Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: eSJGb6trBNp3Js30pzVeFWjpm14/15zE6WPag19TXhk=
Subject key identifier: 92:54:88:00:05:A7:82:5C:9E:5F:F1:80:1A:B7:22:40:1F:E9:E0:9E
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 01A17BF1E1CE2BAE5CC48A9055DF1F07DBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 06:00:11 +0000
Manifest this update: Tue 27 Oct 2026 06:00:11 +0000
Manifest next update: Wed 28 Oct 2026 06:00:11 +0000
Files and hashes: 1: 1-M17FsedROaF_Kne-5Hqf60_ZF0.roa (hash: dEdEroRDmqUptgIx5X9EfWXuPhIB2SKqFgAL57TKHAs=)
2: WMPpPZf121FGb5nB2wRyHO8v-RI.asa (hash: mKLFbSlwYIzmMfnFA89CJdrlniFC0Y+HVLJcXPAW800=)
3: iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa (hash: 853t8WhJ4kw5HbkYp7EUF9CdroSNYLBypKw+/lvJndw=)
4: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: F6LdPxKkJqgQtmoQZuDKXP6PFeq0/TsOVfN6arr6V8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f1:e1:ce:2b:ae:5c:c4:8a:90:55:df:1f:07:db:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Oct 27 06:00:11 2026 GMT
Not After : Oct 28 06:00:11 2026 GMT
Subject: CN=9254880005a7825c9e5ff1801ab722401fe9e09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:23:fa:a5:c5:26:e7:f1:9c:66:6e:81:c1:
6f:96:e6:61:e7:bc:17:43:98:6b:80:f8:68:0c:3d:
cf:cd:57:52:09:7f:79:da:58:1d:19:5c:db:0b:a9:
d5:ee:84:97:0b:4d:09:6b:d8:43:7a:a1:bc:df:d9:
ae:b4:6b:43:b3:bd:05:79:80:b0:9d:eb:f1:e3:87:
e3:fb:db:fd:81:f4:7c:c1:2b:b2:0c:2f:95:b7:1e:
b2:c7:08:5c:05:e9:8f:26:11:42:df:c5:a2:84:f6:
a8:dd:8d:f2:60:27:a4:68:60:14:4d:5f:2e:cd:44:
a0:7f:10:f7:ff:0e:a2:f3:78:7a:df:93:49:a0:2f:
45:d1:28:3d:9a:91:cf:64:02:a4:d5:5a:11:41:14:
cb:85:f1:e9:4f:9d:da:50:e4:57:e4:47:db:f1:94:
a2:12:32:21:4a:d3:c9:25:6d:4f:52:81:34:ec:59:
a6:88:23:5d:4d:43:5a:c8:c3:d8:ed:2d:b8:30:c5:
6d:50:ad:77:ab:9d:ac:1c:b1:e6:b1:9d:0e:a2:c8:
d0:6d:3b:e9:40:30:0f:48:27:77:f0:fb:20:e7:52:
82:c6:54:08:48:de:5a:5a:25:e7:d4:39:20:46:68:
a0:7c:48:37:a3:91:99:a9:f3:44:be:b8:af:3f:e2:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:54:88:00:05:A7:82:5C:9E:5F:F1:80:1A:B7:22:40:1F:E9:E0:9E
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:95:10:61:d1:a0:99:a1:0e:5c:e9:e2:8f:b3:a7:07:32:a7:
b9:cc:19:3e:f1:43:5a:ad:96:94:ac:5c:02:a2:23:15:b4:fb:
86:31:c1:a3:b2:61:3b:ba:fa:d6:d6:51:ba:c9:e6:5d:cf:c7:
fb:0a:da:14:d7:36:f0:90:4d:cb:2a:90:59:7d:bb:37:2f:36:
83:82:01:5c:c9:b9:80:40:db:e5:c6:3c:bb:87:b3:83:08:8d:
f8:3c:c3:7c:2b:dc:1f:9e:65:1a:cf:df:aa:7b:ab:39:0a:35:
c9:d0:4d:58:0a:0b:cd:c8:ee:b7:47:1c:8e:2b:9d:d0:53:4f:
d1:b6:8b:63:6f:3f:cc:d3:a7:95:ff:09:5d:ae:87:b4:22:23:
82:85:bb:35:42:73:41:98:c4:16:69:4b:58:7d:70:4d:86:1e:
db:64:7f:88:e8:92:88:6c:28:28:ff:10:54:98:52:d5:e5:13:
0f:31:f2:3b:64:3a:75:d4:91:f0:7c:eb:68:73:fe:08:f1:df:
cb:75:3a:a1:06:d5:8a:b3:a1:3a:93:90:76:65:83:c6:f3:0b:
73:75:fd:98:f7:63:5d:1e:0f:9a:d0:81:58:9f:3b:ba:a1:94:
a8:b8:8e:32:a8:e4:ee:d6:c5:e2:90:e7:5a:e2:21:54:a1:23:
9e:de:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:23:09 2026 by rpki-client