Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.mft
File: mHGsfwIzoQ0sp6oZusS0l23z1rA.mft (raw, json)
Hash identifier: Ov/2nK1j5HgViga+UHPQyqA2h3PMpAFPEX89Gm+Wfag=
Subject key identifier: CD:D0:21:A3:12:F1:D5:BF:80:18:E9:FA:0E:DE:9F:1B:2F:FF:69:98
Authority key identifier: 98:71:AC:7F:02:33:A1:0D:2C:A7:AA:19:BA:C4:B4:97:6D:F3:D6:B0
Certificate issuer: /CN=9871ac7f0233a10d2ca7aa19bac4b4976df3d6b0
Certificate serial: 01A177DE49970FEB9098C05F3D9C4E1509FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHGsfwIzoQ0sp6oZusS0l23z1rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.mft
Manifest number: 0153
Signing time: Mon 26 Oct 2026 11:00:18 +0000
Manifest this update: Mon 26 Oct 2026 11:00:18 +0000
Manifest next update: Tue 27 Oct 2026 11:00:18 +0000
Files and hashes: 1: l2qbWr8szwhVQErHvG2xUJuCoTU.roa (hash: qL4VVtUTfCz7xaoto5m+PyInvmU6afGLX5c86QcyCrk=)
2: mHGsfwIzoQ0sp6oZusS0l23z1rA.crl (hash: mcf+GzbQTzVMtDT/ESuzFqiBc/R0/CwDA2TeRlR9sjc=)
3: omdp9o_gUvR8pHglA_MM3P_2mrI.roa (hash: 5DA44aR9CbMP0OyTi/8bkActkWf4JkxDerCl5VEmEiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHGsfwIzoQ0sp6oZusS0l23z1rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:49:97:0f:eb:90:98:c0:5f:3d:9c:4e:15:09:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9871ac7f0233a10d2ca7aa19bac4b4976df3d6b0
Validity
Not Before: Oct 26 11:00:18 2026 GMT
Not After : Oct 27 11:00:18 2026 GMT
Subject: CN=cdd021a312f1d5bf8018e9fa0ede9f1b2fff6998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:c6:54:8e:15:49:b7:f7:84:fb:06:fa:82:
bd:65:cd:de:61:44:97:b5:d1:38:9f:64:4f:a8:5b:
47:68:30:a5:dc:32:c3:7f:a5:26:63:0a:15:11:5e:
29:f1:7f:38:b6:d6:71:58:bd:e2:e6:4d:7b:4e:98:
01:3c:3f:3b:9b:68:40:80:43:aa:c2:db:94:6b:24:
6f:f2:3c:b6:b1:22:40:b4:1c:f2:37:be:7f:59:50:
5d:4b:a5:a5:ad:55:39:8a:21:6f:6a:14:18:86:f4:
bd:bb:fc:4f:b8:98:dc:60:20:06:73:48:36:e2:13:
56:d6:5c:04:f7:39:a4:d6:75:cc:b3:34:0f:4c:99:
e5:e6:f3:71:89:af:22:ad:7b:2b:ea:a2:89:b2:43:
64:58:50:d0:2f:e6:d1:8e:11:7e:2d:a2:c8:e2:dc:
eb:2d:0e:ae:0d:14:b3:75:18:b6:c6:c9:f8:cf:56:
7c:44:72:5c:12:77:e6:37:a5:d5:34:b3:97:b8:31:
6c:09:9a:3a:0e:f1:df:a2:aa:a2:06:d2:16:28:43:
a7:ab:3b:38:04:1b:4b:77:80:04:6f:64:c5:64:07:
6f:b9:34:e7:24:62:c7:69:8f:80:6f:ac:7c:fc:e9:
eb:4f:30:ce:2e:41:57:94:fb:8b:4e:36:34:4c:13:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D0:21:A3:12:F1:D5:BF:80:18:E9:FA:0E:DE:9F:1B:2F:FF:69:98
X509v3 Authority Key Identifier:
keyid:98:71:AC:7F:02:33:A1:0D:2C:A7:AA:19:BA:C4:B4:97:6D:F3:D6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHGsfwIzoQ0sp6oZusS0l23z1rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cd:fb:25:ca:52:06:31:3d:5c:1e:63:e1:05:42:3e:09:99:
5e:f7:41:ed:b6:12:77:7e:5c:31:d0:12:14:14:21:69:f3:d0:
7a:89:29:5d:e9:da:21:60:4b:5b:22:d6:db:35:8e:f9:02:90:
9f:d7:73:42:a3:64:cc:86:09:e1:da:66:90:12:45:57:7d:44:
93:43:e6:f3:38:64:19:ce:5a:67:20:76:6b:c2:f0:d4:e6:c4:
3a:29:a7:f9:f3:ad:5f:9e:65:16:e3:36:77:97:98:f2:76:27:
b3:06:83:6c:53:cc:4d:45:8d:83:03:8a:0e:d1:b6:4a:3a:ae:
5d:cc:64:00:31:da:16:64:7c:21:96:24:60:d6:29:94:33:c5:
51:a2:29:03:3f:e6:04:a3:ed:18:d8:e6:f1:47:b3:03:ee:6f:
ad:c9:f3:8c:08:6c:96:56:c9:de:c7:0e:6a:ff:cd:54:7d:45:
a5:16:de:95:51:db:53:61:bb:3c:4c:c5:fc:77:a4:b5:ca:57:
1e:f4:73:60:b9:1e:ab:8c:aa:0b:87:62:f7:a8:3b:5e:fb:48:
dd:f6:a6:43:54:c2:4a:bd:5d:e4:42:0a:71:55:02:e4:04:8f:
e7:c6:ab:5a:78:82:4b:05:df:a8:7c:96:e7:16:bd:07:12:e6:
f9:d5:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:10:49 2026 by rpki-client