Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: YIL7UJk3nROkfXGqlfF4ATrpOGME1VKwHNTgO1/btDE=
Subject key identifier: B0:48:F6:72:CF:47:C3:42:88:F2:86:F5:B0:AF:0F:3A:6E:30:98:0B
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 01A173CAFA428F5F9665A755EF3C00A35295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 1AD0
Signing time: Sun 25 Oct 2026 16:00:44 +0000
Manifest this update: Sun 25 Oct 2026 16:00:44 +0000
Manifest next update: Mon 26 Oct 2026 16:00:44 +0000
Files and hashes: 1: Hm9jDBLH-sqHFB-kWgpns9uuTu0.roa (hash: em9fSdCaWmu85DiyoLonhSdzPO36ZF77WoiFZ16jO0Y=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: ndaUnL6p929cTrtEY2dafF2aW8SwrI3z+jPlDnYJFj8=)
3: u-E8c_HIPJtAfwHxjdimDSR9iEU.roa (hash: Ssl8FJdCbKGVA9enj4PlMZpIMHgYMYA2rL+PziMx0XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:ca:fa:42:8f:5f:96:65:a7:55:ef:3c:00:a3:52:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Oct 25 16:00:44 2026 GMT
Not After : Oct 26 16:00:44 2026 GMT
Subject: CN=b048f672cf47c34288f286f5b0af0f3a6e30980b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:e9:e4:d3:25:f0:2f:b3:a3:42:cd:61:af:
af:c2:62:6f:54:f2:e9:14:ba:04:8b:f4:d3:3c:32:
9f:3d:5b:30:4e:bc:27:76:16:ac:92:12:b9:35:91:
74:2d:5e:54:ee:e7:a4:7a:cd:24:e3:ce:85:18:88:
ed:86:5a:89:d8:d2:13:79:2e:52:a6:21:33:10:a6:
4f:4a:68:e0:c8:82:1b:ca:ef:3c:fd:c7:f0:74:6c:
fc:f2:bb:a7:3e:c0:1c:33:2e:70:18:cb:d9:89:f5:
ac:99:57:1a:bc:ba:cb:5c:c3:17:5c:96:d1:0d:30:
3a:d8:a4:de:5c:30:97:e3:5b:ff:4c:66:d1:9d:ad:
0f:60:9a:51:e3:15:29:f0:a3:cd:5e:58:cb:69:fa:
d1:ab:1a:55:bc:f1:de:17:c6:1c:ae:56:e2:00:55:
b2:d0:32:55:c8:56:57:b9:7e:0e:e3:f7:56:e5:48:
9c:56:93:3c:07:a4:f8:4a:a7:24:79:2d:30:81:4c:
cb:b2:62:ce:38:ee:b8:a9:ae:f7:fe:30:a4:f5:9b:
5d:b9:96:c8:ac:c4:60:68:9e:a7:ba:25:6d:c8:94:
82:ce:b1:d3:55:3f:6b:81:05:ba:3a:67:13:d5:7d:
45:3b:78:2c:5d:86:e3:29:8e:58:ef:0d:27:91:97:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:F6:72:CF:47:C3:42:88:F2:86:F5:B0:AF:0F:3A:6E:30:98:0B
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a3:19:b2:12:1a:18:3e:f4:42:8d:c3:b5:27:a3:c5:90:21:
1c:c9:97:9a:1f:3e:2f:f2:51:06:0a:67:cf:24:3a:aa:fa:8e:
cf:d4:1c:3c:5b:06:ab:63:be:19:ce:91:74:d1:68:d2:ff:a4:
d6:ef:88:fe:5b:3d:20:71:e8:a0:9e:95:13:f1:ad:d6:b1:b4:
90:fa:be:cc:b8:33:79:1e:02:9a:80:fb:ff:e2:dc:e6:27:bd:
39:99:33:63:e8:04:5b:43:37:29:b2:ee:71:20:66:68:7b:a2:
9e:49:8e:d8:27:f8:9a:0b:9e:5e:82:47:d4:ec:b9:7d:da:d7:
86:63:a5:cb:19:0e:dd:a3:27:63:e6:04:46:37:ba:04:d6:98:
c2:12:ec:84:e2:f9:4f:3d:ca:40:66:c2:7d:b5:6c:3a:10:18:
ab:d2:28:4d:41:d0:63:af:aa:b2:82:18:b1:1c:49:77:00:47:
b7:71:3b:7a:be:7d:4d:ab:e3:38:83:f8:b8:f5:55:e3:c4:12:
11:f6:83:d4:00:17:46:82:06:08:10:0c:6a:d1:e1:b7:74:ac:
42:ec:78:71:6b:f8:92:0e:7a:31:ca:e1:01:f2:ac:b1:7a:27:
8e:ac:42:95:51:64:09:c6:ef:44:b7:b0:15:8a:81:b4:cd:28:
6e:80:aa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:22:23 2026 by rpki-client