Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
File: anKTCVpV8Nd-JRZOfXS3qKI530c.mft (raw, json)
Hash identifier: kG31mHJK565+XLC57o3V5hz2f6lC/GL0W05O45gK/Cs=
Subject key identifier: 1D:F8:9C:D5:7D:13:3A:AD:19:E7:12:D6:9C:89:80:B1:CF:BA:CF:E4
Authority key identifier: 6A:72:93:09:5A:55:F0:D7:7E:25:16:4E:7D:74:B7:A8:A2:39:DF:47
Certificate issuer: /CN=6a7293095a55f0d77e25164e7d74b7a8a239df47
Certificate serial: 01A0C3D738608BD650B8D6FDB27A4F4BAD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anKTCVpV8Nd-JRZOfXS3qKI530c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
Manifest number: 28
Signing time: Mon 21 Sep 2026 12:00:56 +0000
Manifest this update: Mon 21 Sep 2026 12:00:56 +0000
Manifest next update: Tue 22 Sep 2026 12:00:56 +0000
Files and hashes: 1: 1-eOJkO9YL4xZg--gf6qwumHEDtk.roa (hash: GR80Sq/bTbd5unKoNza5U5i+PbZ/S05QHDYglZZW7qo=)
2: 4asxyyWddWEKpcZjuR_8NaNYv7c.roa (hash: SpZcARQwDiAhzirfuI9PBLqIEmPOzdCFIvD8FEKL3W0=)
3: anKTCVpV8Nd-JRZOfXS3qKI530c.crl (hash: cKGoNcCGbcy3+94J/qXHFIq2JWoHyIgDE6Z3K/gWu2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
rsync://rpki.ripe.net/repository/DEFAULT/anKTCVpV8Nd-JRZOfXS3qKI530c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:38:60:8b:d6:50:b8:d6:fd:b2:7a:4f:4b:ad:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7293095a55f0d77e25164e7d74b7a8a239df47
Validity
Not Before: Sep 21 12:00:56 2026 GMT
Not After : Sep 22 12:00:56 2026 GMT
Subject: CN=1df89cd57d133aad19e712d69c8980b1cfbacfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:41:3b:96:c3:52:14:01:96:10:9d:4d:f1:
85:d1:74:0c:eb:00:0a:f7:11:7f:eb:7e:21:b1:ae:
d7:b5:62:56:83:46:e6:3d:9b:d6:c0:3f:20:7e:a1:
45:e4:4f:3a:5a:71:76:f9:82:05:8a:1d:7c:8d:dd:
05:7f:44:58:b9:c2:a5:d1:a4:64:bf:7e:ca:7f:ba:
f6:30:9e:43:c6:1f:0f:b4:c0:69:e7:48:8f:f7:80:
ff:06:85:6b:dd:8d:f4:be:fb:b4:4d:5c:2e:38:36:
43:ba:f6:48:86:08:50:14:4a:cb:09:21:aa:aa:e4:
ca:9f:12:d5:5a:86:86:b5:2d:29:5a:b7:32:c4:f0:
f1:18:ad:8e:6b:11:0d:a7:22:fb:e8:aa:0f:24:16:
00:1e:94:b5:51:8c:6f:e1:bb:f7:f9:ba:b5:c0:70:
19:35:7a:26:aa:b4:e4:7c:27:83:f4:b8:10:64:27:
a8:8c:0d:cd:b5:e8:ed:5b:4c:26:0d:9f:df:28:c9:
2f:9f:c3:1b:a9:b6:bf:57:1a:4b:61:fb:b6:40:e8:
9a:c4:39:01:68:b1:bf:68:17:b6:d1:43:3d:30:ed:
2f:cb:cc:33:81:01:d7:cc:b2:46:cf:7b:9a:7b:19:
12:0f:8d:e5:92:24:8a:d4:47:48:0a:5f:36:18:3f:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F8:9C:D5:7D:13:3A:AD:19:E7:12:D6:9C:89:80:B1:CF:BA:CF:E4
X509v3 Authority Key Identifier:
keyid:6A:72:93:09:5A:55:F0:D7:7E:25:16:4E:7D:74:B7:A8:A2:39:DF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anKTCVpV8Nd-JRZOfXS3qKI530c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:47:f3:93:39:39:1a:08:3a:d0:6d:b7:04:29:22:0d:4f:a7:
ce:cc:ff:9f:61:b7:ac:70:5c:ec:9d:6d:e3:c7:06:d7:35:47:
39:bd:c3:56:ab:66:34:81:25:dd:49:14:bd:b8:12:e7:56:9d:
90:e5:b4:02:9c:f1:ab:06:b7:2e:f4:1b:4e:24:d1:49:1f:cf:
fd:5c:82:07:fc:a1:03:6f:d3:76:48:2c:32:b6:71:44:f1:ec:
d8:2e:42:fb:f2:00:fa:a4:93:e6:dc:d1:4a:0e:b7:1b:8a:99:
48:f2:3e:49:d9:0b:dc:d7:6e:b5:be:87:a8:35:72:81:ac:fd:
db:05:fd:b9:de:03:69:30:89:ab:08:0b:f9:ac:27:95:09:3a:
bc:1c:8f:22:4f:e7:d8:8a:e9:f1:6a:13:4d:86:0f:bb:61:1c:
47:cb:d4:36:8e:b8:c1:12:da:09:0b:5a:f1:1e:8f:39:95:d1:
f5:03:4a:4a:c2:00:ce:d0:95:34:99:1b:f0:7a:fd:c5:e0:98:
0a:bb:df:62:3d:76:c6:34:fc:cc:f1:16:69:a2:23:95:c0:15:
f7:99:a7:6b:85:62:24:87:5f:63:11:49:21:55:06:80:92:e6:
47:ab:18:6f:f8:ae:76:1a:57:d4:e7:4b:e8:35:e7:61:b1:12:
0e:13:f2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:40 2026 by rpki-client