Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
File: _7ml8yjMMGUnzExHS9xLE6dGoag.mft (raw, json)
Hash identifier: skc2a1aKXBQVevyg7qPwubLIJiLeWQ+rxM1iZdsMu3s=
Subject key identifier: 46:68:D3:D0:3E:05:DB:B3:FA:A7:E5:AC:97:62:B3:C0:CC:96:B1:DC
Authority key identifier: FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
Certificate issuer: /CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Certificate serial: 01A134111337EC72422A5346740A79A21E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
Manifest number: 02A4
Signing time: Tue 13 Oct 2026 07:01:36 +0000
Manifest this update: Tue 13 Oct 2026 07:01:36 +0000
Manifest next update: Wed 14 Oct 2026 07:01:36 +0000
Files and hashes: 1: TjUAHrNX6D8KKFwZiePYTV0m3bk.roa (hash: 61/mGPF5yOHT2ppU4Jvr6b/vuT6FmCh4sw4OsDecTfo=)
2: _7ml8yjMMGUnzExHS9xLE6dGoag.crl (hash: j00A8flig4Oe3+HDTZnW0Q8uJf4BGHNWkIYImSXjHY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:11:13:37:ec:72:42:2a:53:46:74:0a:79:a2:1e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Validity
Not Before: Oct 13 07:01:36 2026 GMT
Not After : Oct 14 07:01:36 2026 GMT
Subject: CN=4668d3d03e05dbb3faa7e5ac9762b3c0cc96b1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f4:c0:03:fd:05:af:06:bc:82:09:1c:71:34:
af:83:3f:9f:22:4a:01:7f:78:9d:eb:c7:fc:1d:c4:
d2:dc:c9:c7:1a:a7:51:6f:0b:08:cc:0d:62:fc:f5:
e0:18:c4:c7:0a:71:3c:94:2e:24:3b:d2:12:82:9f:
de:d2:3a:7f:97:5d:ec:06:4a:fc:1a:58:d5:75:1b:
d9:de:e2:99:57:68:c2:c4:11:57:9d:f9:4c:77:9d:
dd:b8:c6:80:00:22:75:84:80:98:2a:83:de:47:25:
20:5c:79:9c:32:a3:f1:e7:6b:a3:66:85:55:b6:9b:
27:e4:99:c8:b0:a6:11:cc:ff:b6:48:e9:10:6b:54:
f8:65:7c:67:19:9a:5b:23:7c:c8:80:37:2c:f1:b0:
ed:11:82:6b:33:92:12:09:b2:c6:bb:56:78:70:5a:
42:91:a2:38:2f:c6:55:ec:4d:b9:aa:e3:ae:22:ca:
de:65:80:3b:04:e4:21:1b:7b:72:3c:5e:0f:f7:41:
bb:e2:11:c3:97:53:ff:be:96:0c:9b:70:35:7a:8f:
09:6f:61:fe:4d:53:b6:87:cf:37:c4:cd:4c:a6:bb:
02:cf:58:f3:2e:8e:47:f9:c1:eb:13:2f:7d:8e:ab:
ed:14:95:5d:f3:21:12:8d:76:a5:26:50:d4:c7:48:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:D3:D0:3E:05:DB:B3:FA:A7:E5:AC:97:62:B3:C0:CC:96:B1:DC
X509v3 Authority Key Identifier:
keyid:FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:14:24:e3:77:ea:b7:04:61:48:02:48:c0:51:5e:f9:9c:6f:
aa:af:04:1d:c9:d8:38:a0:2b:fe:14:ec:a1:29:a7:b5:74:44:
cc:e4:2c:15:c2:2a:59:6f:de:d2:0c:47:88:d2:2c:02:05:3b:
eb:d9:a8:cc:fb:55:0c:5a:36:91:fe:2d:2b:d1:5e:11:fd:9f:
5a:16:c1:47:42:b1:c4:79:01:0a:81:48:95:b1:73:b4:8c:2b:
66:e6:34:0c:4f:aa:c1:e7:de:6e:cc:ef:44:03:0e:05:43:ef:
98:eb:83:e1:8e:e4:03:ba:d8:26:28:34:2f:da:bb:6d:43:f0:
04:18:3a:13:a6:0f:91:54:6b:fb:66:33:5f:60:1c:c7:1c:37:
58:b8:67:a1:0e:9a:d2:d6:1a:39:bf:83:cf:13:15:76:57:26:
74:d4:ab:40:87:85:93:59:1e:9a:2b:98:db:71:b9:44:e1:2c:
6e:f5:c1:5d:88:7e:0e:f6:e8:8c:0c:07:09:1f:5d:e2:06:0c:
7b:ea:f2:76:13:19:d5:7c:5c:f7:96:94:85:7e:62:b2:56:2e:
cd:7b:9d:03:92:b8:23:81:d0:05:71:9b:71:3e:2d:b9:71:62:
fd:6b:26:9e:24:bc:e0:37:ec:66:84:7a:77:1c:8b:9d:f4:55:
55:9a:12:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:52:14 2026 by rpki-client