Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: Z3AqvkAL7/8FnZuKlyfB302fOtwztRZI7LDd7hrmAGs=
Subject key identifier: 02:5F:7F:71:CA:2C:E6:C9:5E:AA:45:4A:EE:C1:7F:7F:69:00:9D:37
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 01A0DDCE60C987E912899B85DA888B23248E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 04DC
Signing time: Sat 26 Sep 2026 13:01:24 +0000
Manifest this update: Sat 26 Sep 2026 13:01:24 +0000
Manifest next update: Sun 27 Sep 2026 13:01:24 +0000
Files and hashes: 1: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: Q1EXH1JFWoU9fvlFneNOoK3I9pdr9dh31cz0g8iPf3k=)
2: pYJ77Er_zqYbx41sBdo_5Z_kbUw.roa (hash: YnpRc5L4nUM7CR7mnzL6CNBLZnDMNdSR23HD+fN/hSc=)
3: zdVWA8x7Os7mCMN0eXBm1ttPtdc.roa (hash: +6pIktdgc4eoF9sOvoW/ifb/Jig+BT9B1Ye47c39Uds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:60:c9:87:e9:12:89:9b:85:da:88:8b:23:24:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Sep 26 13:01:24 2026 GMT
Not After : Sep 27 13:01:24 2026 GMT
Subject: CN=025f7f71ca2ce6c95eaa454aeec17f7f69009d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:5c:86:65:6b:8a:f2:a4:7e:fb:a0:9c:03:
9d:37:d3:50:bc:e8:61:a8:75:ed:db:d0:7e:54:bd:
f5:a3:72:9a:1b:1b:14:80:2a:53:a1:97:57:69:0e:
c2:1b:8a:58:c5:cb:31:d8:b4:62:33:b6:0a:71:a4:
55:45:3a:61:59:92:0a:23:93:ee:04:62:e3:39:e2:
88:be:dc:25:48:6f:8e:70:62:42:a9:54:77:f5:70:
4e:06:ed:15:5e:b6:78:07:69:bc:9c:e2:84:77:b4:
9b:55:a9:ca:86:b8:22:4b:f0:da:a7:41:15:c9:35:
9e:b6:7c:82:c2:79:ef:b0:26:ac:8a:03:3f:f7:6d:
14:b4:fc:81:de:46:c3:65:3d:ad:bb:29:09:1f:73:
b9:52:f3:65:41:f6:a2:c2:0f:de:dd:98:e0:36:be:
60:62:91:c1:0f:7d:7f:fa:3d:38:16:be:45:85:74:
4f:83:bb:c4:dd:ae:b8:f7:67:af:b9:33:86:b9:60:
68:12:e9:fa:05:e9:67:cf:70:65:cb:7b:fd:ee:2e:
a9:99:a6:a5:8e:b9:52:7d:78:af:b6:65:80:eb:9a:
75:97:53:7d:51:10:52:58:0a:28:ef:51:e2:60:2d:
b9:04:03:e0:ef:e8:45:85:ab:7e:ad:04:ba:55:ed:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5F:7F:71:CA:2C:E6:C9:5E:AA:45:4A:EE:C1:7F:7F:69:00:9D:37
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:36:37:b7:35:6d:fb:c5:b4:74:62:db:bd:eb:39:48:0a:35:
28:55:45:e0:49:31:54:94:6d:c1:1a:5b:b5:08:22:55:57:6c:
4b:8b:ab:26:dc:36:cf:07:80:1f:76:b2:1d:3e:96:ee:8e:98:
d9:5f:01:78:19:46:3e:f9:67:6b:7a:c4:fe:57:ef:65:89:92:
e5:76:65:29:20:b9:06:87:2e:7f:31:30:92:0b:64:bb:da:b2:
d8:fe:ef:81:f3:89:7d:7b:87:ae:53:10:41:f4:e9:f9:82:2b:
4e:c7:ad:9f:34:38:88:57:a0:62:37:e1:f6:08:a6:fc:ed:3b:
eb:5e:4a:bd:f6:85:40:64:9c:c4:c2:0e:33:41:6e:0f:29:04:
15:83:37:7a:1f:3a:a6:23:2d:07:43:0c:40:02:38:a7:f2:2b:
98:81:70:60:a2:9c:90:83:92:15:24:29:65:14:20:ce:89:50:
12:9a:9a:8a:01:cb:12:a8:fe:9f:6d:f4:da:40:f4:9e:85:fa:
a5:f1:0c:43:dc:2c:d9:04:62:3b:9d:17:f6:d3:63:68:11:95:
64:d8:93:b8:83:f6:47:e4:bb:49:59:36:49:d7:26:0d:3b:2d:
30:64:d0:a1:7f:79:5e:ea:5c:da:11:f2:6f:f9:1c:fd:63:1d:
be:60:b8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:29:33 2026 by rpki-client