Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
File: mBFkq3lqrTz68oOQ9k3ew92W0pA.mft (raw, json)
Hash identifier: 37SN4Hcp/CFpeMX2K4ZDoX9uzTjhi4JJywm593wFE0E=
Subject key identifier: 68:1A:C9:73:93:C9:1C:FA:3A:C8:CC:4A:E8:10:AF:D3:89:C9:EE:F9
Authority key identifier: 98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
Certificate issuer: /CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Certificate serial: 01A08C7B2CC1EF9D84F08598FDFE56CB8FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
Manifest number: C6
Signing time: Thu 10 Sep 2026 18:01:17 +0000
Manifest this update: Thu 10 Sep 2026 18:01:17 +0000
Manifest next update: Fri 11 Sep 2026 18:01:17 +0000
Files and hashes: 1: VEOXlbCEYPXuq0fRxQy_0buCUmo.roa (hash: 1UgV51kONbQoeYkLuDiM4fOStjiZf9fRzxoncm+9qmI=)
2: mBFkq3lqrTz68oOQ9k3ew92W0pA.crl (hash: n3b1FBKlO30Kjs2t3MwFzN09x6dGhxgfQjHhqvotiTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:2c:c1:ef:9d:84:f0:85:98:fd:fe:56:cb:8f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Validity
Not Before: Sep 10 18:01:17 2026 GMT
Not After : Sep 11 18:01:17 2026 GMT
Subject: CN=681ac97393c91cfa3ac8cc4ae810afd389c9eef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:9a:23:c7:57:59:3b:5f:69:c2:0c:62:24:
97:7a:19:1d:4f:cb:97:96:4d:12:f8:cf:2f:b8:b0:
05:ae:f8:70:28:10:d9:d8:01:52:0f:1c:9a:c7:1b:
42:1e:06:47:a5:61:8d:c2:c1:e0:a0:b6:26:76:d9:
3d:84:45:c3:86:4a:87:77:f8:e7:49:4a:32:eb:fc:
cd:46:59:d4:43:dd:fc:44:11:98:40:b2:bb:ce:13:
b4:5b:26:1e:94:2f:01:15:0b:eb:5e:87:48:87:7b:
ff:bd:ad:b4:43:8b:e3:87:90:fd:e0:1f:3b:0d:e8:
cf:2f:fe:cb:3b:25:b1:52:76:37:0e:13:de:64:39:
c1:02:a2:63:a6:13:f3:db:0b:55:e1:73:19:81:79:
92:f4:0e:7c:b7:44:e8:bf:eb:61:5d:00:f9:e4:0a:
d9:9a:0a:ce:65:cb:f3:db:b5:ab:0a:3a:e1:2d:3c:
ad:a6:fd:b3:a8:c0:4d:47:ae:87:31:2a:24:51:a6:
8d:83:aa:3b:4b:3e:63:59:d0:55:85:18:28:e3:e3:
2d:de:0e:34:ba:ad:bb:fb:9e:dd:da:51:11:21:8a:
d5:f8:23:b8:18:92:b6:03:24:d6:37:30:48:e0:98:
a3:72:6b:aa:f0:1c:0f:c2:9e:12:0a:33:73:e3:e3:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1A:C9:73:93:C9:1C:FA:3A:C8:CC:4A:E8:10:AF:D3:89:C9:EE:F9
X509v3 Authority Key Identifier:
keyid:98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bc:98:c1:f2:9d:b4:db:b4:96:5f:f9:b3:25:64:2e:3f:b8:
57:2f:02:ad:2a:48:3e:9b:42:43:d6:68:b7:b6:37:c3:b2:12:
a7:1f:8c:c5:64:dc:9e:b7:b3:d9:ca:f6:5e:45:e7:29:b7:a8:
95:66:eb:d8:3c:2d:88:b8:8f:f8:80:9b:1d:db:82:f7:91:b7:
27:eb:d6:f3:61:7a:0f:ea:49:93:93:e8:3f:22:c0:5a:41:27:
cb:11:62:21:bd:55:c9:96:d4:f6:4e:06:27:cb:28:a2:f9:a2:
cb:f9:c8:6a:4c:2e:de:69:1c:12:56:10:90:cd:fb:b4:e6:b2:
90:1e:bc:16:32:99:27:44:a7:e7:65:16:37:0e:4d:85:fc:78:
ce:10:36:31:14:8d:ed:61:0c:92:8e:e3:bf:7c:4f:9c:2a:bf:
e7:d8:29:5b:4b:91:9b:b0:c8:c1:b0:0d:d8:75:85:7b:7c:98:
78:4e:d9:0a:8e:03:c2:b7:c5:c9:1a:ef:e8:55:45:9b:32:ab:
98:50:4f:30:02:2b:5e:78:73:ac:52:86:56:ca:37:43:83:3f:
61:5d:67:ed:82:5c:a9:c7:32:a3:b5:69:fc:7b:55:ce:6a:c6:
bf:22:c5:0a:18:df:16:f8:ab:fb:f4:36:04:0f:a0:cf:dc:b0:
45:16:9f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:33:05 2026 by rpki-client