Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
File: 54ul2Y1Izr1a0EwIvwkIKxKn46s.mft (raw, json)
Hash identifier: LvZlpim/VFDVnFzGPUQgx6Hds4gVgMQIEwbnsjkcVtU=
Subject key identifier: 0C:6B:00:89:18:A8:4E:55:5F:8E:F8:03:2E:11:53:78:BB:44:93:D4
Authority key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Certificate issuer: /CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Certificate serial: 01A132220C722F4C80047E6E114CA9A81238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
Manifest number: 0DFF
Signing time: Mon 12 Oct 2026 22:00:54 +0000
Manifest this update: Mon 12 Oct 2026 22:00:54 +0000
Manifest next update: Tue 13 Oct 2026 22:00:54 +0000
Files and hashes: 1: 54ul2Y1Izr1a0EwIvwkIKxKn46s.crl (hash: bmCy2YedvZyS3sQuccYfBFykiSIbtf462X9WsTmfnqM=)
2: Gr9DH2WwJbgZo0WIG9eWTKHCcFo.roa (hash: FB5htKHBt6Y7JRV/Z29yqmijt+k8tYh3TDPpzFpqMJI=)
3: NwUxZnR6ilqF9CfQdG6rMzsPqx4.roa (hash: YfrSwZsx1POCSy8VLN9vekskBNjs6p4NHoLWulpvdx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:22:0c:72:2f:4c:80:04:7e:6e:11:4c:a9:a8:12:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Validity
Not Before: Oct 12 22:00:54 2026 GMT
Not After : Oct 13 22:00:54 2026 GMT
Subject: CN=0c6b008918a84e555f8ef8032e115378bb4493d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3f:d2:85:ae:94:e4:4d:a8:6c:5d:27:6f:df:
5b:25:ad:3b:9b:ad:d5:dc:b8:3e:14:4b:3c:88:4c:
cb:b0:0b:4e:2b:f0:da:f4:d9:9e:99:62:e2:c2:6d:
96:25:ae:8a:95:9f:09:c3:c3:ba:4b:de:2f:26:b9:
34:33:be:37:36:42:b4:ce:46:5e:f3:f6:65:be:84:
05:3e:2e:8d:c9:b7:4a:95:2e:b0:1f:56:01:1c:fd:
40:2b:7e:94:6d:69:42:c2:51:7a:86:9c:4d:2f:6c:
e1:52:6a:74:25:96:16:c8:69:ee:ee:d7:3e:6c:0e:
26:a6:76:0d:f4:2c:89:88:a6:d0:d4:36:a2:81:de:
5a:18:27:a9:5c:a4:17:36:2d:66:fd:d3:f8:41:d4:
5f:2e:c0:ce:aa:3f:e2:77:e3:92:a9:c3:ab:2a:1d:
2b:9a:dc:3c:03:5e:ad:10:c9:36:85:69:89:10:66:
9e:d6:68:c9:c5:1b:7e:62:a0:81:0d:66:86:86:22:
38:99:07:35:6a:89:19:12:e3:2a:2a:ac:92:fb:71:
e3:0c:4c:33:c2:ee:dc:28:83:ab:7f:d6:af:25:5d:
db:72:6e:85:a1:fc:0e:94:8c:f3:e7:8c:3b:14:39:
48:fd:98:af:3f:19:2a:07:c0:8f:04:34:88:77:90:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6B:00:89:18:A8:4E:55:5F:8E:F8:03:2E:11:53:78:BB:44:93:D4
X509v3 Authority Key Identifier:
keyid:E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:84:c8:f5:fb:2e:37:4a:a1:dc:b7:6b:66:93:62:35:2a:45:
5f:21:d2:77:71:32:8a:77:2a:df:7a:82:65:14:0f:c0:09:88:
4c:b7:a9:aa:5c:da:e1:db:e8:63:9e:da:07:a6:05:95:cd:8e:
f9:e4:2f:bc:2f:19:e2:33:f5:ba:1f:ef:a4:b7:91:13:78:aa:
c5:08:de:e3:93:be:d3:95:cf:49:c6:c7:4b:70:8b:98:88:71:
78:be:12:2c:dd:90:37:7f:ad:77:7f:c3:33:a3:77:09:d4:c7:
e7:cd:b1:02:68:8a:ee:6b:43:fe:a8:d4:f7:7c:70:56:cb:2a:
8d:47:0d:bf:f4:1f:db:8c:6a:b1:45:46:cf:e7:9f:ba:35:7a:
42:5b:40:b4:a3:b7:26:94:69:eb:55:91:4e:68:47:d3:d5:b7:
79:b5:69:bd:65:4b:52:fc:84:e7:14:a4:0d:94:cc:a7:1c:49:
e5:b1:dd:03:65:18:4f:ac:df:4e:20:ba:67:c9:e5:d0:c7:98:
d9:2d:cb:23:42:7f:7e:4d:0d:9d:76:fb:57:15:bd:c6:d3:fa:
77:09:b4:83:57:94:91:0b:e4:e5:b0:79:30:9a:95:2b:fe:f0:
4a:0a:10:1a:8e:b3:46:cc:fa:c8:d2:c4:1b:94:df:27:f1:56:
3c:b4:ef:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:13:15 2026 by rpki-client