Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File: m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier: LKhp3LfKgUt+d3irLGSTfsGPU6zzWo6KAdLM0bYaWAI=
Subject key identifier: A0:65:11:CF:9A:C4:6F:5B:C7:85:6F:1D:0E:5A:B4:41:E1:D0:AE:5F
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 01A18676BDACEB2EEAEAEBE57B22CC5C9F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number: 1A5E
Signing time: Thu 29 Oct 2026 07:01:31 +0000
Manifest this update: Thu 29 Oct 2026 07:01:31 +0000
Manifest next update: Fri 30 Oct 2026 07:01:31 +0000
Files and hashes: 1: cjkYRf3Yh9WpwKdD5YYzfaFNvWw.roa (hash: 3gq9vL58U08Go4S/2DXWUX5EoB3kYBslnaNgZp37wkE=)
2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: lffD8e+9za76uU4bZ0Rntg/b90qoBhEORi5RUDItG5c=)
3: msBIl7hzmZuQkbrJ6sui74p1Pgg.roa (hash: 1/8Tc8pewIiwrYAG9YY8GUqoXDl/4u6a8D5S98uRMyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:bd:ac:eb:2e:ea:ea:eb:e5:7b:22:cc:5c:9f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Oct 29 07:01:31 2026 GMT
Not After : Oct 30 07:01:31 2026 GMT
Subject: CN=a06511cf9ac46f5bc7856f1d0e5ab441e1d0ae5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:5b:2b:c1:9f:fb:5b:0c:cf:06:5c:53:11:
95:f3:dd:4a:56:95:3a:13:64:06:8f:bd:81:95:a9:
99:a8:d0:6a:03:b1:b1:c0:02:4c:21:5f:80:e3:eb:
c1:a0:9a:8c:c4:40:5b:6b:ac:6e:91:96:fc:fc:eb:
45:11:05:f3:3e:7b:19:92:27:d9:8f:7b:9a:2d:1a:
a2:0a:fb:14:b7:54:81:da:e7:71:e1:e2:33:1b:ba:
89:4a:4f:a7:b9:db:1a:78:bb:93:f8:02:e7:d4:f0:
7c:44:a2:2b:dc:41:c1:3f:21:07:97:76:8b:6d:31:
3f:9a:56:0a:0a:de:39:a2:2c:bf:eb:dd:8c:6d:69:
31:25:a6:29:8f:61:fe:a0:ce:80:c0:8f:c8:67:81:
97:76:e0:74:71:b0:03:a7:7f:3e:84:46:f4:e8:c5:
00:ef:62:35:28:7e:a6:ee:23:58:d4:19:f5:a6:bd:
ba:e2:8d:be:1e:7c:23:a5:53:1f:2f:24:88:7f:f0:
13:4c:64:f9:52:e0:e4:36:4e:c0:2c:c7:b4:69:fc:
a3:df:e8:51:94:a7:64:1a:9f:85:b5:ad:db:4f:1f:
48:4e:90:5e:eb:e6:5d:49:a9:60:96:68:0c:02:ef:
20:ff:03:e4:ad:81:3f:26:b9:b5:79:c9:b6:f3:b3:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:11:CF:9A:C4:6F:5B:C7:85:6F:1D:0E:5A:B4:41:E1:D0:AE:5F
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a0:67:43:a6:18:00:d2:90:1c:9a:e7:0b:05:9d:60:be:b1:
d2:97:30:81:fd:9f:22:74:94:77:b1:5f:c8:25:6d:f2:d3:4a:
37:e6:6f:c2:03:fc:59:ad:fc:cb:75:cb:ea:df:5f:96:f2:21:
89:9f:33:48:8d:57:a7:47:6c:5b:16:36:87:01:eb:3a:75:4f:
8f:3a:61:a9:4c:bb:2f:65:43:4d:6d:c0:d4:d8:ae:9f:b6:7c:
75:56:cb:92:7e:7b:ca:3d:3d:2d:2d:62:57:59:b6:a2:b1:4e:
93:0d:38:4a:8d:42:6a:ab:56:20:b0:3e:ac:b9:19:7e:f5:86:
06:6f:c1:f7:3d:a1:85:c6:7a:c1:71:9a:9b:4c:00:89:10:07:
16:45:38:0a:b0:bf:70:cc:bd:cf:e0:03:45:c6:a8:89:5a:7c:
7b:93:d0:8e:28:01:3d:11:6c:6e:f9:c6:19:91:56:bf:2b:e0:
52:54:59:06:60:0a:6d:0e:2a:b5:1e:b0:d7:3c:6f:b6:08:16:
3c:b0:76:a2:5b:a7:bc:0d:2c:06:d9:fb:e0:9e:d0:6b:64:30:
32:c8:a3:39:69:9e:c7:7c:0c:a4:b7:b7:39:6d:7f:73:6e:15:
ab:ea:63:0b:ee:9f:03:f8:cd:56:43:fc:76:ca:89:6c:ce:9b:
42:ff:27:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:47:59 2026 by rpki-client