Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
File: mBFkq3lqrTz68oOQ9k3ew92W0pA.mft (raw, json)
Hash identifier: ewWxLb4LVwM7Bl3kDncNgQvmqieJidrr/dRKdsvYqmI=
Subject key identifier: 5D:3B:53:67:75:74:FE:21:BB:67:43:D8:6D:EF:7D:97:CA:AE:5D:DB
Authority key identifier: 98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
Certificate issuer: /CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Certificate serial: 01A10813875C8B46D13E1C8E0C958B2BCE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
Manifest number: 0106
Signing time: Sun 04 Oct 2026 18:00:59 +0000
Manifest this update: Sun 04 Oct 2026 18:00:59 +0000
Manifest next update: Mon 05 Oct 2026 18:00:59 +0000
Files and hashes: 1: VEOXlbCEYPXuq0fRxQy_0buCUmo.roa (hash: 1UgV51kONbQoeYkLuDiM4fOStjiZf9fRzxoncm+9qmI=)
2: mBFkq3lqrTz68oOQ9k3ew92W0pA.crl (hash: XfwBTvmo94PXSoAzkqRMxV7pg5J/iVuMM9UbllnCDfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:13:87:5c:8b:46:d1:3e:1c:8e:0c:95:8b:2b:ce:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Validity
Not Before: Oct 4 18:00:59 2026 GMT
Not After : Oct 5 18:00:59 2026 GMT
Subject: CN=5d3b53677574fe21bb6743d86def7d97caae5ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:40:7e:3e:52:79:f1:05:90:2a:6d:15:ba:
f9:67:65:25:2f:09:59:c1:76:c1:79:e0:b2:17:67:
98:7e:14:a2:74:ac:2b:08:b7:80:e7:ac:e7:e9:07:
7c:b0:a6:b0:41:35:ab:a2:c4:65:21:0e:47:04:5c:
1e:80:0b:13:8b:d0:fb:a1:84:51:c4:cb:8e:97:77:
3a:b0:cb:63:98:35:eb:a3:2f:55:cd:7f:33:e6:97:
a7:3b:9a:77:14:69:92:99:55:da:1b:7f:a4:70:e5:
e0:45:aa:a5:00:41:b1:3e:ab:2c:f3:9b:06:7b:18:
c3:6e:a4:fb:a9:25:4e:c2:bc:6b:0e:f7:97:ce:ec:
46:a4:a6:f7:ca:95:32:71:b4:b5:5e:22:2a:e5:b0:
8d:c7:15:d1:d6:35:8b:94:b8:f5:6f:93:61:d6:01:
29:c7:2e:d4:42:0b:3a:e1:65:95:b5:51:2c:e7:1b:
5b:bc:92:b0:c2:e8:59:3f:91:fc:bc:8f:29:b8:54:
38:22:d8:62:e9:e1:ae:20:a3:22:f9:5a:aa:7b:8d:
c3:62:35:ed:51:75:d5:a5:f5:6b:03:55:3a:fc:79:
44:ea:10:0a:0d:16:67:d5:34:41:28:21:c3:c6:e6:
70:3e:85:9f:b0:ac:4c:41:0f:3b:ef:7e:66:ec:1f:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3B:53:67:75:74:FE:21:BB:67:43:D8:6D:EF:7D:97:CA:AE:5D:DB
X509v3 Authority Key Identifier:
keyid:98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2f:04:96:dc:ce:c2:c0:2e:04:c1:fc:8f:d7:fb:c8:46:a3:
fb:e8:e3:3c:cf:27:c8:e2:ec:4c:32:a7:75:49:f1:6b:20:e2:
a6:e1:ff:09:83:11:aa:31:50:dc:fe:7a:76:af:07:6b:db:5b:
2f:22:b6:50:0b:6d:f0:55:52:06:8b:3e:07:bb:ca:47:bb:8f:
f8:ce:50:35:e6:4b:82:3d:e4:4d:41:84:f2:ad:fa:28:71:fe:
3a:83:a2:6c:c5:7e:0b:44:a3:ab:ec:4a:3e:51:94:fa:c9:33:
18:80:13:a9:53:0a:f4:a6:be:b1:fc:d9:e6:50:42:a7:58:9c:
13:a0:5f:56:26:2d:af:b4:9c:78:b5:c6:2a:a9:36:43:da:11:
81:84:69:90:d0:9a:c8:47:93:24:30:c3:df:d0:a0:a4:5b:1b:
0b:87:77:5d:24:d5:4e:2a:9b:97:49:dc:54:5c:48:96:6d:1b:
f6:7f:08:70:13:99:d1:e4:d8:80:d1:61:76:68:76:7c:be:4f:
d8:a8:1e:7c:16:68:7d:3c:5c:5c:57:b4:5e:17:56:e9:87:79:
10:e8:fe:9e:a8:ee:b5:cf:da:f8:de:59:5c:3e:9b:fa:23:4c:
98:3b:4c:67:16:6e:f8:6e:25:13:e0:94:49:13:be:6f:e3:15:
b5:4e:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:28:30 2026 by rpki-client