Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
File: mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft (raw, json)
Hash identifier: e/qQ9Vc0/XgvAKtNf2frSDoMwvhiOj+r8BdF2zkR4J8=
Subject key identifier: 60:0C:0F:22:89:4A:D6:16:AC:80:C6:6F:7D:19:66:FE:0E:03:99:4A
Authority key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
Certificate issuer: /CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Certificate serial: 01A17AA8E66892048EF20E981E6B11EDE398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 00:00:51 +0000
Manifest this update: Tue 27 Oct 2026 00:00:51 +0000
Manifest next update: Wed 28 Oct 2026 00:00:51 +0000
Files and hashes: 1: H-yVjLNehbZXND4w0DdBNVdmOOw.roa (hash: ICTmsvotmJK1iUZ3KxS7gNW3cwr6Lx/dr2uhczVnraM=)
2: mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl (hash: KCLHlF2I3641OME6Ya28lHj1aqwInnEbqrrUrZM3CKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:e6:68:92:04:8e:f2:0e:98:1e:6b:11:ed:e3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Validity
Not Before: Oct 27 00:00:51 2026 GMT
Not After : Oct 28 00:00:51 2026 GMT
Subject: CN=600c0f22894ad616ac80c66f7d1966fe0e03994a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b3:3c:81:40:15:62:a7:56:7c:9f:fb:74:ea:
f9:61:9b:5e:52:9f:e5:ed:66:0c:ad:04:7f:e5:e2:
21:b7:40:e3:90:64:9b:5c:9c:fb:02:f2:3f:7b:b5:
0e:a8:8d:9f:4b:5a:52:6c:6e:08:b2:44:68:44:6b:
84:da:16:7b:43:39:68:a4:57:c9:aa:7c:15:62:91:
75:4e:d2:92:71:e1:d4:f6:1e:0f:41:31:44:7b:cc:
16:2b:b2:e8:f1:b5:a1:0e:6d:e3:4a:2b:c9:52:c5:
88:3b:b5:05:7a:11:36:ad:f3:6f:d0:1b:ae:a6:f4:
86:0d:b2:53:5a:c1:fe:bf:12:fa:2e:ed:d3:3a:d3:
cf:b1:92:e9:e0:c3:37:4b:23:93:6a:34:21:4e:de:
9c:21:7b:08:51:5e:25:9d:26:7d:0d:ec:6b:df:08:
73:77:20:6e:1d:66:6e:3f:0d:05:f8:a5:3d:0a:fe:
c0:82:4d:c8:59:e1:32:8a:45:7c:77:78:53:6c:9f:
75:a1:1a:85:15:a8:26:13:89:f9:da:9e:5d:8e:fa:
aa:54:04:68:c6:a0:2a:31:de:43:8b:5e:9c:01:cd:
a8:c5:8f:dd:45:51:ab:26:40:8c:97:f2:62:d0:bc:
15:4e:0e:19:44:d7:dd:a4:8d:69:da:12:c8:6e:ae:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:0F:22:89:4A:D6:16:AC:80:C6:6F:7D:19:66:FE:0E:03:99:4A
X509v3 Authority Key Identifier:
keyid:98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:15:48:0a:c3:0d:84:2f:08:36:6e:e0:48:88:e9:60:ed:12:
7b:95:44:a0:e7:99:d0:7e:53:1a:b2:d3:c0:7f:4a:1a:5f:76:
b5:81:ab:93:6b:8c:20:2d:2e:12:62:84:dc:f7:d2:b6:97:78:
91:c7:63:b8:77:54:f2:d0:59:6d:3c:da:53:99:80:a2:0a:40:
16:b1:70:07:e6:93:3b:87:a5:3c:b9:ab:90:15:8f:6b:f9:90:
15:42:a4:ac:d8:b1:3e:d2:c1:6f:ec:1c:81:0d:25:16:ab:fb:
c7:9a:97:a3:19:2e:2f:a3:39:50:4e:1f:d8:22:c3:be:4a:bc:
5c:70:95:cb:ea:89:d8:78:26:a3:1d:7a:d9:59:20:40:3d:fc:
91:55:e4:00:e8:2e:b7:32:88:b6:fe:b0:83:92:45:78:14:88:
97:01:d1:0d:22:c1:5a:64:a4:3f:10:5a:aa:fc:6b:a4:b5:95:
9d:df:50:2f:4a:d4:98:d5:f0:d8:b2:dc:87:d9:d8:21:bc:26:
e1:e1:88:7b:69:d5:91:67:11:3d:2d:b4:28:73:34:77:c0:12:
7d:22:f8:ce:53:5d:26:1b:fc:6e:fd:72:58:6c:92:91:fa:30:
7a:2f:6d:b9:33:35:2f:6d:41:a6:82:2a:6f:63:15:75:76:72:
43:05:6c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:21:23 2026 by rpki-client