Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: jEIkkEzBJmv9kfjuiYZAMtMdzryKagNrGXG2/YOAtg4=
Subject key identifier: 28:2A:77:86:04:82:39:4E:B7:E4:C5:80:C5:43:99:AE:9E:4D:8B:62
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 01A0D727F2FEB2581ACAECD4DB547DCD738D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 1143
Signing time: Fri 25 Sep 2026 06:01:54 +0000
Manifest this update: Fri 25 Sep 2026 06:01:54 +0000
Manifest next update: Sat 26 Sep 2026 06:01:54 +0000
Files and hashes: 1: Qqa4Xw7uDETbeUhxEJYV1RcGxGI.roa (hash: jln1MbdeKaOyBgT7+wfLZLWLANQbRohXKREO1JAvQQU=)
2: j6yoIF9AWUp9UFDKXH65rXLEiss.roa (hash: YAXw+V8+kO2QpRAGh9PLZOBVimIgU4loSZgv6+jbYAg=)
3: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: 4nDAfLkh39wNn86yJ8wey8wSOIRUQ73qefm38egKtPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:f2:fe:b2:58:1a:ca:ec:d4:db:54:7d:cd:73:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Sep 25 06:01:54 2026 GMT
Not After : Sep 26 06:01:54 2026 GMT
Subject: CN=282a77860482394eb7e4c580c54399ae9e4d8b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:cb:d1:81:a5:7a:c5:9c:e2:01:b4:8a:3e:
b1:a4:1e:4f:83:3e:b5:99:e9:85:83:87:5d:c4:2c:
25:e6:3d:82:71:ce:72:08:b1:2b:1b:58:82:c0:99:
f4:f4:6f:ac:f2:3e:24:81:82:e9:e5:de:25:f5:a0:
ad:80:df:3a:c8:da:8d:14:7e:90:c6:18:38:ce:c5:
23:07:9d:c1:8a:dd:20:9e:d8:f3:08:4c:b3:bd:e1:
52:d2:d5:c9:5b:c0:db:1f:a6:fb:82:79:12:ec:aa:
67:0c:ef:c2:da:b5:25:53:a9:84:55:18:67:cc:fe:
30:89:68:3c:59:0f:27:06:5e:a2:cb:36:c8:71:1a:
eb:7c:e9:58:c9:64:10:ef:0d:22:bc:6c:e7:0e:26:
6a:d6:22:cc:bf:44:29:50:44:11:1d:24:8a:88:58:
a2:5b:f9:63:62:2f:3c:ae:d3:dd:49:00:c8:a6:1d:
88:f5:4d:e1:e6:a3:6b:23:7b:fa:97:cd:48:14:8a:
b7:e7:0a:c3:0c:96:c5:e2:8d:83:71:5d:0e:0a:32:
8a:f4:e2:26:c3:28:4e:28:96:2c:c6:ba:85:99:f2:
ca:bc:4b:3c:bb:4a:ad:06:71:8b:d4:21:d7:f8:d1:
8f:78:28:84:f8:cb:e8:47:53:cc:65:00:18:5d:2e:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:77:86:04:82:39:4E:B7:E4:C5:80:C5:43:99:AE:9E:4D:8B:62
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8d:53:83:d7:06:6b:ec:55:59:e5:28:87:e5:9a:e1:b1:1a:
b9:07:0b:75:6e:9b:b6:2c:8a:f9:84:07:83:e0:93:1f:ec:42:
ac:27:c4:72:16:39:30:36:3a:f2:79:76:10:70:e8:c1:05:d1:
f9:3d:cf:51:b7:cb:9a:4e:3f:b3:ac:46:25:1c:94:c5:2c:e8:
71:03:60:2a:ef:65:73:f4:ee:fc:90:e1:4c:19:d9:5f:87:74:
35:ca:42:62:e4:a1:56:3d:b6:d5:64:f2:39:e1:d4:4d:16:1c:
b8:e0:56:95:77:cc:1f:86:5e:30:3e:11:06:9d:5f:61:09:22:
16:ce:56:96:18:6b:20:cb:67:af:66:ff:86:0c:be:10:c1:af:
02:3f:7c:bb:54:d0:bb:03:8a:ff:6f:94:dc:54:5e:2a:38:71:
76:88:53:f5:e1:1a:3b:06:97:3e:84:36:02:7b:81:da:02:16:
b0:ff:51:73:ab:0a:45:28:95:8f:5b:8a:e1:3b:66:89:de:a6:
64:e0:1c:9a:38:30:17:d2:43:13:41:20:84:4f:c3:19:91:31:
55:43:95:8a:78:8c:0f:25:37:f4:7f:f8:da:39:11:70:8c:b1:
f6:aa:60:86:b3:6c:fe:11:6a:cf:9d:79:e2:e9:20:24:3a:11:
f5:f8:eb:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXJ/L+slgayuzU21R9zXONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTk4ZWU2Y2ZiM2ZiYTgzYjk3MmFlMTI2NTNiNWQ5ZmM3
MDcwMmUwHhcNMjYwOTI1MDYwMTU0WhcNMjYwOTI2MDYwMTU0WjAzMTEwLwYDVQQD
EygyODJhNzc4NjA0ODIzOTRlYjdlNGM1ODBjNTQzOTlhZTllNGQ4YjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfjL0YGlesWc4gG0ij6xpB5Pgz61
memFg4ddxCwl5j2Ccc5yCLErG1iCwJn09G+s8j4kgYLp5d4l9aCtgN86yNqNFH6Q
xhg4zsUjB53Bit0gntjzCEyzveFS0tXJW8DbH6b7gnkS7KpnDO/C2rUlU6mEVRhn
zP4wiWg8WQ8nBl6iyzbIcRrrfOlYyWQQ7w0ivGznDiZq1iLMv0QpUEQRHSSKiFii
W/ljYi88rtPdSQDIph2I9U3h5qNrI3v6l81IFIq35wrDDJbF4o2DcV0OCjKK9OIm
wyhOKJYsxrqFmfLKvEs8u0qtBnGL1CHX+NGPeCiE+MvoR1PMZQAYXS5f+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgqd4YEgjlOt+TFgMVDma6eTYtiMB8GA1UdIwQY
MBaAFJ/pjubPs/uoO5cq4SZTtdn8cHAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgt
MTNmODk4YmM3ZDBlLzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgtMTNmODk4YmM3ZDBl
LzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI41Tg9cG
a+xVWeUoh+Wa4bEauQcLdW6btiyK+YQHg+CTH+xCrCfEchY5MDY68nl2EHDowQXR
+T3PUbfLmk4/s6xGJRyUxSzocQNgKu9lc/Tu/JDhTBnZX4d0NcpCYuShVj221WTy
OeHUTRYcuOBWlXfMH4ZeMD4RBp1fYQkiFs5WlhhrIMtnr2b/hgy+EMGvAj98u1TQ
uwOK/2+U3FReKjhxdohT9eEaOwaXPoQ2AnuB2gIWsP9Rc6sKRSiVj1uK4Ttmid6m
ZOAcmjgwF9JDE0EghE/DGZExVUOViniMDyU39H/42jkRcIyx9qpghrNs/hFqz515
4ukgJDoR9fjrKg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:15:55 2026 by rpki-client