Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier: JmUKJL1HdH7ihlaaYlD47Pr35IRKgXmgq/PinpbvX+c=
Subject key identifier: 61:33:59:AD:E9:68:0A:07:C5:DB:FE:B8:E5:18:3E:EF:4B:68:FB:42
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial: 01A0E8C130892C90E0A5804097948E57B006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number: 0853
Signing time: Mon 28 Sep 2026 16:02:49 +0000
Manifest this update: Mon 28 Sep 2026 16:02:49 +0000
Manifest next update: Tue 29 Sep 2026 16:02:49 +0000
Files and hashes: 1: 8YcVP3VklLR5i4GG8rnBQdHA76g.roa (hash: WsvT6kIFgDTr5dW65eaLGj20QeNg4nV6eveWdjaSMx0=)
2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: ocecfxx0vOn6rpbLs7AgFKUqloIpFrHTTWzJsU5q+8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:30:89:2c:90:e0:a5:80:40:97:94:8e:57:b0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Validity
Not Before: Sep 28 16:02:49 2026 GMT
Not After : Sep 29 16:02:49 2026 GMT
Subject: CN=613359ade9680a07c5dbfeb8e5183eef4b68fb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:97:41:27:b5:e3:20:4e:1e:c1:7f:2d:8b:
ec:21:5d:14:3b:1b:18:92:87:08:55:6a:59:e3:98:
8c:8d:b3:e8:1e:18:96:cd:e2:9e:b2:cb:a3:8b:5e:
94:70:4c:02:d5:19:e5:c4:73:c1:6a:c4:69:11:58:
d4:1b:2e:f5:47:4a:42:67:3f:be:df:2b:f1:91:fc:
06:47:22:ab:72:f0:4a:1e:1f:fe:36:eb:57:5e:d3:
57:a9:74:f6:d7:a0:1b:07:56:21:1d:eb:0b:4f:b7:
8b:9c:9f:d2:45:0c:06:3e:d6:12:fe:c2:3b:c8:cf:
e6:52:67:d7:ee:6c:df:94:65:e1:36:de:6e:03:fa:
b8:9d:33:bd:ae:e2:b9:50:98:61:6d:09:8a:d7:96:
39:5b:19:77:db:a2:55:b0:71:8f:32:9c:b2:37:58:
5a:16:2f:93:f7:7e:1a:58:7f:0c:34:21:1b:29:95:
90:3f:10:d4:44:71:ec:fb:a3:63:02:52:d0:c2:9f:
22:2e:fc:7b:b0:59:4a:28:28:e4:ec:2a:8c:a8:7b:
d3:18:57:a6:c2:5f:a1:12:6d:da:30:1c:89:bd:c7:
fb:c7:bd:3e:e0:13:39:5e:96:8e:a9:ee:93:a9:b9:
7b:29:d1:ac:d3:a2:1b:c0:f0:4e:e0:49:2e:99:44:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:33:59:AD:E9:68:0A:07:C5:DB:FE:B8:E5:18:3E:EF:4B:68:FB:42
X509v3 Authority Key Identifier:
keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0d:92:aa:b4:6f:cc:28:29:33:34:c1:7c:5a:68:05:9d:f1:
bf:e0:71:65:b2:ab:bd:d5:b4:1b:db:48:09:e5:2b:ce:db:5c:
55:b5:ab:6e:b0:53:a8:7e:c8:b3:27:a9:d7:c4:f0:01:2a:bc:
20:1a:4a:d6:d8:bf:22:76:33:d2:46:40:be:93:32:b9:83:b9:
a2:b5:1e:4d:0e:54:ad:53:01:01:f5:a6:22:6b:2d:a3:ea:cf:
32:2a:0d:98:89:4e:39:d0:31:96:0f:d7:14:4c:d9:27:14:37:
1c:24:7d:be:94:70:ea:d5:69:33:df:67:80:3e:81:c5:5b:0c:
75:5d:76:57:ec:37:3e:bc:bd:f0:28:84:ec:b5:c8:5b:82:89:
72:8b:06:e6:8d:85:e7:b5:ec:54:83:41:51:32:b6:17:26:cb:
c7:a9:47:35:33:56:26:4a:87:c2:1c:16:ab:0e:30:1a:b0:ac:
17:16:ce:92:19:2b:85:73:08:6c:2a:07:d1:f3:3c:cc:3e:41:
c7:1a:d2:ca:4f:d7:2c:3c:61:4c:77:cd:27:57:e6:27:aa:50:
28:dc:ba:c7:db:72:c7:e5:47:b8:57:20:4b:49:52:3d:93:e7:
94:7c:25:2f:f8:22:cb:86:f6:db:90:17:0b:11:fd:a7:7a:79:
95:b4:08:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:54 2026 by rpki-client