Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
File: mBFkq3lqrTz68oOQ9k3ew92W0pA.mft (raw, json)
Hash identifier: WckzTEsD1IDk1GIegiPQlPpYgHI9lzhfqJQXIfE2g1c=
Subject key identifier: 22:19:E1:8F:8E:D3:4A:3D:7E:89:99:06:14:E7:2A:ED:A2:18:DB:E0
Authority key identifier: 98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
Certificate issuer: /CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Certificate serial: 01A17DE1DC84EA89AAE0D7BA2748DA6B626D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
Manifest number: 0143
Signing time: Tue 27 Oct 2026 15:01:56 +0000
Manifest this update: Tue 27 Oct 2026 15:01:56 +0000
Manifest next update: Wed 28 Oct 2026 15:01:56 +0000
Files and hashes: 1: VEOXlbCEYPXuq0fRxQy_0buCUmo.roa (hash: 1UgV51kONbQoeYkLuDiM4fOStjiZf9fRzxoncm+9qmI=)
2: mBFkq3lqrTz68oOQ9k3ew92W0pA.crl (hash: GL+Zw3nKLO5GA37v+rdIAiZgv77YKgdFBLYOpMTD5xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:dc:84:ea:89:aa:e0:d7:ba:27:48:da:6b:62:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Validity
Not Before: Oct 27 15:01:56 2026 GMT
Not After : Oct 28 15:01:56 2026 GMT
Subject: CN=2219e18f8ed34a3d7e89990614e72aeda218dbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:5b:73:39:fd:99:c1:42:e6:d4:42:e0:c9:
69:7d:f7:e2:0f:b1:02:6c:cf:d1:b1:fe:c7:8a:dc:
40:53:27:f9:06:6c:13:8f:46:ab:e5:83:6b:18:d6:
9f:4e:64:ae:3d:67:7f:c7:c6:4f:77:ea:24:8b:46:
ab:aa:66:9a:49:16:97:1b:de:ba:53:5b:d6:be:30:
02:0c:3f:84:cb:48:0a:d4:65:33:f7:d0:49:3a:69:
0e:9d:75:f6:e3:0a:8d:07:fb:01:de:84:0c:65:62:
35:51:93:3e:9e:a0:a4:c9:f4:f6:0d:52:63:1b:95:
03:e2:45:fb:93:f3:0f:cf:86:46:18:ba:40:b3:2d:
f4:14:54:1c:ae:f5:45:63:06:55:09:d4:76:91:db:
27:06:08:c7:6f:9d:fb:12:b6:d1:7b:52:ee:66:53:
f5:34:de:95:af:47:b9:de:4b:c3:16:33:9b:9b:5f:
bb:d1:a0:a2:5c:67:75:b6:9d:9f:77:17:3b:61:33:
15:bd:58:f7:a3:1a:0c:d5:ce:8f:93:f2:22:59:de:
3f:04:d8:e6:52:c6:6e:ec:e5:d7:6b:66:ce:87:59:
5c:32:89:16:3c:d7:d2:13:9a:67:9d:f6:fb:e5:be:
ac:9d:73:ff:07:11:26:30:07:27:02:40:9f:64:fc:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:19:E1:8F:8E:D3:4A:3D:7E:89:99:06:14:E7:2A:ED:A2:18:DB:E0
X509v3 Authority Key Identifier:
keyid:98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d4:5e:f4:00:8d:d1:bb:79:35:32:68:1d:a5:18:84:06:5c:
00:e4:3b:5c:4f:95:7b:d0:17:cd:ca:cd:40:3a:40:e0:f7:d0:
c5:b7:e9:2b:45:95:1c:c4:f6:c2:09:e6:86:5c:ca:2a:84:71:
12:3f:d4:1f:9c:7b:28:4e:7f:97:c7:c1:e7:e3:eb:b7:bd:48:
83:62:3f:92:6c:15:09:2b:36:ea:b8:7b:76:a3:03:75:5c:c7:
b9:47:7b:90:65:e9:7a:73:c2:5a:80:00:8a:e2:ea:e3:12:87:
95:de:6b:ef:7f:a3:21:27:b7:cb:4a:8e:ab:86:19:0d:de:19:
df:6d:3d:2d:6f:21:cf:f7:18:62:f4:06:29:69:9d:f4:5d:4b:
98:74:17:0c:40:94:ef:10:19:a1:fb:30:ec:6c:35:86:4c:2a:
7a:ac:72:a5:92:64:97:a2:f9:d4:93:ab:3d:58:af:96:fc:64:
82:47:8b:6b:d6:9e:4a:1b:97:20:f6:27:0d:ff:ab:10:e4:f2:
20:27:01:dc:81:b0:70:95:2c:c6:34:8c:2f:9d:ac:f4:58:51:
2a:eb:31:88:3d:d9:05:5a:72:3a:cc:52:9a:b4:18:51:7e:e8:
a9:f1:fe:08:b9:4a:10:4b:19:3f:17:c3:90:e9:c9:f9:44:c7:
15:39:d9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:28:46 2026 by rpki-client