Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
File: rDxbVWwAUfY7zKUE6u6YM20K6n0.mft (raw, json)
Hash identifier: PL3IXIF3ejt6QSZTcD/dvsKpNbZlkhcxwr/XajqStAg=
Subject key identifier: 8C:6F:5F:DB:BE:19:F4:6B:8E:BB:83:08:11:90:2E:07:47:07:AE:E5
Authority key identifier: AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
Certificate issuer: /CN=ac3c5b556c0051f63bcca504eaee98336d0aea7d
Certificate serial: 01A111BBD6CF3761956EFBE147324C3BA850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
Manifest number: 0107
Signing time: Tue 06 Oct 2026 15:01:25 +0000
Manifest this update: Tue 06 Oct 2026 15:01:25 +0000
Manifest next update: Wed 07 Oct 2026 15:01:25 +0000
Files and hashes: 1: 8meTSesX-bzpkzyvx9ELA1ZiM5Y.roa (hash: wPyw7XGgTqagRr/B70qwK48d2umXqb3H9XJBsVrBmTU=)
2: rDxbVWwAUfY7zKUE6u6YM20K6n0.crl (hash: /zjNl1AsUuwn41mOhDMATfxt9iaQ41++nop25PfMY7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:bb:d6:cf:37:61:95:6e:fb:e1:47:32:4c:3b:a8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3c5b556c0051f63bcca504eaee98336d0aea7d
Validity
Not Before: Oct 6 15:01:25 2026 GMT
Not After : Oct 7 15:01:25 2026 GMT
Subject: CN=8c6f5fdbbe19f46b8ebb830811902e074707aee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:ff:ed:6c:26:85:b2:1c:74:dd:9f:56:b3:
c7:0f:25:a4:7e:76:d4:2e:b3:a4:be:5a:5c:ea:bd:
21:de:4d:5b:b4:01:4e:0e:55:a4:ed:1b:b8:26:ff:
1c:c3:8e:a9:e4:ea:9f:05:4a:b4:35:4c:71:a6:b3:
b3:bc:fc:3f:4f:4f:72:8a:77:19:e2:29:a2:72:84:
30:24:05:99:ce:04:e8:27:6a:df:f3:d6:d9:5c:f6:
a3:bb:3c:b9:97:d9:70:ee:58:99:db:e6:25:80:eb:
5e:cf:9e:12:ab:c3:51:7e:e8:ac:e8:06:e0:ea:de:
7b:a4:a6:3a:fc:d7:e3:17:43:c9:fe:30:e8:b9:26:
7d:61:fc:af:a2:ba:ea:4c:db:e3:39:6a:24:27:b2:
a2:e0:93:8a:62:ec:2d:0a:4d:ec:21:e9:2c:f6:2e:
0e:f3:f3:24:9e:ea:cf:71:8b:4d:b3:9a:bd:53:e4:
07:bf:15:8b:45:d7:95:2f:d0:f2:40:20:ee:9d:bd:
74:d2:bc:33:ef:e6:8d:48:dc:c6:36:19:04:d5:dd:
5a:a7:c7:19:42:8d:5b:76:b4:a1:45:e9:fe:1e:8a:
b9:c2:29:00:9b:52:86:f0:db:51:fb:2a:2b:e2:06:
00:53:d7:d6:9d:4e:d0:2c:69:7d:2d:ad:8b:92:70:
ca:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6F:5F:DB:BE:19:F4:6B:8E:BB:83:08:11:90:2E:07:47:07:AE:E5
X509v3 Authority Key Identifier:
keyid:AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1f:ff:be:12:66:46:e7:97:b3:53:b1:92:64:7f:ca:0a:f1:
e4:63:ee:b1:f2:c3:86:d0:d4:fc:1d:43:8a:e9:76:2d:db:28:
28:19:e9:97:07:2b:b4:ba:3e:00:e2:e8:a2:db:c7:4b:f6:a3:
09:29:d7:85:aa:b0:d5:4d:2b:1e:ae:51:fe:b4:ee:64:24:fc:
7d:9e:85:90:24:a5:5a:14:2b:02:52:c0:0a:67:55:54:ec:49:
a4:f2:e0:7b:d9:b9:70:54:12:0e:a0:19:de:24:35:9a:82:1d:
42:9d:b0:b6:c4:2d:e2:6e:dd:8d:68:32:a9:dc:50:a8:2b:42:
67:21:29:7a:c0:c2:04:f8:d2:83:b7:f7:01:04:3d:1e:50:35:
5f:ae:d3:be:60:39:0e:63:34:eb:65:5a:9f:08:fe:9d:23:74:
a0:f2:d3:31:bd:b6:56:80:e0:ad:32:db:6d:93:db:9c:35:81:
bd:3a:34:05:6c:88:ad:58:53:18:83:ba:3c:df:ec:7a:c3:1e:
01:cb:0c:90:b8:e5:e2:c5:5e:c6:8d:ed:a4:7e:86:b7:ac:be:
41:ae:bf:e7:d6:9f:f9:81:cc:cf:dd:d0:65:f1:1e:f1:6f:3e:
98:3a:fc:ca:21:07:aa:a9:8a:f9:74:e9:2a:77:a3:ba:9e:b5:
66:58:51:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:43:41 2026 by rpki-client