Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
File: r2A0bQgbHFyBCzlMZuEFErv02Mk.mft (raw, json)
Hash identifier: 7YNtbg5/VPUTnAxV3xe4sZ938RYHPcqowb+bPt5M3o4=
Subject key identifier: 66:AB:1D:D3:A8:E5:15:B7:D5:95:06:4F:18:37:66:5E:19:C8:5B:6F
Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Certificate serial: 01A117864113C586049F7FCF32ECD032328B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
Manifest number: 07AA
Signing time: Wed 07 Oct 2026 18:00:36 +0000
Manifest this update: Wed 07 Oct 2026 18:00:36 +0000
Manifest next update: Thu 08 Oct 2026 18:00:36 +0000
Files and hashes: 1: MmHcaoSID19FRmGF5kFPH25PR2Q.roa (hash: Pv88TmQb3cGeVyGfPSrdF1R8Obs/Bo3T58FvtRvVnRM=)
2: r2A0bQgbHFyBCzlMZuEFErv02Mk.crl (hash: fKhh/NOahT6VcI7ONTgxZfzzD4zY/GB5XwB1htNQ7G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:86:41:13:c5:86:04:9f:7f:cf:32:ec:d0:32:32:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Validity
Not Before: Oct 7 18:00:36 2026 GMT
Not After : Oct 8 18:00:36 2026 GMT
Subject: CN=66ab1dd3a8e515b7d595064f1837665e19c85b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:e7:19:78:8c:f7:e8:8e:29:4d:11:15:7d:
d0:6b:c7:99:90:d8:31:5a:44:f2:ef:93:39:d7:36:
17:b9:d7:83:ea:e0:b1:49:e1:17:63:84:4b:9b:77:
c1:c3:73:fb:b6:b1:8c:9f:c4:9a:aa:45:88:90:dc:
2a:15:c8:55:8c:94:e5:9a:e0:2b:e9:f0:24:60:aa:
eb:44:05:c6:17:d8:4f:4f:a9:58:c7:1a:e2:23:29:
39:d3:71:1f:ac:21:6d:64:0f:99:9e:5f:c7:b6:9a:
79:9b:63:67:3b:6f:b6:1e:86:5f:08:2f:0c:f0:a2:
4a:35:8a:35:fc:25:30:f9:2e:dd:a1:27:45:a9:a0:
e6:8e:2e:c7:4f:0a:9b:6d:f1:73:fd:59:ac:64:33:
30:cb:3f:87:35:30:3d:d4:c9:b4:b0:52:79:79:9d:
bb:25:99:39:07:64:c9:c5:67:af:fb:dd:8d:c9:9d:
36:07:9a:65:fa:d9:d0:e3:18:1f:ca:85:3a:ff:ad:
97:e9:74:ba:60:92:f6:6e:12:e1:64:a4:61:79:38:
04:4b:2a:14:e5:58:51:31:4a:60:dc:05:e2:6b:06:
3f:46:22:55:c2:b3:59:9d:75:37:d7:61:c8:5b:fe:
e8:89:86:c5:0e:ed:ea:10:99:a2:70:93:4f:67:7b:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AB:1D:D3:A8:E5:15:B7:D5:95:06:4F:18:37:66:5E:19:C8:5B:6F
X509v3 Authority Key Identifier:
keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a4:62:fa:af:8f:7f:18:6e:60:9a:3e:d7:55:da:3a:f8:25:
37:75:df:c1:59:a8:58:24:48:a1:c1:b7:91:42:be:fb:4d:1a:
9b:14:47:da:b9:fb:59:16:36:07:41:71:bf:d3:6d:81:ed:e6:
58:a0:db:c1:b5:38:54:09:24:0e:77:46:1e:6f:67:53:5e:62:
d6:c4:6c:a7:44:ea:d2:37:e4:b8:62:66:0c:61:ce:45:84:54:
c6:49:f1:a9:c0:52:c4:41:6b:be:07:b0:4f:3c:46:c8:c4:a6:
ae:c9:5e:53:83:9d:fe:cd:75:df:9b:f0:e7:7c:e2:c5:52:b1:
1f:36:46:50:ed:80:69:e1:a8:cd:a8:49:87:df:ba:e3:dc:42:
3e:d7:86:5f:27:22:40:a3:40:af:a9:54:e8:8a:41:7b:26:f7:
14:a3:b0:ab:e0:bd:25:01:0f:8a:c5:9b:26:45:2e:d4:2b:a8:
ea:d0:e0:7a:74:a7:0c:d6:9a:d9:7a:57:a0:93:e4:0d:d5:9a:
e2:50:f1:79:45:29:a2:5d:ab:a6:17:55:6c:59:8f:0e:7a:1f:
82:00:57:74:47:cb:63:e1:b8:1f:a2:f0:be:66:13:a8:ba:42:
44:7f:69:2e:b8:b9:df:e4:6c:9f:37:42:55:47:60:3a:ee:0b:
85:d9:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:41:17 2026 by rpki-client