10:f3:77:8c:19:
6c:89:f7:3f:81:cc:96:90:e7:9d:6a:8a:3f:62:07:
1c:d7:91:12:41:ae:52:27:0a:9b:91:95:0f:a5:64:
3c:1a:d1:ed:e2:a3:e8:e7:b0:42:38:27:52:68:2b:
70:0b:67:70:8e:3f:b3:4f:e8:15:86:4d:d8:09:67:
41:49:c9:db:c7:bf:a5:95:19:5c:1d:82:2b:eb:92:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:49:BC:59:99:7B:39:F2:30:14:69:A4:F7:40:76:02:BD:C7:74:C2
X509v3 Authority Key Identifier:
keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b0:f2:0d:23:aa:fb:da:20:7c:50:7b:a2:62:2b:f4:38:f7:
0b:84:8a:3c:eb:5a:8c:89:85:1a:e8:c7:56:03:88:6d:3c:19:
f7:fd:32:30:8c:81:c7:23:8f:72:03:55:d1:7e:20:18:30:bb:
50:e9:89:9f:bf:09:c1:13:a6:6b:68:fc:31:78:60:af:aa:94:
1c:f1:82:6f:9c:6f:b5:01:0c:16:ab:15:35:f2:09:f4:67:8c:
87:fc:20:d0:70:69:eb:6b:b6:78:81:42:81:f9:f7:1d:54:c4:
b7:76:32:1a:62:08:03:c7:e7:66:54:1c:55:90:14:55:96:bd:
02:f2:8c:05:83:cb:47:56:68:3d:b9:5a:ea:1b:b3:a3:05:16:
ec:9d:00:b8:6e:39:fb:a9:58:55:7d:4e:81:e4:2d:2d:4e:ca:
cb:44:ed:06:83:ae:11:ae:71:b4:ec:83:c4:d7:c8:44:4a:b4:
81:d5:f8:8c:f5:f8:82:98:63:c1:8e:42:f5:ec:1b:6f:3b:25:
a5:18:b6:48:f5:d9:83:36:74:19:ee:7e:a7:9b:e0:7c:b0:1b:
dd:5f:a0:4e:5c:7f:d1:95:44:86:8a:47:97:37:15:33:cb:a6:
f7:3e:e9:26:cb:36:bc:32:4a:43:8a:8b:87:08:19:45:65:15:
d5:bc:f6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:39:18 2026 by rpki-client