Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: ameVUXeajQsD+zpHBG7EU8b9gwnxpiU6xthad7e67Q0=
Subject key identifier: AD:30:8E:65:70:29:E0:DA:E6:D4:3C:62:93:CB:95:DB:FA:F2:C4:A7
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 01A124664EFE59E47AD9E988142D9775BD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 1A98
Signing time: Sat 10 Oct 2026 06:00:46 +0000
Manifest this update: Sat 10 Oct 2026 06:00:46 +0000
Manifest next update: Sun 11 Oct 2026 06:00:46 +0000
Files and hashes: 1: GvNFYyBUTZVKqfxGJ29AQ8ybUOI.roa (hash: uZnUMOZEaipYyz6w+Q0CeYwOVjF6E1oqOIzqR9nYZ4k=)
2: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: tZ+ho7CCoUi7mSJZ7iPJvaxJcnmEFa5EqwMlitE82fs=)
3: nFyJiI2QEmXq35fuiG_EUZU-0Tw.roa (hash: cLxbEZlxAIqYS86le/aYrGcroGy0E1YAeKBMSi+G8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:66:4e:fe:59:e4:7a:d9:e9:88:14:2d:97:75:bd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Oct 10 06:00:46 2026 GMT
Not After : Oct 11 06:00:46 2026 GMT
Subject: CN=ad308e657029e0dae6d43c6293cb95dbfaf2c4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:b1:b6:8b:0e:b8:8e:3f:fb:89:bf:e8:fc:
16:6d:48:79:e0:61:b2:69:d0:aa:c3:e5:03:07:27:
da:85:0c:85:e6:64:fc:e7:ee:93:c9:c0:22:58:4d:
af:32:ce:22:dd:3f:b5:dc:ce:b9:84:1f:4f:07:aa:
1e:48:ee:ae:10:51:00:bc:c0:18:ad:fb:69:1f:3e:
66:8e:ab:6c:fd:7a:df:13:db:28:ad:fc:1c:63:56:
d4:a1:2e:85:a2:65:de:81:7e:a1:af:fe:ef:a1:bc:
df:c7:c3:71:e8:8b:4e:36:87:36:8b:e0:e6:0e:66:
cb:01:8e:44:f8:b9:b7:2a:14:11:f5:24:dd:ba:71:
db:06:6f:26:99:70:9d:20:1a:f4:d6:62:66:a2:6c:
b4:52:ec:db:f3:06:b0:1c:2d:31:c9:4d:fd:91:67:
9f:1f:e9:11:d4:27:2b:74:67:7b:fa:e6:a2:a8:38:
46:4d:1c:dd:b2:74:5d:ac:a5:e1:0b:3c:d7:78:a8:
b7:3e:9d:a6:d5:6b:b1:86:58:e5:27:c3:10:86:d8:
5c:3d:3a:bc:6b:d0:7a:a7:97:b6:75:4e:6c:ce:bf:
ce:a5:39:ab:6c:cc:e8:26:d0:41:30:f9:86:c4:18:
46:0f:c5:0c:67:a7:44:7d:95:e8:97:3a:2a:3c:23:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:30:8E:65:70:29:E0:DA:E6:D4:3C:62:93:CB:95:DB:FA:F2:C4:A7
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:fa:10:de:01:68:38:ff:29:49:c1:ad:eb:18:f9:8a:80:53:
ba:60:34:9e:36:d6:05:d3:1f:44:05:ca:db:fc:2f:6d:c9:eb:
8e:83:27:e0:df:e1:9e:41:39:00:8d:ee:b7:5d:46:0d:c5:a6:
ec:4e:22:f6:b8:33:36:4b:ac:f1:33:02:80:1b:2c:af:02:69:
9e:2f:9c:ed:37:4c:14:13:84:f3:dc:7b:a8:56:f4:5a:bd:c4:
92:93:d6:15:f0:7c:53:39:22:fa:c3:4b:5d:46:d3:6a:0d:d6:
6b:78:d8:32:ce:2b:91:2d:6d:95:b5:2a:64:54:6b:cd:d4:3b:
54:40:dc:79:8b:20:ef:99:14:bc:2f:66:56:94:c8:73:dc:b8:
a1:99:95:5f:8c:36:07:ff:90:73:aa:c8:45:6d:f2:d7:a2:b6:
ec:7c:48:b0:e3:50:5c:62:1c:a8:5b:25:57:81:71:28:b6:0b:
ac:70:62:2d:45:b7:8e:04:89:c3:70:c4:ee:57:63:85:ab:43:
18:dd:fd:75:63:c1:58:49:a3:b1:a3:4a:d5:65:e6:97:7a:14:
d1:fa:6b:33:3b:61:6f:98:05:12:72:ce:f4:b7:d9:29:bd:43:
56:22:ad:1b:7f:5c:ed:e1:ee:5d:42:3a:98:38:c7:62:8e:09:
7d:5a:b7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:15:01 2026 by rpki-client