Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: J9Z9nGw2tQw13IkhkxoW76iRpCL0RX1cpVeRYa4URY0=
Subject key identifier: AF:D5:F5:36:29:87:61:AA:64:9D:2E:36:5E:57:5E:C5:AA:9D:87:C8
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 01A10135B698D4DCC1622AEA8BB8B9BD943A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 10:00:59 +0000
Manifest this update: Sat 03 Oct 2026 10:00:59 +0000
Manifest next update: Sun 04 Oct 2026 10:00:59 +0000
Files and hashes: 1: OflZg6TFsEKRZGwqwFjxO_4uzgA.roa (hash: 9iTUJuItwJxSzT9lJ39rRuHUjdkumJ61tcp/ZIi1CnM=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: AiK3G4vljraNjaiafrFkAnrLZrarJq5UW4OMiSDQh7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:35:b6:98:d4:dc:c1:62:2a:ea:8b:b8:b9:bd:94:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Oct 3 10:00:59 2026 GMT
Not After : Oct 4 10:00:59 2026 GMT
Subject: CN=afd5f536298761aa649d2e365e575ec5aa9d87c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:af:59:70:c8:1a:37:25:9c:45:1a:57:31:
b4:6a:e1:a5:34:b5:c0:3d:f1:26:b9:70:83:45:8e:
f6:1b:47:10:d2:ab:79:6f:81:dc:79:fc:54:5c:cb:
d4:57:95:c6:fb:fa:70:c8:9c:89:b4:b8:1b:d6:02:
fc:8a:77:f9:16:20:c9:8a:2e:71:55:5b:06:85:53:
32:b4:fe:4d:2d:e1:b0:7e:aa:83:43:85:5a:3c:97:
b8:80:61:89:a6:b2:57:b0:87:19:13:9c:47:e1:18:
60:dc:96:0a:20:ea:67:ef:3c:97:09:37:e0:41:2b:
2f:12:63:d1:eb:91:49:f6:16:78:67:5b:f0:c6:03:
d8:15:92:cf:a1:82:7a:fb:ad:a2:60:a6:3a:37:90:
9a:19:84:93:50:93:71:fe:72:f3:05:11:c3:db:f1:
87:b7:2c:8b:cd:21:66:29:e6:2c:5a:7d:74:d6:ba:
21:f2:50:23:95:86:21:7b:5b:b3:d9:71:8e:26:e5:
a3:77:11:d2:36:94:0b:1a:10:0a:f8:ea:d1:ad:fd:
6e:5f:32:05:a5:17:43:2b:71:db:b3:fc:33:bc:18:
96:1a:2c:8a:64:00:28:41:2a:53:5d:c8:e5:e6:aa:
cd:50:0e:a2:d7:a8:2f:f2:e3:4f:71:d7:cf:49:c1:
db:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D5:F5:36:29:87:61:AA:64:9D:2E:36:5E:57:5E:C5:AA:9D:87:C8
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:43:59:07:d8:a8:7d:30:ae:e2:f9:5f:bb:f1:ed:cd:59:88:
22:6b:a2:86:42:61:af:fa:16:b0:f7:53:1b:ad:40:05:e1:46:
12:28:8e:dd:2d:29:f7:97:0f:9a:ef:12:7b:ee:f9:54:ab:6b:
f6:c6:b6:d7:ad:dd:1f:4f:85:89:b9:6e:58:47:55:c2:0a:f3:
bf:6a:63:5a:9d:e5:c0:5d:a2:1b:b5:62:d4:7a:a6:b7:cc:47:
24:9d:d8:54:22:1d:51:6d:44:f1:5c:13:37:a5:7d:fe:16:02:
b5:1d:bd:a9:fd:a4:02:de:40:05:51:c5:32:48:10:5b:24:e6:
26:b4:ef:13:72:99:70:6c:9b:30:fc:9b:f7:c2:42:a6:fc:3e:
50:7c:24:93:64:e7:be:3f:64:43:bc:55:86:a0:69:fa:eb:cc:
ce:42:ef:b5:99:1c:01:6c:14:ed:3a:ff:f8:5b:54:83:ae:9c:
cc:b8:3b:95:3e:dc:0f:a2:2c:4d:a9:62:f6:22:30:1e:52:37:
c4:e5:2b:43:7b:71:55:94:51:4c:8f:3d:90:0a:85:fc:52:00:
a6:c8:d8:eb:bb:2c:91:5a:07:8c:8a:f6:73:47:96:b2:d5:5a:
88:49:e5:ef:53:ac:d9:36:ee:c8:67:6f:ce:c0:a3:68:c2:45:
16:f0:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:36:47 2026 by rpki-client