Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File: mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier: XuKxWHsMn4a1WjWz41K1mOJKTlSCQQBc5S6z1cyXPp8=
Subject key identifier: C2:AF:8E:ED:7F:15:48:38:77:B8:83:43:39:BF:C5:92:08:85:CE:00
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial: 01A0FAFD9B519656CA22D55ADBF291AF2A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number: 190B
Signing time: Fri 02 Oct 2026 05:01:59 +0000
Manifest this update: Fri 02 Oct 2026 05:01:59 +0000
Manifest next update: Sat 03 Oct 2026 05:01:59 +0000
Files and hashes: 1: KEyhGh3u-Ad2U98qs53aKdB_GJc.roa (hash: jZXKizyeTSKszZt9XLRCfNj1B4xBpIyE3AIW1lpSBsI=)
2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: 5e7nM2SDGarkJaGyGSb0L/0S1XP7fmHzKK6WSJe+Ei8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 05:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:fd:9b:51:96:56:ca:22:d5:5a:db:f2:91:af:2a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
Validity
Not Before: Oct 2 05:01:59 2026 GMT
Not After : Oct 3 05:01:59 2026 GMT
Subject: CN=c2af8eed7f15483877b8834339bfc5920885ce00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:38:0d:65:34:45:ed:d8:46:7a:84:52:c9:
ea:ff:40:19:1f:3e:3c:cb:45:02:56:d5:f0:9b:65:
2f:4c:42:9d:c3:38:09:c3:8e:cb:40:76:25:4d:9f:
81:78:41:1d:85:b0:75:24:2b:dd:d2:64:06:44:6a:
7d:14:c6:a7:84:5a:81:1c:f6:fa:e8:08:54:9c:fd:
54:e0:4f:2d:e7:08:78:8e:aa:83:e4:fe:1b:4c:e5:
99:20:e7:d1:0f:b1:bc:e8:c8:5e:3d:65:c7:b2:a2:
c4:6c:2d:46:b3:20:64:f3:4a:dd:dd:30:77:fe:fc:
0c:73:10:75:20:2b:ce:a0:0a:bd:ab:f8:f9:29:6f:
1d:fb:2b:6f:f0:d5:65:11:b6:ec:51:86:3d:ae:ae:
9e:9c:69:27:f2:ce:a2:2b:73:75:81:f3:a7:a4:e4:
31:b5:a9:b3:5c:65:a4:c5:e3:d6:cc:66:90:09:82:
71:1d:38:49:0f:18:d0:06:df:72:c4:f7:be:55:c8:
d0:c9:0b:da:2e:c6:fb:06:7c:a6:35:be:6e:f3:51:
de:b5:44:57:4b:07:bb:6f:7e:18:5c:7e:05:5d:65:
6d:f4:bf:e4:14:f9:e4:95:5d:ba:42:e6:59:af:2e:
15:ae:df:d4:f7:65:5b:a0:8f:63:d2:5c:74:a0:7c:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AF:8E:ED:7F:15:48:38:77:B8:83:43:39:BF:C5:92:08:85:CE:00
X509v3 Authority Key Identifier:
keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:86:ef:53:cc:bf:62:74:80:f3:d8:93:ef:5c:64:c8:7e:3e:
2c:3b:1c:25:8e:0c:24:e3:55:a9:74:b9:f7:27:e0:da:01:4e:
c7:c3:f4:18:4d:40:a7:05:04:fb:68:00:84:dd:2e:24:0c:66:
3d:5f:fd:8a:93:75:d9:29:db:4f:82:1d:48:6e:43:2d:72:50:
e3:17:db:29:5c:f5:15:18:1d:cf:6d:64:a0:e4:47:cb:dd:27:
6e:56:12:27:57:47:43:ff:da:82:82:51:bd:16:b4:fd:37:78:
20:69:ed:37:c0:c3:1c:65:5a:68:63:02:b3:01:b2:8a:b8:2c:
b4:bc:67:e1:66:df:7b:56:a7:48:6d:32:b2:ec:78:93:ba:eb:
48:10:93:af:dd:6b:d2:d1:22:d4:fe:64:17:e8:aa:7f:53:6e:
d9:3c:7a:8f:30:6e:5c:47:4f:23:62:29:dc:8b:e7:be:e3:d1:
29:0d:9e:cd:3b:c3:32:64:05:92:fc:5f:2e:eb:02:c7:6e:bb:
bb:61:45:65:e4:df:10:ec:8f:8a:62:48:05:25:2e:22:94:4a:
73:cf:67:95:e8:1b:51:aa:58:61:a7:83:62:8f:05:77:08:be:
43:a3:ab:53:86:51:11:a5:a6:ae:b6:17:d7:a2:6e:68:07:9c:
1f:9f:f8:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD6/ZtRllbKItVa2/KRryp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWI1NDIyY2Q1NTc4ZDQ3MTVlYmU0YzUwOTcyMDI1MjNk
ZDU2NTgwHhcNMjYxMDAyMDUwMTU5WhcNMjYxMDAzMDUwMTU5WjAzMTEwLwYDVQQD
EyhjMmFmOGVlZDdmMTU0ODM4NzdiODgzNDMzOWJmYzU5MjA4ODVjZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kU4DWU0Re3YRnqEUsnq/0AZHz48
y0UCVtXwm2UvTEKdwzgJw47LQHYlTZ+BeEEdhbB1JCvd0mQGRGp9FManhFqBHPb6
6AhUnP1U4E8t5wh4jqqD5P4bTOWZIOfRD7G86MhePWXHsqLEbC1GsyBk80rd3TB3
/vwMcxB1ICvOoAq9q/j5KW8d+ytv8NVlEbbsUYY9rq6enGkn8s6iK3N1gfOnpOQx
tamzXGWkxePWzGaQCYJxHThJDxjQBt9yxPe+VcjQyQvaLsb7BnymNb5u81HetURX
Swe7b34YXH4FXWVt9L/kFPnklV26QuZZry4Vrt/U92VboI9j0lx0oHwhVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKvju1/FUg4d7iDQzm/xZIIhc4AMB8GA1UdIwQY
MBaAFJkbVCLNVXjUcV6+TFCXICUj3VZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2Mt
ZDQ2ZmZjNTAxZjM2LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2MtZDQ2ZmZjNTAxZjM2
LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtobvU8y/
YnSA89iT71xkyH4+LDscJY4MJONVqXS59yfg2gFOx8P0GE1ApwUE+2gAhN0uJAxm
PV/9ipN12SnbT4IdSG5DLXJQ4xfbKVz1FRgdz21koORHy90nblYSJ1dHQ//agoJR
vRa0/Td4IGntN8DDHGVaaGMCswGyirgstLxn4Wbfe1anSG0ysux4k7rrSBCTr91r
0tEi1P5kF+iqf1Nu2Tx6jzBuXEdPI2Ip3IvnvuPRKQ2ezTvDMmQFkvxfLusCx267
u2FFZeTfEOyPimJIBSUuIpRKc89nlegbUapYYaeDYo8Fdwi+Q6OrU4ZREaWmrrYX
16JuaAecH5/4vA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 15:04:32 2026 by rpki-client