Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: gAhSWymoab50aNhfGQErus2sJYXNHiodsMNCangXqeQ=
Subject key identifier: 01:EF:3B:43:67:FA:A5:E2:F1:38:60:39:3C:C5:30:02:3B:3D:EF:A2
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 01A1DCB8E21E131CF7434E7DF3FE9242D3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 0560
Signing time: Sun 15 Nov 2026 01:01:06 +0000
Manifest this update: Sun 15 Nov 2026 01:01:06 +0000
Manifest next update: Mon 16 Nov 2026 01:01:06 +0000
Files and hashes: 1: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: qf2oXKPqUDIHytmRTRpioXKOphYp4XJR5sl2bipT7O8=)
2: pYJ77Er_zqYbx41sBdo_5Z_kbUw.roa (hash: YnpRc5L4nUM7CR7mnzL6CNBLZnDMNdSR23HD+fN/hSc=)
3: zdVWA8x7Os7mCMN0eXBm1ttPtdc.roa (hash: +6pIktdgc4eoF9sOvoW/ifb/Jig+BT9B1Ye47c39Uds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:e2:1e:13:1c:f7:43:4e:7d:f3:fe:92:42:d3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Nov 15 01:01:06 2026 GMT
Not After : Nov 16 01:01:06 2026 GMT
Subject: CN=01ef3b4367faa5e2f13860393cc530023b3defa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:2d:16:67:bf:d1:1c:e1:15:93:b1:a9:4c:
2c:30:da:e0:52:38:f5:f0:c7:ee:73:a4:6e:67:b1:
23:6e:e6:8b:5f:cb:89:71:89:1f:af:1d:92:3f:41:
ad:08:be:a3:57:0d:cd:01:a5:d9:a1:5b:23:8a:2d:
5c:e7:33:ce:50:04:cf:0c:29:e3:c0:b6:21:8a:b4:
e7:88:14:05:6f:c9:43:b6:7a:a5:fc:f6:ff:4f:9d:
6c:ad:f4:dd:5f:3a:b6:70:c5:64:78:d6:20:a8:2c:
5e:6f:26:c6:ba:ac:1d:42:00:e3:b6:52:a9:9e:20:
e8:7a:42:67:76:e7:ba:36:d2:d8:c2:1e:30:2b:79:
31:da:7b:cf:cf:98:d3:ed:55:39:b4:44:0c:b3:f5:
7f:e3:79:b5:b2:aa:12:e2:0e:d1:1a:3c:e4:95:64:
89:f9:2e:9f:d2:19:7a:14:60:51:34:21:e0:2d:f8:
89:7b:65:cb:a2:c0:77:45:0f:fb:87:ae:03:80:0f:
75:1a:8d:4a:90:60:c3:28:31:9e:b8:5e:34:b2:79:
9b:d0:74:67:6c:3d:f0:f9:f5:0c:7d:c0:32:c8:f5:
c5:4c:25:1b:9d:48:05:d1:e0:fa:6b:62:e4:d6:b5:
07:72:a8:6c:14:f6:ac:c9:ef:bf:07:d7:56:e6:a2:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:3B:43:67:FA:A5:E2:F1:38:60:39:3C:C5:30:02:3B:3D:EF:A2
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f8:e5:db:55:8e:a6:b2:a3:b5:33:02:e1:83:89:48:29:dd:
0f:80:5e:c6:65:8a:b5:ae:c3:cc:77:b0:59:a0:8c:2b:82:fb:
23:39:7f:89:f8:01:84:20:88:39:58:56:8a:e3:74:b0:e2:a3:
8a:a1:15:3e:47:14:12:af:21:29:b0:73:db:76:69:77:6c:07:
71:79:ba:19:fd:09:2f:2a:66:a2:1e:3a:1b:7e:c9:48:4b:96:
f3:db:36:bd:76:e3:b4:80:23:3e:86:44:1f:58:ee:ab:fe:ed:
5f:d6:99:be:4f:d3:91:1c:91:35:83:79:4c:cd:2c:d2:ce:c0:
7b:80:06:39:90:2e:37:e4:5c:b5:dd:48:9f:ca:a5:99:29:6a:
c3:c5:40:43:07:22:80:81:e4:e0:ae:27:86:33:43:26:09:d5:
ed:ab:5d:9f:35:03:a8:67:86:3e:a1:8c:e0:c9:ce:72:50:6c:
ef:78:91:99:90:12:c9:74:2e:f9:e3:ba:42:19:e6:23:c8:1c:
7d:de:30:e3:71:ab:10:78:bc:fc:d4:74:c5:51:43:e1:e6:b2:
27:52:30:4e:01:7a:38:0f:62:e4:64:46:ed:08:d4:91:e2:4e:
20:1a:4d:c2:26:58:4c:34:fe:49:5e:cb:96:12:9d:bf:3c:7a:
85:69:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:37 2026 by rpki-client