Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File: mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier: xQV/hchKpiLy57D6KSeiEVPUMg1NVyhhhvKV5oSHzFg=
Subject key identifier: 75:DF:C2:2D:E0:FF:B7:72:BA:BC:B8:36:40:74:49:77:B2:4C:C4:FA
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial: 01A195446E85F5396A0EC8A95D363BFE70BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number: 17C0
Signing time: Sun 01 Nov 2026 04:00:52 +0000
Manifest this update: Sun 01 Nov 2026 04:00:52 +0000
Manifest next update: Mon 02 Nov 2026 04:00:52 +0000
Files and hashes: 1: D1heTXn7CKy5zLZ_HwZK9LTU77c.roa (hash: 8+cYEf9ivILDKmKrQsHq9USPOFeHqeF4AHnuJu39UqI=)
2: SpSWWIAX_co-S7OGVe4xxOaTumQ.roa (hash: eWFs5jFFJQvUBfi8O0eZY0oTE1BIWFbt9F0ZJ8qa89c=)
3: fI9PBxiiMOsKCtnOXwqzP5WZ3iw.roa (hash: y1cXN1mGBdJu2MTeUqDUwC/XHDAJM3lueicXGuEYI3I=)
4: lBg3_ekP2XBYVM3th5LmKxYKUuE.roa (hash: DDkeLmqGCMtQYRPOsdUTG5xK68Edb+Mfg+tAtB+HqA8=)
5: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: /cbSrHPtaWo+WelDqu2nBYWS3WhW+CYgm7RlgxTiCU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:44:6e:85:f5:39:6a:0e:c8:a9:5d:36:3b:fe:70:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Validity
Not Before: Nov 1 04:00:52 2026 GMT
Not After : Nov 2 04:00:52 2026 GMT
Subject: CN=75dfc22de0ffb772babcb83640744977b24cc4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:29:61:48:a0:a6:41:96:f6:55:6d:14:a3:
e7:13:c5:6b:51:cb:43:cd:17:fb:ad:3b:3b:05:c2:
c5:e4:ca:2a:f8:e8:9d:ea:8d:45:a6:0b:42:30:83:
5b:01:ed:9f:f0:75:ce:4b:24:70:00:76:d4:bb:30:
ea:72:a0:16:5f:b8:f8:f8:ad:30:34:ce:20:24:f2:
94:4e:f8:54:1a:c7:93:84:14:55:66:d4:4b:7d:de:
be:f3:31:6e:e0:2a:ba:a9:64:d6:62:1e:51:7d:9f:
ab:82:b4:81:75:c9:a1:25:77:dd:8e:d7:46:4c:d1:
54:bf:a6:02:14:6d:b3:b0:4e:76:20:a2:9a:cc:48:
3c:23:fc:e9:d8:4b:ca:21:8c:f4:6e:05:ef:28:76:
7a:e0:80:4a:a5:29:79:be:07:2e:ed:aa:b4:16:f4:
d3:7b:da:1e:a6:76:a9:1a:1d:58:af:2f:9b:69:fe:
8f:19:d1:b0:5a:27:cc:f5:29:92:ba:02:c3:f6:bc:
cc:4a:54:e4:ef:5c:7d:a1:1c:80:16:9d:39:33:49:
62:dc:76:ae:3e:31:ae:87:64:70:fb:7a:58:94:0c:
74:0f:06:e7:06:f2:63:16:48:e9:ae:98:df:60:1b:
25:e8:70:f8:a7:3e:ef:d4:42:58:1f:5f:86:3d:72:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:C2:2D:E0:FF:B7:72:BA:BC:B8:36:40:74:49:77:B2:4C:C4:FA
X509v3 Authority Key Identifier:
keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:40:5b:4c:d9:26:b9:ea:82:4f:01:2d:89:05:f2:97:84:91:
a4:a7:79:1b:29:d2:a4:c7:21:00:2e:ce:1c:42:1d:91:ad:2f:
20:90:d1:48:54:f5:64:24:d4:db:b2:a1:24:b0:5d:69:b9:f3:
05:f0:d0:e6:cc:12:2c:a6:80:77:4a:c0:58:d6:c6:33:95:5b:
10:5b:95:67:25:e5:1d:d4:3b:df:6b:fd:87:88:63:bd:cf:57:
33:8e:6f:b3:c9:a8:ad:65:37:c6:13:09:5b:5f:b4:b9:dd:25:
7f:fc:07:60:25:96:1f:63:bd:32:36:e9:92:8f:dc:1d:6d:1f:
2e:a6:c3:07:f8:4b:35:c0:73:d8:f9:3e:33:48:e9:3a:d6:b3:
1a:19:33:8a:6c:a8:46:82:77:a5:92:95:e5:91:01:27:f1:99:
b0:e5:d5:53:f0:db:d5:ac:1b:08:5b:44:51:ce:18:2c:b5:d5:
07:c4:24:b8:b7:43:2d:17:06:2b:55:f2:f2:5e:05:0a:a6:35:
9a:52:dc:ce:d0:6b:d3:c8:ec:4d:5a:f9:9e:96:5a:4b:1d:a2:
42:d9:87:94:a8:af:f4:fe:eb:a1:30:b5:73:b4:03:9e:c6:6a:
30:19:d1:f2:03:5f:aa:ac:b6:89:15:4c:9c:a4:7d:f7:41:0a:
c2:27:d7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:03:04 2026 by rpki-client