Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
File: n5D0diDPsoZkkPXRGL0lpQBTEeY.mft (raw, json)
Hash identifier: LYYJTV78RvHnz4OvvgW7oM6NfWDcEvdtzjdNuUwthMI=
Subject key identifier: 05:52:0A:00:CF:D3:05:04:97:8A:FC:1F:21:88:85:0D:0F:8A:23:02
Authority key identifier: 9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
Certificate issuer: /CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Certificate serial: 01A12CC4B19911A2C8708378ADF4A5E5F558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
Manifest number: 0115
Signing time: Sun 11 Oct 2026 21:00:50 +0000
Manifest this update: Sun 11 Oct 2026 21:00:50 +0000
Manifest next update: Mon 12 Oct 2026 21:00:50 +0000
Files and hashes: 1: Qk8SUDtv35PQudBghJLMDCkV05Y.roa (hash: CGtXCN1Ppc2jLH4a4E4mJ8Yb24I37XQwBgJ85+uhimE=)
2: VLazWnEoP4FNqXwAq5qItoa84gg.roa (hash: GIpN7+SpErb0kVRnHT1vQxVl+Mf313Qjqs5dCJFjsZA=)
3: n5D0diDPsoZkkPXRGL0lpQBTEeY.crl (hash: Ma1GmlTQUrPGTgciqmDNK1JLRb/PZ+vx41Wn/CajyFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c4:b1:99:11:a2:c8:70:83:78:ad:f4:a5:e5:f5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Validity
Not Before: Oct 11 21:00:50 2026 GMT
Not After : Oct 12 21:00:50 2026 GMT
Subject: CN=05520a00cfd30504978afc1f2188850d0f8a2302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:57:f1:ab:e0:de:3f:c0:bc:84:c9:8c:8b:
92:f8:db:7c:19:39:42:51:ec:5d:4a:22:40:11:af:
54:fb:57:15:e6:1b:53:79:bb:9a:47:45:57:a1:0c:
39:62:8e:49:09:29:5a:2a:12:63:84:83:98:91:35:
f8:c1:aa:ce:0c:43:2f:6a:92:ab:24:6b:db:24:12:
90:49:44:72:9c:1f:5d:15:5c:ae:68:d6:1b:a7:95:
07:6a:3f:1d:6a:2a:7a:84:6f:de:38:fc:91:f2:77:
18:96:c7:2c:58:72:c4:51:40:fd:46:a1:f5:7a:ff:
b4:2c:68:94:4a:0d:40:69:5a:2c:93:01:05:6b:e8:
66:28:5f:d8:a8:bd:ac:d5:a1:88:9a:ad:ba:0a:43:
b6:89:9f:6d:50:ba:b4:28:f3:34:7a:52:21:de:95:
e5:2e:f4:97:ae:77:4f:47:e6:27:06:9b:9b:37:65:
a3:6a:48:24:ae:42:fa:33:aa:89:b7:6e:cd:1b:b8:
b6:90:d9:36:41:fe:71:6e:41:4b:49:1a:f1:a0:21:
82:65:8e:f0:37:55:ef:34:d1:15:da:10:cc:a8:52:
cb:a8:1e:2e:9d:3d:14:ce:a5:13:72:66:d0:a6:82:
62:54:4c:f0:09:3b:d9:0c:b7:7e:74:4f:3e:a8:6b:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:0A:00:CF:D3:05:04:97:8A:FC:1F:21:88:85:0D:0F:8A:23:02
X509v3 Authority Key Identifier:
keyid:9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f1:1d:9b:39:4a:fe:8a:a8:2f:e9:56:d6:f7:98:13:b9:5c:
48:84:d8:96:7f:39:3b:35:ed:e8:cb:e8:34:c6:9e:e7:b5:f9:
47:cb:7e:47:6b:04:ef:ec:2b:2f:76:6c:da:75:0c:a1:93:ef:
2b:5e:59:c1:85:6d:a1:db:aa:30:36:e7:ed:8f:a8:71:34:40:
fa:e2:bd:33:1c:74:de:ee:90:5e:70:69:7e:03:01:97:a6:6e:
45:55:24:96:66:e3:c2:dd:23:7e:99:71:0b:79:d9:d8:ad:68:
ee:90:32:fd:89:b0:4f:b5:0c:f5:32:fc:83:db:6e:bf:95:e6:
e7:9d:ea:83:39:2f:21:0c:84:6c:52:ef:68:8d:b3:b1:a5:54:
63:7e:21:1d:09:0c:92:8e:8d:1c:33:06:95:fa:9d:8c:51:cc:
22:fd:3a:b4:c2:e8:a5:29:b6:10:ab:d3:40:9d:72:30:6e:8d:
61:ba:ca:c9:ac:df:8b:9a:d7:ec:f5:4f:b5:e9:d3:12:eb:88:
73:ca:49:62:24:df:6f:01:4b:b4:54:57:29:d6:23:63:6e:64:
75:f5:18:55:60:85:bd:7d:86:99:61:50:2d:1e:9e:cc:5b:ea:
85:c4:c6:20:4e:47:1d:20:93:20:09:ce:a1:f2:49:32:09:4d:
03:7e:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:33:02 2026 by rpki-client