Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier: yGffWejvnfNiazs8aL4Ci2U1gKO0dl6odceTQbBgoLs=
Subject key identifier: 12:87:24:53:05:70:15:80:DA:87:01:2C:25:4A:B1:00:51:B5:7F:AC
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 01A12767CF5AC6D1478E021E8AD167A2CF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number: 140E
Signing time: Sat 10 Oct 2026 20:01:16 +0000
Manifest this update: Sat 10 Oct 2026 20:01:16 +0000
Manifest next update: Sun 11 Oct 2026 20:01:16 +0000
Files and hashes: 1: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: KwpNAUrYsOHB5YVk7cmO27L1TbjBL+gEFfqk2On9W4M=)
2: xbkHK9BjxqqWppD29--gfkSmovk.roa (hash: hkkQkmlB4qFZaOaawyBYcXjPEkqDqcjHyvxZakCPMVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:cf:5a:c6:d1:47:8e:02:1e:8a:d1:67:a2:cf:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Oct 10 20:01:16 2026 GMT
Not After : Oct 11 20:01:16 2026 GMT
Subject: CN=1287245305701580da87012c254ab10051b57fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:d7:9d:4b:85:59:5f:5b:b7:83:fd:b4:cb:
4a:10:58:8f:bd:10:19:09:2d:63:7b:13:86:20:ab:
76:60:0b:c6:e7:b0:39:31:08:02:53:0b:ef:6c:4a:
f6:ca:da:a9:74:8c:30:41:74:98:76:13:4e:99:e1:
43:2d:83:37:6d:2f:3f:63:f0:9c:e2:b0:30:ab:d8:
82:6c:36:49:6e:70:ec:57:71:0e:4c:47:b1:83:32:
49:6f:a9:c1:8e:55:de:44:40:36:28:77:81:28:81:
2c:f8:b2:73:29:0d:8f:7a:c7:8a:55:95:c7:79:71:
36:e1:09:40:d6:91:be:52:e0:f6:30:ef:5f:ab:1d:
05:22:af:6e:ea:60:3e:c6:13:cb:2d:14:55:38:a9:
08:d1:e7:db:53:e9:df:59:6e:61:71:ef:b1:6a:c0:
f8:50:39:9e:5c:6e:e1:47:d1:4d:b5:18:8a:95:02:
75:40:8f:1c:31:b3:7d:fd:de:90:f6:63:9d:2d:2c:
67:29:bb:2b:dd:58:a1:09:56:3c:26:65:f4:9c:44:
3e:f5:d6:f7:6e:b5:72:48:1e:64:45:b3:11:db:cf:
21:83:15:59:0d:0b:0d:2f:c7:e1:0d:27:07:d5:c1:
47:ba:6c:53:35:bf:36:5d:22:00:2a:d9:ec:29:b1:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:24:53:05:70:15:80:DA:87:01:2C:25:4A:B1:00:51:B5:7F:AC
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:74:2a:da:df:02:f0:5c:38:c1:d1:90:7e:89:f0:47:13:fe:
18:6c:48:ea:6c:b9:81:db:02:12:9b:ae:29:66:3e:7c:58:d8:
01:0d:2b:e4:fb:60:bd:6f:46:8e:51:d9:de:09:9e:bd:e6:ea:
bb:0b:dd:aa:e3:0e:35:58:3d:52:05:d0:4d:e9:cf:c3:b6:2e:
25:c7:fb:7f:7f:4e:37:a2:11:b8:13:13:7a:17:4e:36:3d:b8:
61:20:44:a4:0d:f7:c8:f8:34:80:58:07:d8:7c:85:69:8a:41:
48:80:b6:93:c3:c9:0d:86:1e:de:b3:da:12:a6:a2:88:c8:4f:
fe:3f:52:2a:6c:31:96:9a:4b:a0:7a:80:b1:85:96:bf:50:86:
12:d4:39:50:4d:b3:b2:2d:8d:97:70:eb:a4:cb:1f:07:46:6b:
1f:c5:42:63:50:92:45:9e:04:fb:c9:0b:c4:54:9d:75:0e:9d:
dc:c4:5b:88:70:52:2e:e5:97:c2:ef:02:7c:9f:5c:8a:fb:70:
56:3d:c3:64:1a:3d:63:d5:3b:cb:27:b8:28:1b:04:88:a0:13:
55:25:71:c1:20:ae:e1:6c:62:3a:d8:0c:bc:d7:ab:4c:66:ff:
33:53:40:f0:7c:dd:a1:dd:62:22:1c:7e:84:c4:18:b8:8e:7b:
a9:1c:de:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:17:41 2026 by rpki-client