Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
File: a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft (raw, json)
Hash identifier: pMQRz8TY7fwBjlp/dtWLNAAwgmAiFlTmwW63mpXklj8=
Subject key identifier: 2D:76:D7:7D:DE:9D:E3:53:3A:B9:2E:8D:F1:17:DC:62:14:1D:F5:59
Authority key identifier: 6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
Certificate issuer: /CN=6bf44071ba5a6778721519a1862212804e6034cc
Certificate serial: 01A130A19F851690E754A0E99EBEA7331FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
Manifest number: 022F
Signing time: Mon 12 Oct 2026 15:01:00 +0000
Manifest this update: Mon 12 Oct 2026 15:01:00 +0000
Manifest next update: Tue 13 Oct 2026 15:01:00 +0000
Files and hashes: 1: 4t94Ewh86rP5LgTWja3S3CmNJgI.roa (hash: U5a2tjhoCzukKEhPTVnBWaLXi08xhHMBTeQZZG2Rjm4=)
2: a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl (hash: WrTw/bkzCyHvkTyY/5VJc64t7GWw/CeqOxYRQKnSaS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:9f:85:16:90:e7:54:a0:e9:9e:be:a7:33:1f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf44071ba5a6778721519a1862212804e6034cc
Validity
Not Before: Oct 12 15:01:00 2026 GMT
Not After : Oct 13 15:01:00 2026 GMT
Subject: CN=2d76d77dde9de3533ab92e8df117dc62141df559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:c1:db:a6:89:7d:1c:cd:9c:d2:88:38:c8:
2f:d3:4d:84:a3:df:82:41:f8:88:9c:86:30:10:62:
d4:27:f9:e2:36:8b:10:3d:9c:d8:0c:0d:73:41:89:
7b:1c:72:37:06:98:03:99:c3:2e:1d:29:05:4c:68:
0e:e4:ba:28:74:97:e1:22:27:6c:e8:25:cf:cb:02:
6b:48:87:19:45:c4:f6:56:e0:6e:e0:24:aa:5b:f5:
68:96:7b:47:69:2a:e4:d7:ca:c0:31:ef:c5:83:b2:
f9:c4:21:ff:5d:4a:a3:dc:82:9f:99:b0:27:4c:f7:
13:70:dc:86:a7:5c:c1:6d:9d:24:d8:85:95:c8:4f:
aa:83:b7:50:0a:32:73:5b:33:3b:b6:7f:10:80:66:
1e:c4:ca:2b:aa:73:37:7f:69:04:d2:bd:b5:f7:8c:
91:16:b6:10:70:bd:2e:49:36:77:c5:16:b9:71:e7:
39:cc:4b:80:16:63:ad:85:62:9d:bc:d1:8c:ae:27:
fb:69:49:e9:75:59:d6:bb:4a:31:4d:e9:33:57:eb:
7c:b2:bf:38:8e:37:7e:2f:aa:76:69:ca:50:7b:7a:
92:57:3e:7a:33:60:1d:d9:d9:db:c5:6a:b0:6d:01:
43:f6:9f:68:72:3d:84:64:52:32:45:9f:4a:45:81:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:76:D7:7D:DE:9D:E3:53:3A:B9:2E:8D:F1:17:DC:62:14:1D:F5:59
X509v3 Authority Key Identifier:
keyid:6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:65:64:30:e9:80:11:9d:3b:35:9d:e1:be:8a:65:21:5d:2e:
b8:0f:84:b6:8c:92:4a:80:a2:42:8b:49:35:78:44:d8:e5:f2:
ea:c0:3e:b8:0f:b6:ff:19:11:41:4f:2b:5a:d9:9a:3d:a6:98:
d7:6d:2a:02:06:b5:07:14:a5:a0:11:14:eb:20:1b:d4:38:e8:
78:82:fd:d3:c9:0a:44:b9:8e:77:ee:65:6a:69:0d:25:5f:71:
7b:96:d5:79:36:79:3e:91:c1:8e:97:8a:95:78:e2:4c:69:cc:
05:1b:01:82:7d:e6:52:49:22:5a:b9:e3:25:fb:0c:74:c9:d6:
9c:a8:98:3a:5e:dd:ef:0a:92:54:1c:0d:7e:a0:0d:e7:86:47:
da:dd:bc:17:d2:d7:24:8e:20:72:c3:c3:43:41:13:7c:1d:44:
38:19:ab:78:a8:bd:09:7b:a3:c5:62:92:88:48:26:08:62:28:
51:80:32:9b:d7:24:d1:bf:a1:0f:91:a9:2a:74:df:2e:fe:3c:
7a:5c:23:04:cd:57:2c:15:9a:ca:69:3b:de:76:ac:9a:df:2d:
18:1c:41:46:41:18:0c:71:6d:0b:d7:81:8c:1a:b2:10:01:0e:
85:da:48:1b:8f:ae:80:69:22:0c:b6:80:f2:98:bc:35:a0:86:
41:de:c4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:43:57 2026 by rpki-client