Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
File: rnmjPOer5bhoQPOwbZjsisCfWaU.mft (raw, json)
Hash identifier: F1R6GCj8vz45Th0gBL4Xv4WkbEzephHeoVVuf1mkVbc=
Subject key identifier: BE:8F:40:83:D8:ED:C3:94:E8:BE:75:87:29:84:1D:FB:F2:7B:51:B8
Authority key identifier: AE:79:A3:3C:E7:AB:E5:B8:68:40:F3:B0:6D:98:EC:8A:C0:9F:59:A5
Certificate issuer: /CN=ae79a33ce7abe5b86840f3b06d98ec8ac09f59a5
Certificate serial: 01A107DC86A387A085AB785E53F4EBBDC800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
Manifest number: CB
Signing time: Sun 04 Oct 2026 17:00:55 +0000
Manifest this update: Sun 04 Oct 2026 17:00:55 +0000
Manifest next update: Mon 05 Oct 2026 17:00:55 +0000
Files and hashes: 1: HWjg4cqDlFcPbsnpbgKlaCRlbTY.asa (hash: T59UJlc60g8iD9F8A5gW9lus5ZkgqKFSvYU4ouF7Krc=)
2: rnmjPOer5bhoQPOwbZjsisCfWaU.crl (hash: PWVMaRdtum+GZ2TMkDO3bA0bFC8siH+3eaoArKJjzs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:dc:86:a3:87:a0:85:ab:78:5e:53:f4:eb:bd:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae79a33ce7abe5b86840f3b06d98ec8ac09f59a5
Validity
Not Before: Oct 4 17:00:55 2026 GMT
Not After : Oct 5 17:00:55 2026 GMT
Subject: CN=be8f4083d8edc394e8be758729841dfbf27b51b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:79:58:a0:b4:75:8b:27:03:d0:0e:6b:c8:
ab:35:ed:a9:e4:0d:2f:67:60:7e:19:14:77:45:1b:
ae:3a:ed:75:dc:95:e2:76:d7:32:36:09:1f:a9:4c:
f0:f8:72:c8:9e:aa:4a:0b:2b:5c:ce:26:99:a3:ff:
2f:2e:36:cd:3f:2c:09:82:54:d0:73:cc:29:25:1b:
9a:57:a4:a7:78:ad:14:84:a1:07:60:e3:6c:8c:75:
f1:8a:c1:07:72:03:fb:76:a0:e0:dc:a0:50:cc:86:
43:8a:eb:30:03:ac:8b:40:b9:c1:6f:f2:51:38:c9:
ae:1b:af:d2:6a:cd:ce:70:3a:ce:69:90:15:75:a5:
af:cc:7b:14:21:51:6c:e4:b7:43:a5:35:bf:51:27:
38:c1:6f:39:99:71:ae:52:1f:11:6d:31:a4:e8:16:
85:ab:1b:d9:52:97:79:b2:ff:43:c9:c1:0d:a0:1b:
24:1c:be:ca:bd:c1:c1:e9:63:0b:57:20:05:1b:3b:
38:5a:2a:db:6a:17:e4:23:a4:3f:28:af:5b:b5:11:
98:b5:c0:49:c9:28:57:79:86:d2:0c:bd:27:79:02:
66:94:93:c3:ca:e8:91:66:cf:32:28:d9:4e:f4:ef:
4b:b3:8f:c3:e2:7d:25:1a:96:4a:dd:46:a6:63:93:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:40:83:D8:ED:C3:94:E8:BE:75:87:29:84:1D:FB:F2:7B:51:B8
X509v3 Authority Key Identifier:
keyid:AE:79:A3:3C:E7:AB:E5:B8:68:40:F3:B0:6D:98:EC:8A:C0:9F:59:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a4:a4:8a:67:bd:58:5f:5e:f0:3b:10:39:18:14:35:ca:17:
ae:83:63:b4:4e:88:c3:fc:27:6a:04:c5:c8:44:99:08:5c:af:
39:10:21:0c:68:43:0c:1e:68:be:87:80:18:f7:7a:9e:9c:24:
07:28:71:73:6d:78:46:24:ee:da:f0:3e:e0:f5:4c:2d:02:c3:
f4:26:c8:56:5a:70:e5:df:cd:5f:bb:c4:6b:ad:85:79:5f:5d:
38:51:db:71:ee:87:b6:fb:5c:5c:9d:53:4d:d6:60:6e:da:1c:
42:df:77:24:08:89:01:7c:1f:d4:1a:f2:4a:bc:ac:c3:3c:05:
ca:3c:1c:06:c2:93:1a:4c:2c:87:af:33:42:8e:74:96:53:ce:
dc:ed:ad:56:2d:b6:73:bb:3a:d3:0a:df:97:82:6d:29:d1:08:
c9:87:4d:42:86:9e:b6:5c:66:ed:01:d5:43:3f:8f:c4:b8:03:
26:9d:ea:44:d5:6c:be:4e:ac:03:21:38:6b:ed:03:23:4e:f2:
6c:67:22:89:93:2b:5b:43:d3:86:44:d4:c9:62:bb:2d:ab:ff:
b5:54:05:9c:4b:b3:e8:c9:9f:ba:41:32:5c:46:35:4b:6c:da:
ea:c9:1b:5e:cd:26:0a:1c:dc:3d:d9:fb:c2:91:19:14:59:32:
4a:44:3f:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEH3Iajh6CFq3heU/TrvcgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNzlhMzNjZTdhYmU1Yjg2ODQwZjNiMDZkOThlYzhhYzA5
ZjU5YTUwHhcNMjYxMDA0MTcwMDU1WhcNMjYxMDA1MTcwMDU1WjAzMTEwLwYDVQQD
EyhiZThmNDA4M2Q4ZWRjMzk0ZThiZTc1ODcyOTg0MWRmYmYyN2I1MWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1d5WKC0dYsnA9AOa8irNe2p5A0v
Z2B+GRR3RRuuOu113JXidtcyNgkfqUzw+HLInqpKCytcziaZo/8vLjbNPywJglTQ
c8wpJRuaV6SneK0UhKEHYONsjHXxisEHcgP7dqDg3KBQzIZDiuswA6yLQLnBb/JR
OMmuG6/Sas3OcDrOaZAVdaWvzHsUIVFs5LdDpTW/USc4wW85mXGuUh8RbTGk6BaF
qxvZUpd5sv9DycENoBskHL7KvcHB6WMLVyAFGzs4WirbahfkI6Q/KK9btRGYtcBJ
yShXeYbSDL0neQJmlJPDyuiRZs8yKNlO9O9Ls4/D4n0lGpZK3UamY5MS6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6PQIPY7cOU6L51hymEHfvye1G4MB8GA1UdIwQY
MBaAFK55ozznq+W4aEDzsG2Y7IrAn1mlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm5talBPZXI1YmhvUVBPd2JaanNpc0NmV2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81ODcxZDItMTJhZC00Mzg5LWFkNjIt
NDNlZDkyYmNlNmE3LzEvcm5talBPZXI1YmhvUVBPd2JaanNpc0NmV2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81ODcxZDItMTJhZC00Mzg5LWFkNjItNDNlZDkyYmNlNmE3
LzEvcm5talBPZXI1YmhvUVBPd2JaanNpc0NmV2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaSkime9
WF9e8DsQORgUNcoXroNjtE6Iw/wnagTFyESZCFyvORAhDGhDDB5ovoeAGPd6npwk
Byhxc214RiTu2vA+4PVMLQLD9CbIVlpw5d/NX7vEa62FeV9dOFHbce6HtvtcXJ1T
TdZgbtocQt93JAiJAXwf1BrySryswzwFyjwcBsKTGkwsh68zQo50llPO3O2tVi22
c7s60wrfl4JtKdEIyYdNQoaetlxm7QHVQz+PxLgDJp3qRNVsvk6sAyE4a+0DI07y
bGciiZMrW0PThkTUyWK7Lav/tVQFnEuz6MmfukEyXEY1S2za6skbXs0mChzcPdn7
wpEZFFkySkQ/MA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:34:31 2026 by rpki-client