Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
File: mf5n9L9N0mrjFbMae0cs5NXBrmo.mft (raw, json)
Hash identifier: hQgKdhkfhiZ1pV9fNF8BMsSPbxFHT8DSfk/w6SD2BXM=
Subject key identifier: 10:0C:29:8F:5E:A7:DE:54:05:02:11:D1:3B:F2:CF:1A:C3:0A:F0:E9
Authority key identifier: 99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
Certificate issuer: /CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Certificate serial: 01A08B31B8FE4B323A2CB50A9AF771CF2A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 12:01:26 +0000
Manifest this update: Thu 10 Sep 2026 12:01:26 +0000
Manifest next update: Fri 11 Sep 2026 12:01:26 +0000
Files and hashes: 1: eMpcZEpOg2N0GNjlI3sO9BmaZ6A.roa (hash: j9M/fnlNW/6tDg+Ea3qW22DPN5/BiegIfG702h57st4=)
2: mf5n9L9N0mrjFbMae0cs5NXBrmo.crl (hash: uqmSjUxYqB0Vy/UXuwZIK6eYfq0mx2AhSDvJ0SbEEXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:b8:fe:4b:32:3a:2c:b5:0a:9a:f7:71:cf:2a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Validity
Not Before: Sep 10 12:01:26 2026 GMT
Not After : Sep 11 12:01:26 2026 GMT
Subject: CN=100c298f5ea7de54050211d13bf2cf1ac30af0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:3d:b7:29:76:69:63:8e:33:6f:d4:ab:f6:
85:4a:ff:69:8e:51:25:6b:ff:f6:52:c0:b5:e0:d5:
c2:e7:4f:91:b2:bf:c3:c1:c9:52:58:16:20:0d:00:
57:a2:0c:fb:b6:c8:36:71:46:57:41:d8:56:04:ab:
f5:66:11:72:12:95:fc:21:1c:93:68:62:d0:5d:79:
9e:d5:4e:3f:11:64:92:da:df:c9:08:f0:ce:ab:1c:
9c:46:ae:b7:3c:31:63:16:98:d8:5b:48:82:5b:9d:
6f:29:d1:f0:0c:2f:a6:6b:65:26:c8:23:c6:54:90:
c6:75:8e:e8:f8:72:10:ba:3a:1f:45:1b:cd:1f:e6:
d7:3b:9b:36:0d:bc:d8:60:b3:39:63:18:95:80:fe:
c2:8e:1b:43:39:76:58:45:14:1c:f2:43:1d:f6:e5:
49:d1:fe:61:ee:9b:b5:33:5b:57:e0:76:dd:51:88:
5c:f7:f0:99:29:46:fd:bd:03:29:25:bd:78:a8:61:
c0:35:74:8f:b1:a1:23:0d:70:a9:7b:ef:cf:25:ba:
8f:28:95:e1:8f:7a:a6:dd:14:e2:c1:e1:90:cc:15:
6c:74:92:51:23:4e:b0:80:dc:60:41:15:80:f8:97:
b2:53:6e:09:fb:06:ba:b3:86:ce:57:c2:ff:fa:22:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0C:29:8F:5E:A7:DE:54:05:02:11:D1:3B:F2:CF:1A:C3:0A:F0:E9
X509v3 Authority Key Identifier:
keyid:99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:af:27:ca:fa:04:83:2b:96:52:8f:66:43:33:20:06:07:51:
bd:c8:41:58:fa:ec:65:f8:b0:f5:ee:00:07:49:16:f6:d5:ed:
c1:fd:e8:97:4a:3b:c9:d3:9f:8c:91:75:0a:ac:91:aa:70:a3:
5c:a2:a6:19:c1:98:64:12:fc:60:06:ff:e5:e2:2b:91:92:31:
88:81:b6:32:a7:04:87:4f:f6:27:08:24:1a:92:95:06:c5:0f:
f2:13:24:78:ab:05:b4:71:aa:95:68:e3:37:31:a0:8f:0d:d9:
59:29:bd:94:ff:c1:49:26:39:6a:ab:9d:87:ca:61:d0:8f:54:
d7:bf:59:1c:ad:46:13:57:2c:44:74:b9:28:0d:69:86:67:36:
af:a7:af:02:80:73:d2:cc:cb:ee:3c:0f:3f:bf:0e:a7:f8:d0:
65:93:b1:9f:2e:00:9e:f3:cc:1a:b3:dc:c7:81:39:0e:5b:8f:
74:8f:5b:3f:75:b3:a6:48:27:8f:ea:04:2b:f8:d1:bb:92:c1:
47:ee:86:ec:31:03:3f:7f:77:be:87:43:b8:14:96:4b:33:56:
68:ea:fa:a4:53:76:ee:9d:4e:fc:26:ff:b5:50:22:a0:be:33:
2c:13:56:ef:6b:06:f9:88:30:fe:06:31:17:7c:b7:dc:aa:50:
f2:7f:6e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:58 2026 by rpki-client