Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
File: m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json)
Hash identifier: RP0WpVj2tuypMAorNIK0jTc6/xSoqwZ2jaM5Yi+t1Y8=
Subject key identifier: F6:74:B5:C8:50:42:BE:81:85:07:60:BF:A7:9B:92:F3:5A:A5:2B:72
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial: 01A1803D327A467CDD59ADA2E0F2F1C43060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
Manifest number: 1AC5
Signing time: Wed 28 Oct 2026 02:00:56 +0000
Manifest this update: Wed 28 Oct 2026 02:00:56 +0000
Manifest next update: Thu 29 Oct 2026 02:00:56 +0000
Files and hashes: 1: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: q6QzEh+vnSTuzQ1+sM4b4hJYFw3dnu8t3Gh6k0/hA8U=)
2: oNy7iyROhmf7k1QXS1fyOykVhms.roa (hash: 7ICki/NejOefHux3d5CNCzujTTJwY1H52uKM23OBmV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:32:7a:46:7c:dd:59:ad:a2:e0:f2:f1:c4:30:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Validity
Not Before: Oct 28 02:00:56 2026 GMT
Not After : Oct 29 02:00:56 2026 GMT
Subject: CN=f674b5c85042be81850760bfa79b92f35aa52b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:7f:cc:cd:54:d2:30:6f:88:54:ae:db:95:
34:8f:f3:ef:5b:bc:78:db:fb:30:47:d1:aa:b4:7c:
2c:5d:9e:a5:dc:c4:17:77:0e:15:5d:02:22:14:98:
f5:75:d6:85:cb:80:d2:26:38:fd:a1:6c:d4:62:86:
f3:1e:46:e6:88:de:6b:7e:38:6e:25:94:c0:55:87:
b2:f8:7a:18:39:be:fd:e3:8f:a0:bb:07:ac:e1:24:
48:bd:ab:98:4b:63:12:3c:6d:dc:b3:c0:5b:4a:36:
67:a5:45:3b:17:dc:9c:29:ba:b0:6a:8d:8b:58:56:
86:36:74:ac:c1:fe:32:3d:44:fa:68:cd:df:e8:c8:
f3:ac:13:d5:5c:41:a6:1a:f2:2a:6a:cf:f1:b6:7c:
24:d1:6a:ff:7e:fd:77:9c:1e:fc:de:24:84:f6:b0:
60:bf:c5:7e:5e:0f:9d:2d:dd:ba:fc:49:6b:5a:88:
92:d5:48:94:39:4e:69:e9:c6:f5:c7:8e:6b:66:87:
93:a6:7e:db:c1:4e:e8:55:9d:7f:db:b7:71:d0:a1:
a3:5f:11:10:b5:d2:97:d4:77:4c:43:01:ca:92:4e:
5b:78:79:cf:38:66:b8:70:42:ef:43:a9:6a:9e:3c:
7d:80:3a:ad:f8:6b:18:8c:16:2b:7e:f0:7c:2e:0f:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:74:B5:C8:50:42:BE:81:85:07:60:BF:A7:9B:92:F3:5A:A5:2B:72
X509v3 Authority Key Identifier:
keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2c:3a:01:7d:7c:39:09:a0:ed:f2:5e:c5:dc:0c:81:a4:8f:
53:e3:90:7e:4a:73:e2:e1:c8:c9:c9:6b:fa:b4:5f:6c:30:49:
eb:32:a3:61:c9:20:8d:34:f3:9f:89:f3:f6:a6:4e:56:31:e5:
6e:c8:7e:38:15:ea:21:ba:db:ae:c0:ad:40:4c:ac:62:57:e0:
13:8d:0f:57:03:9d:6c:56:37:05:e1:f5:70:ec:74:23:1b:72:
cd:fb:16:9a:8f:c5:03:5c:ee:c2:fe:06:9a:9c:7b:f8:25:5f:
f7:47:78:e1:1f:3f:63:7d:26:7e:d0:81:b2:77:29:79:c6:15:
06:2a:48:72:71:db:ea:96:4c:f8:24:4b:eb:e7:6a:ba:30:49:
95:df:6b:d7:48:19:0a:41:b6:f5:4d:07:19:78:01:bd:b3:12:
ca:45:36:cc:42:63:c5:ec:ce:b5:a6:1b:c9:8c:db:8d:a0:40:
26:2a:53:b4:e1:7c:2f:8f:7b:83:58:15:9b:ec:73:95:cc:0c:
15:f7:9c:65:bf:01:71:f6:c9:fe:69:bf:da:8c:07:39:02:a6:
a8:2f:3e:56:e8:59:85:d9:9c:87:28:72:2d:44:5a:4f:eb:e4:
1e:f7:36:28:df:b8:06:fb:76:29:f5:19:81:21:be:b0:70:ac:
d3:3c:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:08 2026 by rpki-client