Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File: mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier: fVFG2OwZ2I/xB5GpbOzPGpG1zWouIW+fFh9Np6MsCjY=
Subject key identifier: 97:C9:F3:36:B8:4B:E5:5A:7D:3A:96:83:3D:CE:D4:32:88:AA:F6:56
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial: 01A17883A44AD2E10E2E6C51BE03A5E87BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number: 194C
Signing time: Mon 26 Oct 2026 14:00:55 +0000
Manifest this update: Mon 26 Oct 2026 14:00:55 +0000
Manifest next update: Tue 27 Oct 2026 14:00:55 +0000
Files and hashes: 1: KEyhGh3u-Ad2U98qs53aKdB_GJc.roa (hash: jZXKizyeTSKszZt9XLRCfNj1B4xBpIyE3AIW1lpSBsI=)
2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: wMZaY8ofN+UqYorBoAtHPA0lRS+OCy9xVibgsoi+LiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:a4:4a:d2:e1:0e:2e:6c:51:be:03:a5:e8:7b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
Validity
Not Before: Oct 26 14:00:55 2026 GMT
Not After : Oct 27 14:00:55 2026 GMT
Subject: CN=97c9f336b84be55a7d3a96833dced43288aaf656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:d4:91:90:ac:97:85:6f:00:3b:9f:23:60:
17:c0:03:c8:a2:24:e0:41:72:32:e0:6c:aa:cf:a6:
40:c6:2c:98:79:ff:9d:ac:41:b0:da:a2:10:de:5c:
84:e3:44:17:32:75:9f:7a:43:d7:1f:01:68:8f:82:
b6:48:48:35:64:26:82:7c:4a:8c:2e:05:a6:db:64:
60:5f:e4:fd:87:6e:b1:1f:9a:8b:00:03:b1:bf:ef:
04:0a:f3:7d:c3:76:5e:49:e7:13:63:9e:f7:f9:43:
9e:f7:aa:7a:60:f4:ac:5e:67:19:f8:61:c5:af:e0:
89:13:ea:ba:b6:bd:18:c9:ff:34:e9:43:3b:a1:c7:
08:12:05:8d:41:ab:6d:cd:fb:fe:d7:97:cb:32:97:
8b:96:7d:ea:82:d6:2d:a2:7e:7e:57:9b:ae:f6:15:
fb:23:14:cf:51:a7:9a:51:ea:5e:37:3a:29:fb:67:
27:38:c5:fa:4a:4d:43:6e:81:1f:66:74:78:dd:4f:
d2:bf:fe:1e:ce:2b:fd:84:e7:b3:35:0b:5b:4f:c0:
97:02:2a:5b:2b:71:5a:8a:90:9e:ca:14:16:96:de:
40:37:03:5e:c2:fe:97:ef:e8:01:17:c6:e2:dd:c4:
84:45:7b:e9:24:99:6d:07:af:32:c4:5a:7d:d4:aa:
1f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C9:F3:36:B8:4B:E5:5A:7D:3A:96:83:3D:CE:D4:32:88:AA:F6:56
X509v3 Authority Key Identifier:
keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:22:ae:4c:cb:d8:ae:42:6c:92:87:1d:fd:b3:64:bd:67:af:
70:a4:69:77:fa:03:96:93:4b:33:82:14:47:70:3f:df:fc:29:
36:4b:cd:86:b6:75:56:80:24:41:08:1b:4c:81:59:da:6a:4f:
4b:f8:9f:cf:50:8d:0e:6a:97:11:4e:5e:af:42:35:08:f5:79:
85:bd:7e:49:a3:fc:30:39:3d:ef:af:2c:05:80:49:83:94:08:
2c:31:15:8e:c9:68:e9:c9:f0:bc:26:68:6a:1c:50:1c:fa:c8:
b1:5d:f3:58:df:b3:7d:37:27:d9:d2:dc:8e:7b:f9:70:4f:16:
97:67:52:8a:b5:85:6e:78:52:e5:58:c7:40:7c:fd:d7:c8:0a:
5b:b7:2f:cf:be:bb:e5:05:85:fe:02:c1:0d:fa:f4:a8:3e:d4:
b4:6d:eb:d9:c8:47:e3:f3:03:a9:ac:f2:b5:32:53:bf:b8:b7:
92:32:51:ed:cb:47:d9:02:c3:88:76:45:ca:66:fb:27:4d:0b:
90:18:c2:97:2e:77:00:12:58:83:b2:62:6d:fd:b7:e9:7a:1e:
7c:79:94:af:7c:0a:f2:f0:1e:48:e1:4f:34:68:34:74:e1:47:
a4:59:b0:36:24:60:34:70:2e:8e:0a:e5:43:de:cd:4c:89:40:
db:ca:b2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:27:32 2026 by rpki-client