Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/mBCEMPsFoK0lHinn9K81yxzhUss.mft
File: mBCEMPsFoK0lHinn9K81yxzhUss.mft (raw, json)
Hash identifier: NQc5L5TF7K9+8esOm6F+15rwnEC6kDtPusIfz+hnVyc=
Subject key identifier: 71:C5:B1:F1:60:3C:D7:F0:FB:35:B1:2C:FA:E3:8C:17:D3:F7:C1:AC
Authority key identifier: 98:10:84:30:FB:05:A0:AD:25:1E:29:E7:F4:AF:35:CB:1C:E1:52:CB
Certificate issuer: /CN=98108430fb05a0ad251e29e7f4af35cb1ce152cb
Certificate serial: 01A18A1B8BF018B712628DDCBC03373D783A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBCEMPsFoK0lHinn9K81yxzhUss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/mBCEMPsFoK0lHinn9K81yxzhUss.mft
Manifest number: 55
Signing time: Fri 30 Oct 2026 00:00:23 +0000
Manifest this update: Fri 30 Oct 2026 00:00:23 +0000
Manifest next update: Sat 31 Oct 2026 00:00:23 +0000
Files and hashes: 1: IlWdjL-ytgCPbeKaKojbLcDcQVg.roa (hash: SODcmAQzLm1C4suUKGZYP2Pl6fVxYUkVGZ+lZxMphvg=)
2: Z7gYULQsmbvLbgbmHmscIz6zf98.roa (hash: s+jj3/PK5fs3M2FtKrTnCvCAEuY79jF5RTAzfgLyeJY=)
3: mBCEMPsFoK0lHinn9K81yxzhUss.crl (hash: sMYFaMG+8QIMN1DoRoNB8U8rovV2qLiaprLbrZ1xWwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/mBCEMPsFoK0lHinn9K81yxzhUss.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/mBCEMPsFoK0lHinn9K81yxzhUss.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBCEMPsFoK0lHinn9K81yxzhUss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:1b:8b:f0:18:b7:12:62:8d:dc:bc:03:37:3d:78:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98108430fb05a0ad251e29e7f4af35cb1ce152cb
Validity
Not Before: Oct 30 00:00:23 2026 GMT
Not After : Oct 31 00:00:23 2026 GMT
Subject: CN=71c5b1f1603cd7f0fb35b12cfae38c17d3f7c1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c1:38:c5:ee:25:a6:9d:e4:e6:34:f4:87:a4:
45:37:34:20:f1:4a:69:d4:d7:0c:0a:24:76:27:aa:
2d:5f:ea:58:48:d8:1e:06:9a:03:3a:c4:84:c6:45:
24:b0:11:6a:c8:a5:3a:b3:a7:e8:af:53:60:f1:e4:
85:7c:65:7c:b7:75:a0:5d:93:e4:ac:ce:8f:83:48:
a3:e8:2e:0e:b0:ae:1e:8b:17:84:74:c8:f5:e5:3b:
c5:12:62:9d:3d:3c:3c:eb:af:39:ac:c3:c2:85:99:
9d:cb:48:e5:00:e4:03:60:cb:15:cf:38:c8:94:21:
4a:ed:b9:0a:6a:02:04:b1:f3:65:bb:21:c6:f7:b7:
40:d8:ac:3d:4f:55:73:37:bc:5b:d0:e1:17:8e:8b:
2a:2c:f3:44:e9:f0:72:d1:ef:51:42:1d:89:33:3a:
a9:19:d0:5a:52:0b:24:ea:4b:c3:ec:c2:30:b8:18:
1d:46:b3:9f:6b:67:08:68:58:c2:51:6a:95:75:02:
db:52:26:04:6a:38:11:35:df:bd:22:ce:ac:cc:e5:
79:bc:38:ee:05:ca:b8:e0:3a:78:69:cb:1c:22:a8:
65:bf:ee:1b:fc:c7:a4:3b:6c:c3:91:99:40:da:28:
b2:9d:bf:f2:0f:67:fb:c7:a4:9c:22:de:54:1a:d6:
09:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C5:B1:F1:60:3C:D7:F0:FB:35:B1:2C:FA:E3:8C:17:D3:F7:C1:AC
X509v3 Authority Key Identifier:
keyid:98:10:84:30:FB:05:A0:AD:25:1E:29:E7:F4:AF:35:CB:1C:E1:52:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBCEMPsFoK0lHinn9K81yxzhUss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/mBCEMPsFoK0lHinn9K81yxzhUss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9de66c-ce9e-4cfb-aa8a-43a44f075a96/1/mBCEMPsFoK0lHinn9K81yxzhUss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8a:02:04:35:2b:73:63:93:9d:d8:c8:9f:c0:20:20:89:a6:
bc:d2:66:54:51:4c:cc:1f:94:06:ab:3b:b6:e6:2a:d7:21:24:
77:3d:97:25:12:ab:0f:59:6b:83:95:98:a9:d1:18:18:77:59:
ae:f6:26:e0:e0:cc:85:4a:15:ff:de:9e:12:98:a1:a5:cc:33:
03:5f:35:6d:29:df:af:d8:d0:5e:40:b2:4d:50:26:5e:34:5e:
98:02:7f:72:51:12:7a:1d:f2:21:ca:33:17:c2:e6:f4:6c:06:
b7:ae:f4:f6:00:5c:59:5f:54:67:3b:cd:40:2b:b8:81:58:2a:
85:a1:c5:25:2d:58:2e:f8:ae:20:3d:61:0c:88:ad:25:ba:8b:
c4:eb:a9:2b:be:99:ef:bf:42:df:29:91:ef:42:37:03:e8:1f:
6e:e9:49:10:f9:eb:74:6f:6a:3f:bd:8c:7e:78:c9:ad:e4:17:
6c:63:6c:9e:ae:96:33:47:1b:29:63:a7:6e:bc:00:01:ef:cc:
a2:6c:fd:30:d4:3e:c9:51:72:cf:50:b4:d0:0f:09:ca:9e:02:
15:e5:ef:d6:35:70:6c:91:4d:a1:9a:b4:1a:6c:e3:74:d4:bb:
10:27:f7:c5:46:ff:46:35:d0:88:a5:2a:b5:ff:70:3e:4d:d9:
8e:cf:93:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 11:16:45 2026 by rpki-client