Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: aRjJXbMAiwlY3KYLFe6gc+WZSsfqftCcJnryzK1PslA=
Subject key identifier: 31:42:17:81:0A:CF:D0:EB:5A:58:41:B6:95:2F:A6:71:64:1A:2E:91
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 01A12DD7E73E8800F07F1C920AD2E0CE4804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 17AF
Signing time: Mon 12 Oct 2026 02:01:26 +0000
Manifest this update: Mon 12 Oct 2026 02:01:26 +0000
Manifest next update: Tue 13 Oct 2026 02:01:26 +0000
Files and hashes: 1: KoZviyPQEL5Xi6gVwYr2Cd9mx2c.roa (hash: fqe8eG4WVuOA3Nqn5E8vEQ5c8f4TyPMKdiIPBRAGwdE=)
2: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: 7aUeAjL9lGjo7Cd7BWUndzeym7o2IDzD4d/Uq/p8qH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:d7:e7:3e:88:00:f0:7f:1c:92:0a:d2:e0:ce:48:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Oct 12 02:01:26 2026 GMT
Not After : Oct 13 02:01:26 2026 GMT
Subject: CN=314217810acfd0eb5a5841b6952fa671641a2e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:5d:8a:d1:2b:f0:ca:27:f8:3d:0c:58:ee:
1b:a9:ef:56:c6:76:1c:77:24:d3:8a:f4:bc:93:37:
bf:4c:5b:4c:01:c7:03:0d:f2:b4:cd:96:a6:7a:92:
20:2a:57:d7:3c:d2:d1:7f:a2:a9:55:34:13:34:d1:
5a:d2:35:23:91:65:4b:f7:c4:f6:75:06:ab:a7:c2:
4d:2a:44:2f:35:06:c6:69:fb:d9:cc:b4:8b:a5:f5:
8f:2e:9d:f2:d3:a0:f0:01:15:6f:3b:b0:5c:96:0e:
75:6e:19:23:f5:ca:fd:f6:bf:09:22:44:fe:a6:28:
e5:d2:be:75:a6:33:7a:6e:9c:43:b6:12:99:58:33:
72:00:0b:92:04:82:68:11:a1:53:4b:38:e8:08:5a:
c1:f6:5e:ac:80:7b:64:f7:6d:d0:bf:77:ea:0a:ab:
38:a1:ad:f4:31:46:0e:e3:41:49:7e:15:0c:fa:4d:
3c:95:e5:e5:59:2c:ef:fc:29:cd:51:f7:19:4d:a5:
a7:ca:55:5d:bf:3f:7c:ce:50:41:3d:b4:a7:24:13:
a8:86:61:78:6a:1a:f0:12:33:1c:35:1e:38:91:d7:
d9:59:1c:b3:8a:22:2c:cd:d6:cd:cd:79:70:84:ea:
a3:a9:bb:12:44:f7:b9:c5:2d:b9:64:e0:7b:b5:b4:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:42:17:81:0A:CF:D0:EB:5A:58:41:B6:95:2F:A6:71:64:1A:2E:91
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c0:fc:52:b8:54:3e:06:bb:a6:53:0a:c8:cc:0d:00:13:83:
7e:a6:a2:ac:10:67:00:21:ec:65:5f:ff:a4:17:01:25:9c:3c:
6d:81:65:55:43:87:8e:9c:64:5d:11:10:17:6a:c3:52:27:c8:
d5:c1:51:bc:23:c7:89:ff:2e:26:12:08:78:2b:f8:7c:f5:94:
60:58:d5:f9:8e:0a:78:e7:b1:8f:9d:f1:8d:fc:a4:3a:be:88:
d7:62:eb:81:33:15:65:6b:97:aa:00:66:9a:42:8b:6a:4c:58:
f4:b3:d2:17:45:c0:aa:77:53:8c:b7:53:89:d0:69:98:18:6b:
1a:8f:d6:15:4e:a6:ee:7d:cb:34:c4:10:25:c2:ca:60:a6:34:
26:65:6b:78:a6:2e:a4:5d:e7:d4:7f:56:b0:c4:dc:58:7b:f3:
bb:e5:20:80:c4:ea:9b:07:aa:8b:93:5e:cd:8c:88:8e:84:f6:
ba:48:e2:34:77:e6:f0:33:36:55:ca:e4:3e:85:4a:90:da:5c:
47:6a:ca:c8:c4:ac:f7:9d:9e:46:c0:df:ff:25:f5:af:dc:10:
8c:f6:8e:c4:da:69:bd:c0:02:77:45:4d:cf:04:54:26:ec:43:
d6:03:f9:75:2e:02:b9:91:34:1e:c2:67:3e:14:be:2d:99:1f:
c5:10:f9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:33:08 2026 by rpki-client