Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File: 85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier: /+sdukv1HJsiz2EUB6IiKrpgNOMXjQZEcDqFOFGeT1w=
Subject key identifier: 29:8A:C3:39:CF:49:BB:E7:88:9A:F5:21:BF:64:61:A7:9B:11:13:35
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 01A0CE91CC86DE3E11195D0FD14CFC3C7A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 14:00:56 +0000
Manifest this update: Wed 23 Sep 2026 14:00:56 +0000
Manifest next update: Thu 24 Sep 2026 14:00:56 +0000
Files and hashes: 1: 83YQUlILQ7GDfrTJPK3LZaXUsK8.roa (hash: vNXxGjQTXNQA/zSyVijjMQoJOd0f9h52cpzw4JKC8XQ=)
2: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: DeUcjoaHvaPtyWsFz5TT4F+ymRwKHSzTwe9jxEgrl7M=)
3: tZjW0PJX2KzKZhqd-IvCr2S66XA.roa (hash: 7bMA6kUNG6YTWVlD3a7zH0NzQxfAjb1JxS2t14+Bg1s=)
4: yX7-VtqrrdDv7vs2gdtp2PBHHms.roa (hash: 7Eaxb4xLBZMek5rOGdgNQUBxlSvYpqN5jH75GBFXgPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:cc:86:de:3e:11:19:5d:0f:d1:4c:fc:3c:7a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Sep 23 14:00:56 2026 GMT
Not After : Sep 24 14:00:56 2026 GMT
Subject: CN=298ac339cf49bbe7889af521bf6461a79b111335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:19:6e:f8:44:71:12:ce:e4:eb:94:f4:35:24:
69:b9:59:2f:a9:d8:f3:95:76:d5:25:81:5f:1c:d6:
4c:7f:7b:91:e5:de:4f:d9:1b:fa:fc:d3:6f:dd:2f:
a0:85:df:34:c2:84:85:92:b5:99:cf:1f:93:c7:0d:
01:8a:d0:e5:f7:50:e7:c3:e4:7b:49:2a:6a:72:7e:
76:74:d9:95:56:1d:ad:9a:7c:eb:4f:c3:2d:53:3e:
f5:92:75:ce:37:6e:40:0f:5a:60:12:a6:fc:31:34:
89:7e:3e:bd:d0:0d:d7:d9:42:63:24:7d:b9:63:5a:
40:22:91:eb:c5:ae:09:09:e9:f2:78:1c:0d:55:b2:
50:d7:45:db:e1:3f:07:e0:eb:89:74:b8:28:f3:30:
b1:3d:57:ef:3d:32:da:18:16:26:cf:b6:7e:27:0f:
08:5a:6d:db:fb:3f:f3:c0:d5:e8:73:f1:11:c5:4d:
2e:1e:d2:08:76:f6:1c:33:39:09:28:ed:16:49:4c:
15:cf:86:cc:a1:8a:e3:89:0a:7a:7f:59:fe:e7:10:
a0:9d:f2:b7:23:d7:a0:f0:0b:7c:95:ff:7f:2b:b1:
cc:af:04:7a:4e:1c:09:82:c1:59:f0:8f:e2:76:61:
b7:f4:7d:47:06:07:e5:16:69:bd:73:11:fd:4f:49:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8A:C3:39:CF:49:BB:E7:88:9A:F5:21:BF:64:61:A7:9B:11:13:35
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:27:db:ff:6f:5d:bb:a0:56:4f:23:b9:90:0f:1d:75:07:48:
d7:a0:8e:be:e0:c3:aa:37:1d:75:74:c2:94:fd:36:3f:a0:fd:
b0:39:93:4f:3b:c4:0e:5d:ee:ab:48:f6:f1:eb:99:e8:9d:d4:
19:ee:e2:1a:56:7d:fc:80:01:88:a8:a8:b0:91:ee:c6:32:0b:
20:7b:a9:30:47:fa:ed:dc:4d:75:69:6c:32:2a:fb:ae:72:0d:
8a:41:a7:e7:39:5d:01:f7:2a:b4:77:b1:99:b6:1a:32:2f:9d:
ab:cb:8f:b2:a8:57:ad:b4:76:88:fe:77:d1:08:d1:61:c9:56:
8a:1c:65:2c:5e:90:7e:c2:0c:91:06:49:3a:49:77:9c:eb:15:
54:67:cc:0b:b3:11:54:3c:25:0c:6e:e7:78:7c:4a:15:a7:fc:
97:ac:43:c8:be:87:d2:63:f7:3e:8d:fa:b5:bd:5f:89:e6:82:
27:c3:a2:e4:88:56:44:7e:34:68:fc:47:de:57:90:a0:d6:b8:
3a:86:14:a0:88:32:79:5b:01:d7:83:87:6f:55:c5:4e:08:78:
a7:05:a9:ef:8c:e6:9b:8b:60:c7:aa:e0:fe:55:c2:a0:c5:aa:
cd:20:6c:16:44:e6:b7:e8:b8:ba:19:91:02:63:13:2f:e4:d6:
48:eb:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:50:22 2026 by rpki-client