Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: KFwzoXfQJIYhEdZya4SARFYOk7LCMl8dyoqWqgRYb9E=
Subject key identifier: BA:A2:F6:03:BD:55:AC:AA:CA:94:A7:68:33:B6:25:52:F7:72:BF:59
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 01A18D1CF8F7E11C19A9B91042173555083B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 0980
Signing time: Fri 30 Oct 2026 14:00:48 +0000
Manifest this update: Fri 30 Oct 2026 14:00:48 +0000
Manifest next update: Sat 31 Oct 2026 14:00:48 +0000
Files and hashes: 1: 1ULsjrhU_Mgs_8Mvd-oE1b7ANaE.roa (hash: BPqaZcuEdD+lQrMI+iPU/GW6APEbwg38yW1mZjGwXr8=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: vRBeilKhV0Y7I7egRKKppOxs79urTbesk0e7v+aOGDY=)
3: pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa (hash: EuVKLvC6yGpoLeqj+M0pu9788Rfc943eOWrQgVLBCHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:1c:f8:f7:e1:1c:19:a9:b9:10:42:17:35:55:08:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Oct 30 14:00:48 2026 GMT
Not After : Oct 31 14:00:48 2026 GMT
Subject: CN=baa2f603bd55acaaca94a76833b62552f772bf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:85:40:b1:7e:53:83:1d:2a:d5:ed:c5:22:
34:f0:82:bb:56:04:ec:cf:11:b5:a3:d7:bb:8b:c0:
60:b6:88:5b:10:80:b0:29:d9:28:4b:cc:7d:40:e9:
9c:f3:86:51:9a:b6:4a:f3:0d:88:ea:dc:25:49:87:
5a:04:99:c6:cb:b0:fa:95:39:b7:5f:ea:e7:8a:3a:
e9:01:25:7c:04:a4:30:7f:d3:e9:e9:c9:67:83:66:
b2:84:e0:58:9f:33:68:54:18:f8:ca:f1:42:ee:0e:
ee:17:73:d5:11:18:6e:c6:2d:79:2e:35:46:42:b1:
96:64:23:8f:63:ab:cf:38:e5:88:ff:4e:b3:d7:bd:
31:de:8d:a3:dd:16:fa:45:a6:ce:c5:95:4f:c9:13:
87:12:19:42:71:9b:b3:42:26:5e:6b:90:f1:ca:ba:
ec:02:ce:09:41:53:c5:18:73:ee:7d:09:ac:d2:d9:
87:8a:df:6f:24:49:c8:47:5e:01:e3:09:e6:0a:07:
d3:de:6a:c0:e0:dd:78:dc:fd:49:f0:58:2d:41:05:
b5:72:da:bd:78:98:c8:72:e0:49:6a:43:ae:a8:da:
9b:58:ef:0c:fb:dc:f3:f5:f7:41:14:fd:8e:51:fa:
dd:28:6f:78:a4:28:b7:9d:16:f6:f3:1b:bc:bc:59:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A2:F6:03:BD:55:AC:AA:CA:94:A7:68:33:B6:25:52:F7:72:BF:59
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:11:d1:eb:09:99:5e:32:58:74:24:4e:b9:d5:3a:de:44:2c:
6d:d4:4f:b1:24:ef:16:3b:30:35:21:0b:70:6b:11:41:e9:47:
96:60:a3:e1:a7:65:49:e9:bf:8e:12:21:aa:9e:80:73:25:b4:
9c:75:47:47:75:a8:91:7a:02:c2:3a:c1:d3:0e:59:fe:29:3f:
1a:18:5b:ce:2e:ba:17:1e:46:f8:84:d2:e3:9f:b9:77:f4:25:
28:bf:4c:c1:0f:b9:b9:a8:52:54:41:2f:5b:41:25:1f:2b:4d:
0b:7f:63:f4:b6:40:f8:f2:c4:a5:8c:4b:08:77:e1:19:bd:18:
45:df:ea:5f:d3:e4:94:f0:a2:cb:35:42:79:a2:de:e6:e0:ac:
4f:5d:56:dd:d3:0b:94:af:67:99:05:01:f1:b4:0b:4a:c9:ae:
e2:80:bd:89:b9:62:b4:88:de:d8:cf:a1:e9:e4:35:48:d0:e2:
bd:17:0b:ad:bd:a1:31:fc:59:ae:13:d0:66:3c:df:bb:9d:79:
48:f2:dd:6b:ba:f4:dc:95:bc:60:b9:d1:46:2d:0a:88:72:73:
a9:82:04:a5:e0:90:0b:9c:80:b4:aa:56:23:ad:7a:85:a9:b4:
8f:a6:73:2d:6f:9b:dc:2e:00:d8:40:e2:8d:89:28:2e:af:ed:
86:14:bc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:10:00 2026 by rpki-client