Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft
File: anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft (raw, json)
Hash identifier: Vcbqr3D+9H3GpPJxBRNm/AkYGHRWsWqjqWykGp4jQOU=
Subject key identifier: 5A:F2:E4:BF:82:56:AF:D7:B0:5B:60:C2:88:50:EA:E9:78:1D:99:92
Authority key identifier: 6A:74:80:B3:84:6F:73:5C:98:CF:9B:00:E9:80:46:2A:18:B0:6C:F6
Certificate issuer: /CN=6a7480b3846f735c98cf9b00e980462a18b06cf6
Certificate serial: 01A130A185015BD9C38F9B60716F84578C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anSAs4Rvc1yYz5sA6YBGKhiwbPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft
Manifest number: 0117
Signing time: Mon 12 Oct 2026 15:00:53 +0000
Manifest this update: Mon 12 Oct 2026 15:00:53 +0000
Manifest next update: Tue 13 Oct 2026 15:00:53 +0000
Files and hashes: 1: anSAs4Rvc1yYz5sA6YBGKhiwbPY.crl (hash: NielcncCB1SaiA5EmgemVFlTGdoW9aYS5AKRqs1yKlA=)
2: sTJv0BczOqKeqlhWC3yVmXfKqAQ.roa (hash: szTWeTLVa/lbCgRM+88z6fU1aZrlAcINrboqeCQYoqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/anSAs4Rvc1yYz5sA6YBGKhiwbPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:85:01:5b:d9:c3:8f:9b:60:71:6f:84:57:8c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7480b3846f735c98cf9b00e980462a18b06cf6
Validity
Not Before: Oct 12 15:00:53 2026 GMT
Not After : Oct 13 15:00:53 2026 GMT
Subject: CN=5af2e4bf8256afd7b05b60c28850eae9781d9992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:82:ac:ad:1c:5a:fb:34:2d:bf:1b:a6:42:
93:71:00:f7:9b:33:93:34:ad:99:b7:ed:fc:c3:d5:
95:a8:4a:c1:8e:7d:1a:5e:dd:e9:ca:16:b3:00:72:
4c:7f:65:57:f1:69:e2:c1:b5:4c:4d:98:3b:d0:3e:
c8:cc:41:c3:87:68:71:c8:73:7d:61:f8:4c:c6:ef:
9c:56:fd:9a:47:7a:44:95:ec:1e:bf:a4:8d:f2:76:
a5:17:30:1a:e2:97:3b:b1:3f:66:2a:7f:3a:0d:fb:
80:47:b7:bf:00:93:c0:6b:73:60:ec:f0:14:27:78:
5b:37:33:e7:34:d7:6b:08:f6:4c:6d:a3:98:02:31:
02:16:b6:b0:c5:ab:d2:b9:bb:9b:b2:5a:11:6d:6e:
c4:b7:2c:c2:09:a2:6e:fe:0b:ee:c5:0c:73:c8:d7:
1a:29:23:2a:0e:46:4e:95:87:94:da:ac:18:64:ee:
3a:15:82:dd:6e:d9:31:d7:0d:3f:9f:19:ea:99:b8:
eb:bd:d8:74:b8:b7:b9:96:d4:b5:a5:bc:e9:d5:f5:
a3:4c:12:3e:f4:5b:08:b1:69:6b:43:ff:22:aa:c8:
25:65:c1:d2:98:c0:e3:a4:c5:c5:84:35:1d:c2:95:
b7:13:4d:37:b5:80:7d:dd:18:1d:2c:b2:3f:7c:1b:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F2:E4:BF:82:56:AF:D7:B0:5B:60:C2:88:50:EA:E9:78:1D:99:92
X509v3 Authority Key Identifier:
keyid:6A:74:80:B3:84:6F:73:5C:98:CF:9B:00:E9:80:46:2A:18:B0:6C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anSAs4Rvc1yYz5sA6YBGKhiwbPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ba:e6:b5:75:f1:6d:51:90:3a:53:69:22:d2:07:14:36:4c:
4b:b2:a7:7c:4b:c6:c4:d5:32:5b:0d:a6:7d:f2:5c:b7:c4:57:
14:3e:d6:88:96:e2:69:e7:b5:35:80:c3:75:b5:b6:42:d5:38:
82:00:13:f6:d3:8a:5d:a7:e8:f7:9c:68:7e:6a:c7:85:53:5c:
a3:b7:13:f9:df:bb:4b:85:1e:1e:e7:70:1f:d9:9e:55:2c:f2:
c6:43:b2:23:7b:b3:22:1c:91:7a:b8:d0:9b:8d:84:86:1b:f5:
07:63:b7:71:29:bb:99:f1:c2:9f:00:4b:3d:b3:c7:c9:44:42:
65:a8:4d:83:99:9f:47:01:9a:23:2b:cd:78:e5:13:4a:6f:2b:
67:b0:2a:a0:a2:cd:78:0b:cc:2a:1e:f0:ac:ed:e7:64:82:1c:
0f:83:9d:2f:34:a8:a1:d5:1c:b2:90:4a:ce:67:80:0a:76:63:
8a:78:b0:66:31:96:94:9b:ad:02:8f:5c:b9:6d:c4:01:06:3c:
2e:b1:03:1c:8e:fc:33:95:38:4f:f1:75:a3:13:56:27:1e:e4:
bb:8c:79:eb:06:74:34:9b:ef:44:f1:ec:68:8f:53:ef:c4:7d:
02:7c:17:67:d0:fd:4a:51:03:0c:f1:53:72:3e:d9:09:47:c0:
fe:e5:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:19:55 2026 by rpki-client