Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: EgclhVsjobYlfSiLDBZm7SnyGwZNd2f6HwSGB1zvyeQ=
Subject key identifier: 65:70:BA:3A:2D:14:2B:55:57:73:BD:8A:48:9B:03:E3:17:DE:A1:66
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 01A17C97D2458BD345D7DBFAED410DBBD564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 1AD0
Signing time: Tue 27 Oct 2026 09:01:26 +0000
Manifest this update: Tue 27 Oct 2026 09:01:26 +0000
Manifest next update: Wed 28 Oct 2026 09:01:26 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: dFmHn7uhfyNVHTlJexfMcUQrAoEAF7RuOGh5xLFBAHo=)
2: I5ohKLBmaxUTevQzWj4-q9pt2AE.roa (hash: vsHj8OGuxxJT7n23kvdJawzwXXsXNMGYAz3VXPfMYE8=)
3: JXkrwkvLZXqvLpWo6GIqE9djHow.roa (hash: pvxp7edBiYpg9R4WGN/sBmyvZQpHSdt5YdDqPGYyoLU=)
4: Jb48XUzprHRQSa7zDmEwkm8bHB8.roa (hash: UeQ11+qXjfNfzNk6IX1DTTmTHuYUChCRYnGGfuhQmW8=)
5: M4MI8IskioFX_GL9An1slOnzOXk.roa (hash: +6v5Ea5o3E61ySsVOGY9En91TXxPv4H1t9U0YnMleQI=)
6: cFUEIWQu7qe64nrzejsq3hzv3fw.roa (hash: Y5DG1bnBMtUo7Z76/zjvm84VdL7RwBfBAjPP2M8PD/c=)
7: hkFrsNhiq0TnoVB5lv6ukrym9kU.roa (hash: Lpo1dIydhWwC2a6odejRAjq7zYy9EyLkYPWh1THs0As=)
8: svxysR0fryYPn1ckppavIVkehYU.roa (hash: 8MNRRTqy3XlQo1M7+GUmMiXWjPTZpOon/19BgW0t8Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:d2:45:8b:d3:45:d7:db:fa:ed:41:0d:bb:d5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Oct 27 09:01:26 2026 GMT
Not After : Oct 28 09:01:26 2026 GMT
Subject: CN=6570ba3a2d142b555773bd8a489b03e317dea166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:58:91:03:3e:eb:d2:00:83:0b:68:0b:01:
c1:ca:9f:8c:e7:00:a8:58:63:87:b3:3f:ef:30:b7:
de:6b:41:b3:c0:d7:f1:3f:89:69:7d:a7:3c:22:65:
4e:5e:b5:18:ed:0d:dd:60:a3:f9:c8:f1:b1:a3:c1:
e6:6a:02:2d:75:00:af:d2:ff:4e:9b:31:f3:80:da:
75:b9:2e:a0:87:0d:30:8a:a9:88:f2:40:b7:35:99:
2b:fc:90:9c:fc:0d:c7:8b:88:a6:e6:d3:96:e9:fd:
21:bc:28:97:ae:d7:a8:89:35:ee:ee:5a:2e:8a:c4:
23:4a:92:f9:1a:09:2f:a3:c7:b3:61:af:18:0f:46:
8d:ec:50:f4:aa:0f:fc:de:90:63:46:67:33:ef:3a:
86:3e:7b:aa:05:7a:73:cb:d3:8d:cb:33:8c:f4:d6:
a7:a6:08:7c:81:0f:6f:76:2c:b7:b6:f5:b8:fd:cc:
5b:20:3e:8b:3d:1b:e6:62:4a:12:0a:47:48:3c:28:
fa:43:9a:86:72:0a:9e:88:ff:8e:23:3c:e7:77:15:
22:8e:38:d9:ce:0e:fe:94:66:8d:62:83:d7:2f:45:
55:c9:2e:76:e0:95:a2:6b:43:a1:cf:d2:56:cb:0c:
f6:dd:93:06:d1:96:d1:b4:66:df:77:09:80:3e:7b:
70:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:70:BA:3A:2D:14:2B:55:57:73:BD:8A:48:9B:03:E3:17:DE:A1:66
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d2:4b:79:54:4f:83:be:9d:79:43:75:91:26:8f:82:f1:31:
a5:28:eb:f8:90:5b:17:70:62:39:52:a6:e1:b8:f1:89:3f:59:
ee:d9:8a:2d:2d:cb:68:bd:b1:cc:0b:de:c4:e5:0e:fc:9f:8c:
bd:f5:5a:06:95:de:d3:0d:62:af:da:a7:c2:dd:f8:80:72:74:
b0:34:3b:ac:8d:1d:aa:7d:b5:6f:8f:d8:14:ba:d4:ce:04:22:
54:ac:97:11:c4:38:41:92:cc:e4:34:fe:bb:c5:bc:9d:43:7b:
80:c2:14:b5:65:28:78:8c:d8:f7:95:67:76:9e:f9:b3:f0:81:
d1:20:ed:be:44:32:e5:6c:e3:84:01:0a:02:79:99:e3:24:0e:
d5:1c:13:eb:4f:84:e0:b5:73:99:ae:a0:ec:fb:00:8d:c4:85:
68:8c:e4:22:84:1f:24:5c:37:56:1e:30:cf:39:49:3d:05:30:
31:99:6e:f3:aa:26:d3:bf:25:90:14:ec:78:ef:45:e3:e5:c9:
aa:76:99:21:d1:4c:89:53:02:9a:2c:6a:f0:c6:65:9d:f7:42:
e2:b7:93:80:cc:87:2f:79:07:a0:d7:20:e6:ec:00:cc:68:98:
8f:fe:b0:ff:59:da:1c:01:70:7e:a7:61:6b:61:28:5b:a7:8a:
3d:f3:d2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:16:57 2026 by rpki-client