Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: rczcvQMi4YTTM3X6Fo3MbnpD09O7N7/ZHi0mLNn1wxQ=
Subject key identifier: 87:F8:48:DA:DB:B2:F1:A7:03:86:F4:E0:81:AA:1C:52:2D:75:9A:F4
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 01A17E1870597476805A0A957CDEFDC8EA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 18D4
Signing time: Tue 27 Oct 2026 16:01:33 +0000
Manifest this update: Tue 27 Oct 2026 16:01:33 +0000
Manifest next update: Wed 28 Oct 2026 16:01:33 +0000
Files and hashes: 1: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: qPF2mfKHtlBAAsXux29sC4P/+8BuIDfnmtry+e6PKsg=)
2: pOIuDBEkoq7VJ1WH33qIfih-ISc.roa (hash: X4NB/WumcFxqMtQqwFAxWEPHaQYbJfAGl8Ne+TeIR0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:70:59:74:76:80:5a:0a:95:7c:de:fd:c8:ea:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Oct 27 16:01:33 2026 GMT
Not After : Oct 28 16:01:33 2026 GMT
Subject: CN=87f848dadbb2f1a70386f4e081aa1c522d759af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c4:9f:b9:3c:fa:e1:8d:88:c1:2e:dd:4c:44:
e4:04:c2:9c:8c:8c:be:b3:2c:12:1f:d4:67:3a:c3:
f9:99:31:5d:7f:dd:43:5a:34:79:b0:23:60:19:b2:
5d:c4:d7:27:fc:87:67:22:2a:8d:76:47:fa:87:18:
19:78:de:ec:88:e1:92:e8:fd:c5:a6:66:7d:2a:f9:
ef:d4:91:07:fb:1f:c7:24:4e:00:ed:c5:0a:89:39:
8c:d2:a9:df:f0:5a:fe:3f:0a:0c:a8:ef:ba:80:82:
47:d4:bc:53:d4:17:e6:7e:89:14:ea:65:b0:8c:89:
54:d6:f7:92:54:97:eb:1f:dd:4b:56:f9:96:44:97:
50:b6:ee:cc:87:52:1b:a2:92:09:f9:a6:93:b0:a8:
3f:b2:bb:84:4f:79:2b:f7:f3:f4:87:6c:41:c4:be:
8d:89:d1:10:e9:d4:1a:9f:92:ff:d5:f0:6e:3d:e7:
84:7a:cf:ae:b2:e6:27:98:65:74:dd:54:37:5c:4c:
6a:57:5b:e3:8b:c3:08:78:4b:65:ca:c0:ba:0d:7a:
5c:90:b0:b5:c4:6d:41:a1:f2:99:fd:55:0d:28:b7:
e1:a0:ed:38:68:de:22:59:19:f5:e9:24:8d:a5:94:
eb:e1:61:23:03:02:35:ad:0a:fa:ce:14:e0:68:42:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F8:48:DA:DB:B2:F1:A7:03:86:F4:E0:81:AA:1C:52:2D:75:9A:F4
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c8:62:0e:df:3a:70:af:8e:6c:59:bc:31:69:e4:f9:1f:6a:
41:5b:4f:e5:f2:13:43:4b:ea:67:89:52:91:e7:59:9d:9c:6d:
d6:bf:2d:6a:bb:1e:f0:35:64:9e:12:d2:f8:a8:79:22:53:7c:
9a:40:32:92:29:22:cb:18:fa:68:c0:30:fe:d2:bc:43:25:c8:
50:ec:67:e5:27:4b:65:7b:8a:6b:f0:ff:14:4a:e1:c0:f5:e5:
6b:8e:21:33:72:a7:18:52:1a:e5:09:3c:09:03:4f:cb:3b:5c:
d6:a2:00:72:fc:63:1b:49:37:27:25:96:cc:ed:37:d5:6f:92:
9c:8c:ce:6f:3e:ef:2a:cd:26:91:e5:d5:f7:c8:e3:36:8b:1a:
2e:c5:3f:eb:b1:81:fa:3e:41:ca:9e:26:d6:f8:1a:ca:53:8a:
31:6a:17:82:99:e6:9b:54:9d:6f:cb:b0:1a:cd:95:0b:a6:dd:
d8:16:cd:0d:c7:5b:89:10:4e:87:9c:aa:47:f2:e7:b1:c0:ca:
be:52:9e:d0:a1:c2:06:20:e3:c4:86:0b:18:11:57:f8:a9:88:
ef:e7:cf:4e:bb:a2:91:4e:f2:4b:2b:ed:0b:4f:3d:b4:53:64:
74:5a:32:99:e4:03:23:56:f4:ec:e5:42:03:55:28:65:b2:fb:
5e:b8:79:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 21:07:52 2026 by rpki-client