Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: +3HN3EbJHVZL60404LMc0daEku88en3USp+Ivb0uWig=
Subject key identifier: FF:70:95:DC:CE:29:A1:68:0A:96:B1:1F:A2:12:44:34:36:B6:A7:ED
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 01A1AB27BC6C92F5DAF24C4C5F02F2B1DE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 1A70
Signing time: Thu 05 Nov 2026 10:01:10 +0000
Manifest this update: Thu 05 Nov 2026 10:01:10 +0000
Manifest next update: Fri 06 Nov 2026 10:01:10 +0000
Files and hashes: 1: YFuXlkN-MljNRVYZCMihnQz4RoU.roa (hash: ZnDgTtky6cYn6D0/F0mae8ReoG9f3tqFA2qYPiw3SoE=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: 3+IvVNvjLzRcadEO8cAVj2DFp8b5tcanHCxHUNgqk9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:27:bc:6c:92:f5:da:f2:4c:4c:5f:02:f2:b1:de:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Nov 5 10:01:10 2026 GMT
Not After : Nov 6 10:01:10 2026 GMT
Subject: CN=ff7095dcce29a1680a96b11fa212443436b6a7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:29:f2:6d:d2:b7:d6:e4:09:32:7c:19:c2:
c6:9a:5e:2c:96:6c:87:ee:1f:0e:8d:5a:8f:f4:dd:
bf:0b:ed:35:f0:b9:b6:e2:7e:47:f9:93:47:93:65:
7e:18:dd:81:52:26:d5:70:ba:23:6f:02:61:23:56:
2d:83:c5:04:3a:88:56:a2:cd:32:55:42:40:fd:5a:
56:f2:a1:16:5f:ae:64:b2:a3:44:65:b3:04:cb:bb:
6d:23:60:27:53:49:90:1d:ce:83:4c:ec:04:95:e5:
67:35:4d:9a:8e:d9:15:91:e7:b1:43:84:a4:26:5e:
4b:2f:ce:62:1b:46:03:e7:2f:1c:91:ab:23:17:1c:
88:19:f0:ea:13:1b:70:73:37:c4:e5:af:c4:b7:5c:
9a:ca:41:86:ed:ad:4a:cc:de:30:9c:3a:5f:d6:bc:
6a:90:80:1c:5f:aa:b7:bb:d7:35:f8:35:47:08:a2:
1c:8f:86:04:c4:39:63:41:c0:91:4b:0f:f8:9c:01:
25:34:89:c4:d7:27:7c:b6:97:36:33:3d:96:da:08:
6a:c3:b6:94:3a:0a:d4:8b:2d:24:c3:2c:8d:d1:5e:
e7:6f:0f:69:ce:a0:08:bb:33:fb:5e:0a:ce:44:7b:
77:7a:bd:85:67:0a:df:e6:08:b3:14:4a:51:c1:45:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:70:95:DC:CE:29:A1:68:0A:96:B1:1F:A2:12:44:34:36:B6:A7:ED
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fb:37:17:be:c3:f2:7f:75:f4:77:8c:bf:2c:8b:49:36:60:
77:25:46:fa:58:39:c0:40:bd:ec:9e:90:06:9c:35:c2:cd:69:
1d:ba:bb:e0:56:03:b6:c0:6c:69:aa:c8:08:d2:a7:9b:84:12:
25:d5:46:7a:b5:fe:9e:46:81:ef:44:81:11:d6:03:2f:3b:86:
c2:71:75:ca:fe:7e:0d:96:14:8e:35:a3:d1:d5:e0:9e:a4:bc:
1f:fb:bb:45:95:80:0e:c4:2c:ec:b0:9e:f9:97:d7:92:a9:55:
8e:20:db:4b:52:2a:3c:1b:21:08:40:7e:8b:ee:33:bd:0b:da:
0d:95:d0:61:33:13:d6:50:a2:40:16:58:7f:e7:d8:0a:79:ba:
50:f2:a0:61:46:a3:78:e8:bd:d6:18:f5:bd:1c:10:41:da:04:
c1:1a:8f:5f:21:d8:af:f9:71:bb:f4:1a:86:3f:8e:6b:2e:aa:
53:60:fc:ea:10:fb:22:d6:7c:d1:1c:94:d5:60:b0:e5:41:1a:
28:04:20:32:08:c6:ef:02:9d:54:2c:e5:ce:ca:9d:b6:84:03:
8b:13:4c:5a:a7:7e:de:f8:7a:42:a5:76:fd:17:e5:1c:a9:2a:
e1:f1:ab:6c:ad:5a:b5:88:1e:c5:c0:c1:9f:41:82:ac:d5:cb:
2c:04:ac:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:54:17 2026 by rpki-client