Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
File: mBFkq3lqrTz68oOQ9k3ew92W0pA.mft (raw, json)
Hash identifier: z47HkGlp1tFrnSA5ii6QcjyX7ZXL19nQHhC7rfr0rHU=
Subject key identifier: 0F:5B:5A:0D:D1:A6:55:0D:97:4B:88:69:0B:C4:7B:C8:0D:10:39:C7
Authority key identifier: 98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
Certificate issuer: /CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Certificate serial: 01A17BF20850B252DF2274E9D0FE1DA388E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
Manifest number: 0142
Signing time: Tue 27 Oct 2026 06:00:21 +0000
Manifest this update: Tue 27 Oct 2026 06:00:21 +0000
Manifest next update: Wed 28 Oct 2026 06:00:21 +0000
Files and hashes: 1: VEOXlbCEYPXuq0fRxQy_0buCUmo.roa (hash: 1UgV51kONbQoeYkLuDiM4fOStjiZf9fRzxoncm+9qmI=)
2: mBFkq3lqrTz68oOQ9k3ew92W0pA.crl (hash: jQmHJNMPDMB+U7xqhNl7whGlIyqoP7HEll4vs3Sj118=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:08:50:b2:52:df:22:74:e9:d0:fe:1d:a3:88:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Validity
Not Before: Oct 27 06:00:21 2026 GMT
Not After : Oct 28 06:00:21 2026 GMT
Subject: CN=0f5b5a0dd1a6550d974b88690bc47bc80d1039c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:3a:99:25:c3:5c:b9:99:52:48:3a:b1:6f:
d1:95:c0:17:fb:3f:d1:32:27:02:6a:9c:38:9e:66:
b8:80:bf:d1:bd:63:38:0b:6b:94:16:43:fa:50:26:
a0:6e:01:cf:4c:44:19:e6:47:ae:7f:25:db:16:37:
9f:59:14:3d:c8:58:97:2a:fe:6f:61:7d:73:be:d2:
fd:98:ad:0b:24:89:48:9e:16:eb:34:79:ba:da:66:
5f:cd:65:28:fa:69:50:aa:c1:8d:a8:03:dc:6a:1e:
00:91:ae:51:a5:c9:b1:c9:55:f7:18:e8:97:99:3a:
a0:c4:75:a3:cb:87:70:4b:9f:8e:1d:5f:b4:2a:40:
87:5e:0f:52:de:c4:bd:4a:e9:69:e9:62:13:76:4b:
25:e4:d3:bd:44:27:a2:50:7c:cb:56:d8:0a:4e:de:
95:19:c3:a6:a2:40:24:ab:f6:31:e5:c5:1f:42:9c:
a6:1c:6a:a3:fd:af:56:ed:95:94:7c:32:b2:b3:6d:
ca:53:57:db:bf:ae:71:d0:96:3e:05:e9:45:7f:c4:
d9:50:b2:d9:d0:74:73:4b:1d:77:38:e7:cf:1c:1a:
62:3c:14:52:a0:7f:e8:c5:d7:42:bc:4b:5c:3f:00:
fa:a2:c4:5f:e2:0a:59:9a:4d:a6:6d:4b:48:c2:d7:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5B:5A:0D:D1:A6:55:0D:97:4B:88:69:0B:C4:7B:C8:0D:10:39:C7
X509v3 Authority Key Identifier:
keyid:98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:53:fb:25:a5:75:ab:01:59:22:65:86:af:ac:a5:9e:77:a3:
94:b8:fa:f7:1a:e2:44:b8:c3:a4:2a:1b:fc:a2:e9:92:c0:e9:
e3:41:44:ab:cd:ea:63:cb:3f:bf:10:88:fa:4b:59:a2:e0:33:
47:45:64:15:c9:e9:e3:07:6e:52:ca:b8:e3:1b:96:0c:2f:4e:
ac:cc:5f:70:0e:0a:75:dd:f9:e4:5e:e0:d1:1e:e3:8f:e5:e6:
4e:52:0e:4a:ed:27:1d:ae:35:65:b9:2c:b1:32:4b:4b:d4:f9:
7f:a2:7b:18:5e:ae:1a:43:5d:4c:27:31:c0:4e:b4:06:0e:2f:
78:c5:64:0d:ca:6c:cf:08:60:77:5e:3e:36:51:a4:16:97:ff:
ed:76:63:ff:3c:3f:24:06:bc:7b:39:c7:9e:9f:99:57:10:cf:
93:9f:cb:75:bc:fa:55:5f:05:e4:a9:86:63:e4:4f:34:67:2c:
37:4a:cb:b0:8f:05:7a:53:62:00:27:7a:df:b9:14:90:54:9f:
34:c3:3c:a2:09:1f:a2:69:8b:be:65:8a:6f:bf:17:99:77:fb:
b4:69:aa:d9:32:59:82:41:ad:fd:b3:1b:e3:76:66:e3:a2:e1:
76:68:81:67:11:c6:66:42:22:6e:8d:c0:08:2e:09:9f:db:56:
e4:0e:31:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:06:10 2026 by rpki-client