Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: cYvhMBP5WfYimePNFQUE3qyGxsMCNFo6QaQ6HBf4xGc=
Subject key identifier: EF:5B:FE:83:80:E6:60:D1:C7:C2:63:1A:CA:57:6F:5E:B0:79:40:C1
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 01A101A39598D1C78A94F6FEA092CD11D7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 1A89
Signing time: Sat 03 Oct 2026 12:01:00 +0000
Manifest this update: Sat 03 Oct 2026 12:01:00 +0000
Manifest next update: Sun 04 Oct 2026 12:01:00 +0000
Files and hashes: 1: KFiiFWif923SIcwC9nBmJ-HUVJ4.roa (hash: ycwpSj4ZG3+CrkzSV++20ftzs6baQIacEYL2lp7sLR0=)
2: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: RaKwlDM5jdGAst8RKES8n2PUoEDEzqVHl/wc3GwdoOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:a3:95:98:d1:c7:8a:94:f6:fe:a0:92:cd:11:d7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Oct 3 12:01:00 2026 GMT
Not After : Oct 4 12:01:00 2026 GMT
Subject: CN=ef5bfe8380e660d1c7c2631aca576f5eb07940c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:6e:a4:69:48:9e:77:a8:95:60:ad:8d:3d:
58:73:4b:9c:31:f4:b5:56:6b:0b:e1:40:8f:0b:12:
bb:5f:3f:80:13:49:49:92:2c:69:4a:3f:5f:c2:d8:
08:d6:28:92:db:91:db:d6:50:97:d2:50:5d:b4:81:
d5:1d:10:9b:6e:8b:84:b2:41:57:81:c6:96:d2:2d:
24:6f:a9:08:72:18:5c:ee:93:4a:15:13:80:5c:4e:
f9:a5:24:4d:cd:58:d8:f3:6a:aa:9b:17:08:46:c0:
ed:13:94:72:ee:de:0c:eb:cd:bc:f7:20:4c:82:27:
d8:10:52:6d:e8:89:f8:72:ef:d9:89:a0:0b:6c:a5:
0e:9b:a7:26:d4:a3:87:3a:7c:c7:c6:f3:23:20:88:
de:46:96:d1:7d:ed:67:9a:f0:05:78:6a:48:19:3c:
62:db:df:e6:7a:18:42:d6:3a:65:af:5e:fe:cc:a0:
6c:b5:78:17:9b:ca:2e:3e:4a:0d:28:5d:62:06:1a:
2d:31:3c:13:3b:5f:96:78:e6:e8:47:ee:4a:a5:45:
a7:8f:86:1c:3e:70:53:39:de:06:1c:25:b9:35:ed:
aa:9a:0f:6c:5d:db:25:c8:17:cb:b3:c2:53:40:bd:
3b:90:6a:a3:72:3d:7f:09:4c:9b:58:1b:21:de:54:
86:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5B:FE:83:80:E6:60:D1:C7:C2:63:1A:CA:57:6F:5E:B0:79:40:C1
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d4:3c:b1:e2:11:5e:17:bb:a4:6e:c0:e8:b6:d4:09:00:a1:
9e:4c:f6:be:3d:6f:69:4b:c0:9c:e8:92:c4:e0:2f:b5:d4:f8:
62:5a:c1:2a:85:e6:e7:b4:72:2f:5a:37:e0:9e:79:eb:36:26:
a8:65:1f:8c:b5:5a:6f:11:52:0b:06:35:9a:d0:ff:29:c3:f0:
32:ee:57:20:31:09:26:9e:ed:65:9a:43:15:c0:91:ad:27:0f:
ee:8a:9a:1a:64:b5:9a:f0:fb:f5:79:37:11:7e:88:08:9a:1d:
b8:a7:a1:f4:4f:1a:23:e9:4e:c6:12:de:56:b0:27:38:46:63:
32:1e:29:25:7b:77:5c:06:71:84:9e:10:02:9f:b9:36:b4:1c:
f0:ee:c3:62:20:61:ac:6e:a7:17:20:59:98:ec:1a:f5:13:b6:
a9:c3:b2:23:e8:9b:9e:32:f1:f6:c2:4c:31:16:3c:42:d0:ec:
05:6e:a2:2f:02:44:37:92:dd:54:b0:18:39:30:d0:47:b2:7d:
02:15:82:70:92:0a:49:41:6e:68:ba:d6:4a:93:84:1f:1a:12:
57:ac:5d:c9:37:d3:8e:66:35:b0:6b:2b:db:19:b7:cc:11:9d:
d0:4b:ec:e5:dd:3c:9b:12:ae:6a:6b:4f:e4:e7:f5:d7:1b:70:
9c:3f:af:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:18:58 2026 by rpki-client