Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.mft
File: b5O_DH82JtwEWpijltR9M1tz_lU.mft (raw, json)
Hash identifier: mSKlBcKZCtGREL9Ccov37cDP9ApO7QCge1qW5eT9bs8=
Subject key identifier: F0:12:45:E1:0D:71:35:D4:D8:41:38:F7:8E:1E:95:C6:BC:78:C6:AF
Authority key identifier: 6F:93:BF:0C:7F:36:26:DC:04:5A:98:A3:96:D4:7D:33:5B:73:FE:55
Certificate issuer: /CN=6f93bf0c7f3626dc045a98a396d47d335b73fe55
Certificate serial: 01A19131466E3D7C234CC769C70268E2E81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5O_DH82JtwEWpijltR9M1tz_lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.mft
Manifest number: 0149
Signing time: Sat 31 Oct 2026 09:01:27 +0000
Manifest this update: Sat 31 Oct 2026 09:01:27 +0000
Manifest next update: Sun 01 Nov 2026 09:01:27 +0000
Files and hashes: 1: 7ZJKSnvn6eDvPf1Ga0ognzlOqUo.roa (hash: jqd1cXzeNxyDHHxxgJZE3/SIjMMDeA4xZRyGZCH75OY=)
2: b5O_DH82JtwEWpijltR9M1tz_lU.crl (hash: 4bqn1xjQ6s7dpwMAQfOWz8hwNRA4zvuUN1qGyfGH1K8=)
3: f8g99RRZqCoxm5euSeYWZpHjx84.roa (hash: RAak1S/CpTHbug6ZdRWMP+IfC0d0jFHGr8IO+OZIlxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5O_DH82JtwEWpijltR9M1tz_lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:31:46:6e:3d:7c:23:4c:c7:69:c7:02:68:e2:e8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f93bf0c7f3626dc045a98a396d47d335b73fe55
Validity
Not Before: Oct 31 09:01:27 2026 GMT
Not After : Nov 1 09:01:27 2026 GMT
Subject: CN=f01245e10d7135d4d84138f78e1e95c6bc78c6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:20:b8:25:56:64:8d:b1:2c:70:9c:45:82:
53:3b:4d:24:74:8c:7f:dc:0e:ee:1d:16:bf:a2:29:
c8:35:ef:d6:3a:b7:76:81:b7:2f:f9:53:d6:74:84:
1f:66:a7:a9:a2:d6:53:dd:1e:1e:1a:9c:35:d1:ab:
74:7a:51:a1:8c:7f:b0:38:96:06:2f:45:28:af:80:
a1:a4:64:8b:23:04:34:80:88:33:71:64:c9:b2:f4:
14:cd:a8:c8:41:cc:0d:33:1a:c4:5d:90:8e:39:40:
94:bc:76:bd:4b:a0:a5:9d:4e:15:28:a6:76:26:f6:
80:48:35:b1:6b:a6:1e:d0:e2:b0:64:6e:25:a0:d3:
88:a5:41:60:c4:d8:62:3b:e0:2a:65:bd:4d:f7:f0:
78:52:32:a2:c6:9e:ce:96:73:8a:43:80:7b:06:ed:
5a:e7:c7:d6:ae:8c:8c:45:32:b9:44:f4:e7:a9:82:
e5:2c:fc:1d:89:04:4c:c7:31:93:61:83:a3:01:55:
f3:21:fd:3a:13:01:cf:79:e9:54:ba:09:b9:c2:4c:
93:1d:9e:d8:67:b0:3e:96:18:7c:bb:b8:fc:7b:c6:
05:5c:94:5d:dc:ae:c9:74:4e:92:5f:a5:63:d9:32:
5f:4a:a3:62:eb:38:62:fc:cd:a9:94:fc:98:b8:aa:
65:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:45:E1:0D:71:35:D4:D8:41:38:F7:8E:1E:95:C6:BC:78:C6:AF
X509v3 Authority Key Identifier:
keyid:6F:93:BF:0C:7F:36:26:DC:04:5A:98:A3:96:D4:7D:33:5B:73:FE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5O_DH82JtwEWpijltR9M1tz_lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:52:cc:2d:a2:32:71:be:3d:b1:00:44:00:78:dc:7b:2c:85:
82:f7:c2:ed:66:a5:60:22:66:81:42:d5:76:c0:bc:d2:8a:e4:
7b:dd:1a:60:35:88:9a:f9:cc:33:11:da:42:b7:98:8b:18:fc:
ea:0e:96:a3:8d:c9:32:ac:58:56:c7:b6:e7:d5:cd:f6:f3:e3:
82:29:93:3e:b6:32:1f:77:38:8e:20:d2:c6:31:25:09:a0:73:
c7:ff:96:6f:01:93:5b:79:ed:d7:ae:f1:4c:16:e7:82:61:1f:
cc:f6:16:20:7e:e4:fb:35:e1:f4:70:98:48:a5:82:73:bf:6b:
c8:f8:af:24:7f:fa:bd:f7:50:ad:50:20:89:e6:99:96:5d:c6:
de:62:46:5a:b5:b7:9b:af:13:68:55:aa:9c:3a:77:10:75:7b:
62:e3:7f:18:84:35:fb:96:89:2d:60:dc:55:36:96:0c:4e:8d:
63:82:e5:81:9a:2d:4e:b4:1e:fb:54:c7:2b:21:de:f5:17:b0:
98:ed:99:1f:08:c3:96:01:ff:0b:01:09:3c:b6:45:be:89:a3:
11:ec:2d:5d:ca:12:01:41:c9:1b:25:7b:04:34:d5:3e:38:33:
0e:8d:26:32:4e:82:0c:7f:ff:3a:b2:8d:94:6f:b5:5b:a3:4c:
81:8b:94:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:23:07 2026 by rpki-client