Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
File: mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft (raw, json)
Hash identifier: rccid3zVi7YHyiNS/IYne2F2hvPg9DO1oOtqHGScdG0=
Subject key identifier: BB:A1:C0:66:9B:34:8F:38:AF:95:E1:3D:E7:79:9F:A4:E0:1C:CA:49
Authority key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
Certificate issuer: /CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Certificate serial: 01A17C97B10BBCD5368CCEC984E54E4626D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 09:01:18 +0000
Manifest this update: Tue 27 Oct 2026 09:01:18 +0000
Manifest next update: Wed 28 Oct 2026 09:01:18 +0000
Files and hashes: 1: H-yVjLNehbZXND4w0DdBNVdmOOw.roa (hash: ICTmsvotmJK1iUZ3KxS7gNW3cwr6Lx/dr2uhczVnraM=)
2: mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl (hash: eSO4AoGIISe+6UTedTEU1gj/WQ8hKD8zktjETk7mdMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:b1:0b:bc:d5:36:8c:ce:c9:84:e5:4e:46:26:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Validity
Not Before: Oct 27 09:01:18 2026 GMT
Not After : Oct 28 09:01:18 2026 GMT
Subject: CN=bba1c0669b348f38af95e13de7799fa4e01cca49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:c3:89:80:66:88:80:87:74:a8:47:b7:ab:
01:a8:75:40:84:1c:42:03:57:f4:c4:9f:af:c5:aa:
82:f1:65:bb:e3:b2:9a:dc:bf:99:9b:47:88:68:e2:
b4:87:15:fb:dc:14:bd:05:6a:70:63:bd:2f:9c:1a:
37:ff:ce:4c:cf:ea:65:9f:fb:94:62:04:64:57:f7:
c5:d1:8e:e9:cc:a2:f2:b6:41:09:03:c4:4f:19:a6:
49:e5:01:ba:ba:00:02:3a:c2:fd:4a:13:72:e6:1a:
b7:30:af:41:5e:38:75:ca:12:62:0c:ad:ef:7b:cd:
8c:b4:40:ab:3b:73:78:d8:58:a2:2f:53:86:f6:3d:
81:6a:90:eb:99:53:c2:57:d4:a2:ee:ad:10:8e:20:
96:54:56:a8:0c:7d:3b:18:24:10:0d:36:5f:f6:f7:
d6:27:d6:f0:78:1e:6e:a5:63:a9:b8:74:c1:75:d0:
9a:bc:dd:83:f2:1f:3e:31:ba:cb:47:1f:41:d7:bc:
b1:df:41:4a:3a:bf:83:dc:d3:3d:d8:aa:54:db:c3:
cb:9e:61:14:a2:06:fa:7a:bb:8f:10:e2:24:01:f8:
82:7b:83:5d:c2:24:16:00:35:63:c3:4d:61:43:26:
39:e3:34:49:5b:49:27:78:a3:c5:43:a9:6b:e9:10:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A1:C0:66:9B:34:8F:38:AF:95:E1:3D:E7:79:9F:A4:E0:1C:CA:49
X509v3 Authority Key Identifier:
keyid:98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:18:1f:dc:c0:69:7c:6d:bb:20:d1:0a:b9:a3:27:26:b8:7e:
20:dd:d7:dd:a0:59:46:2f:d0:a0:d3:a7:ad:30:7e:2d:ac:98:
3f:2c:ce:03:36:41:fa:74:80:97:70:24:af:9f:fc:89:e9:48:
0d:75:6a:ff:0d:39:be:82:93:2d:00:8f:9b:29:6e:0f:04:a8:
30:36:6b:ce:da:70:cf:29:89:a7:9f:46:5d:50:c9:53:5e:2c:
d3:fb:8a:11:4f:6c:38:fa:65:4e:92:79:90:13:24:5b:d9:a5:
ff:fc:62:28:53:56:37:f9:bc:3a:2a:eb:b9:ab:7d:9b:5c:b1:
ba:6a:86:15:90:76:d4:97:08:87:12:30:2a:54:0a:8c:1b:a5:
a3:7c:88:32:6f:66:81:69:00:2c:60:15:1e:91:06:c0:32:a2:
b7:83:d3:40:8c:d1:68:80:d5:f7:e3:4e:c7:bb:00:c5:93:43:
c8:41:e2:1e:a8:17:37:55:a0:1b:ad:7b:24:45:52:41:24:dd:
98:ed:28:47:f2:b4:c8:47:53:8b:c1:c4:1d:f9:5a:23:ff:7c:
23:63:fb:3c:a8:a1:8e:c7:d3:7f:7c:2c:70:f9:a7:75:0d:58:
4a:a8:0d:f4:19:79:4f:b7:c9:c3:b7:af:47:de:5e:40:ee:2a:
7d:0d:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:49:05 2026 by rpki-client