
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
File: mFW4DEXftep6qn3R2O2LFPnB3EU.mft (raw, json)
Hash identifier: CqwShoX6Kwgv4NtiBYqzrr8iBnjqJEjLPTKR7ydvSXE=
Subject key identifier: 5E:74:E7:AA:A3:7F:E1:12:72:46:6D:13:7A:D4:69:3C:ED:04:22:A6
Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
Certificate issuer: /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Certificate serial: 01A02BEB723535BC5AEBE60523FCACCA379E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
Manifest number: 0502
Signing time: Sun 23 Aug 2026 00:00:45 +0000
Manifest this update: Sun 23 Aug 2026 00:00:45 +0000
Manifest next update: Mon 24 Aug 2026 00:00:45 +0000
Files and hashes: 1: V40XeqVh6l4DbCmS7UQsikJ2-iM.roa (hash: 5u4CbQ5JG4yrJVoWscvPthJuNktPYvJ7kXfZHFgxd10=)
2: mFW4DEXftep6qn3R2O2LFPnB3EU.crl (hash: I9RKdxau5cqIRM8NP0r+M3jHAPqdwaZr9buKVAvHOzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2b:eb:72:35:35:bc:5a:eb:e6:05:23:fc:ac:ca:37:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Validity
Not Before: Aug 23 00:00:45 2026 GMT
Not After : Aug 24 00:00:45 2026 GMT
Subject: CN=5e74e7aaa37fe11272466d137ad4693ced0422a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:f2:09:5c:2b:05:2d:0f:76:0a:7d:94:e6:
e3:48:e8:ef:55:cf:59:7e:0e:5f:27:0e:9b:a2:d4:
df:54:d4:46:6a:e9:4f:75:56:ed:a2:f9:4b:ec:ac:
e0:35:84:2f:c9:ee:ed:02:2d:54:a5:38:39:09:f3:
08:f0:e1:44:66:ab:3f:c9:75:a1:aa:a3:c3:38:fc:
78:18:6f:bb:48:16:05:9e:42:a9:3f:ca:58:ab:58:
78:01:fa:fd:7e:18:fb:63:3f:a2:ba:a9:e8:f4:2c:
a7:9e:70:98:88:2f:12:48:2c:0c:0d:70:e0:7e:47:
b8:c5:ed:d5:89:38:a0:c1:e5:8d:76:a2:17:b8:7a:
1f:04:2c:e7:6c:cd:56:d9:45:2f:27:b3:2e:a2:ce:
df:d8:21:e3:00:ee:cc:34:72:c2:74:45:6a:10:e3:
3f:42:b0:7e:c4:7b:7c:ef:66:e0:2b:33:8f:4b:4a:
e7:68:62:46:30:9f:9a:6d:50:52:3d:bf:b7:9f:db:
fb:6e:92:6f:51:78:a6:c8:5a:71:92:ff:70:58:b9:
61:c5:45:f1:f8:98:a2:3f:bc:d1:ed:99:85:ee:79:
d8:09:99:51:c7:ab:a5:d2:36:7c:05:6b:42:5d:09:
e1:79:d6:45:27:29:d2:63:a3:d4:e0:e9:0f:71:64:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:74:E7:AA:A3:7F:E1:12:72:46:6D:13:7A:D4:69:3C:ED:04:22:A6
X509v3 Authority Key Identifier:
keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:22:28:6c:50:36:4c:77:d5:e2:f8:05:5a:8d:dc:c0:8e:ac:
7e:1f:18:c3:2d:56:f5:e8:da:30:bb:81:9e:f5:65:b6:bc:0b:
5d:9d:66:ab:9c:8b:66:1d:a8:a9:27:56:ed:f4:13:72:4d:23:
3e:61:01:81:e3:6b:a3:03:76:8c:37:e2:3d:3b:a4:52:44:a5:
5e:d1:16:91:4f:85:54:d7:01:b3:bc:ea:2d:a1:d8:69:dd:97:
a4:19:dc:a9:91:44:56:c9:c8:e6:9b:9b:65:62:2b:8c:19:62:
94:9c:de:28:18:39:0e:38:7f:c6:6f:af:4d:a0:68:d8:1f:06:
d6:9d:5f:44:80:e2:d3:d6:87:9f:6b:af:21:39:f2:7c:38:e7:
71:27:3f:94:82:e8:31:c7:2d:f7:62:c5:eb:9c:f9:fc:86:d0:
ae:f0:19:b1:a7:48:59:e5:93:10:cd:88:f4:8b:7a:f0:5a:dd:
53:51:ce:be:4b:4a:16:8d:cb:d9:6b:c3:7b:4e:07:2a:80:8d:
13:e3:5d:66:ee:69:14:f4:86:a2:d1:81:33:bc:1f:1a:df:52:
cb:61:9b:83:53:e8:74:da:56:74:a5:b8:0e:e2:3a:3b:96:eb:
3d:8a:32:4b:a8:c0:a1:85:19:3e:8a:ed:9b:c2:a3:e6:a1:9a:
71:02:0a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:56:19 2026 by rpki-client