Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
File: n5D0diDPsoZkkPXRGL0lpQBTEeY.mft (raw, json)
Hash identifier: Dhb6ngasqqJ38f6IuiUtBzyYzZN9BzmwWCbesSTeJjM=
Subject key identifier: 25:2D:07:1D:2C:55:FE:BE:F9:12:80:AF:D4:04:DA:48:EB:55:7C:8C
Authority key identifier: 9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
Certificate issuer: /CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Certificate serial: 01A18B657C807A4996D11719A0C748FC0171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
Manifest number: 0146
Signing time: Fri 30 Oct 2026 06:00:46 +0000
Manifest this update: Fri 30 Oct 2026 06:00:46 +0000
Manifest next update: Sat 31 Oct 2026 06:00:46 +0000
Files and hashes: 1: Qk8SUDtv35PQudBghJLMDCkV05Y.roa (hash: CGtXCN1Ppc2jLH4a4E4mJ8Yb24I37XQwBgJ85+uhimE=)
2: VLazWnEoP4FNqXwAq5qItoa84gg.roa (hash: GIpN7+SpErb0kVRnHT1vQxVl+Mf313Qjqs5dCJFjsZA=)
3: n5D0diDPsoZkkPXRGL0lpQBTEeY.crl (hash: hfX4eIn6hqppyBFSfkR6qq7ttv4R5llWMNXnUE+Sh+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:65:7c:80:7a:49:96:d1:17:19:a0:c7:48:fc:01:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Validity
Not Before: Oct 30 06:00:46 2026 GMT
Not After : Oct 31 06:00:46 2026 GMT
Subject: CN=252d071d2c55febef91280afd404da48eb557c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:df:bd:1e:c9:24:85:d7:e9:fd:f1:e2:dd:
ff:a4:25:a5:fa:0e:a1:a5:0c:77:78:f1:06:5b:c4:
72:5b:2d:2c:77:1a:d9:eb:51:1e:6f:97:81:25:24:
0c:14:eb:e4:f8:8f:b1:0f:5c:bb:59:d0:b0:42:55:
ba:20:71:39:f7:5b:3e:f7:48:31:8c:96:12:61:e6:
e7:6c:bb:ca:77:31:73:ab:d2:2c:8c:7b:ce:13:9c:
84:58:2c:15:f7:af:92:a9:65:a6:ea:1c:92:92:b2:
bc:5c:9e:cb:32:1b:7f:ff:93:af:9e:be:fd:3e:f4:
00:66:e5:46:ed:1c:a4:3f:da:e9:d3:91:9f:03:65:
71:2e:8e:75:a2:7d:2c:ad:9f:82:af:a1:45:cd:09:
7a:f8:ea:4c:00:3d:61:23:53:ed:dd:e6:27:e1:5e:
2e:f7:1e:78:b3:12:e2:ad:9f:f4:10:6c:4d:4f:71:
38:c3:1b:7a:d1:52:99:c2:96:c3:b6:9d:e2:25:cb:
82:f7:fa:17:bd:d6:75:a4:a6:71:1f:3e:8a:26:6f:
fa:c6:6d:c3:69:8d:79:9f:c9:3c:3d:21:d5:94:45:
dc:19:8f:74:9c:3c:ca:d4:35:1b:58:cb:3d:6d:4e:
de:85:58:fe:6b:50:bb:9d:1e:ea:80:2c:54:21:b6:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:07:1D:2C:55:FE:BE:F9:12:80:AF:D4:04:DA:48:EB:55:7C:8C
X509v3 Authority Key Identifier:
keyid:9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:58:8c:d0:06:5e:5f:80:d5:09:76:01:d7:1f:72:52:08:24:
8b:e1:84:51:27:66:f9:19:5b:c5:0c:85:dd:f8:a9:68:9e:0a:
b6:76:12:ae:38:0b:31:17:ed:b9:7e:ed:fd:06:2e:25:8f:fc:
7b:82:aa:f4:62:7f:05:6c:54:f2:ba:14:02:ac:75:5e:68:bb:
7b:1c:7c:2a:50:bf:66:1a:46:29:04:aa:ae:5f:5c:5e:3b:3d:
f0:ab:af:02:f0:42:69:f9:77:9f:9d:15:3f:84:e9:d1:5d:93:
b7:f0:14:b2:97:67:9f:a2:28:3c:ed:a5:b8:72:a2:6f:4d:3b:
dc:c0:41:e8:38:a2:e8:4c:96:0d:2b:79:8c:9d:2e:bb:4b:8f:
70:23:e5:76:86:43:7c:42:3b:98:f0:1c:99:8a:f8:4f:b9:93:
13:d9:35:4b:72:06:1b:c8:66:25:23:54:85:be:ef:d8:17:33:
48:d7:bf:0d:42:ce:4d:69:26:6c:4b:46:67:f6:71:f7:6b:62:
ca:86:35:90:57:6f:bb:07:a6:bc:4e:c7:a4:02:ad:4f:42:d3:
e9:87:15:43:78:09:dd:72:23:d3:83:ba:ae:0a:0e:c7:ca:8b:
13:84:46:89:2d:c9:55:ae:4f:3d:59:11:66:73:43:24:3f:8a:
ea:5e:a4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:23:51 2026 by rpki-client