Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
File: 54ul2Y1Izr1a0EwIvwkIKxKn46s.mft (raw, json)
Hash identifier: 6L9qrqoPWwHckzRMQcgOQubN5+Dwq/YwXHB368Zid10=
Subject key identifier: CA:72:96:3B:42:5B:A9:D0:88:0D:9E:5C:E4:CB:02:A0:1A:25:C0:85
Authority key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Certificate issuer: /CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Certificate serial: 01A190C2CC9B4D5956C2855E4024EA92CE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
Manifest number: 0E30
Signing time: Sat 31 Oct 2026 07:00:47 +0000
Manifest this update: Sat 31 Oct 2026 07:00:47 +0000
Manifest next update: Sun 01 Nov 2026 07:00:47 +0000
Files and hashes: 1: 54ul2Y1Izr1a0EwIvwkIKxKn46s.crl (hash: tIdd8WaDklq8nw213iXcUPEJfP46VgM+o7HYxkUxc7w=)
2: Gr9DH2WwJbgZo0WIG9eWTKHCcFo.roa (hash: FB5htKHBt6Y7JRV/Z29yqmijt+k8tYh3TDPpzFpqMJI=)
3: NwUxZnR6ilqF9CfQdG6rMzsPqx4.roa (hash: YfrSwZsx1POCSy8VLN9vekskBNjs6p4NHoLWulpvdx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:c2:cc:9b:4d:59:56:c2:85:5e:40:24:ea:92:ce:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Validity
Not Before: Oct 31 07:00:47 2026 GMT
Not After : Nov 1 07:00:47 2026 GMT
Subject: CN=ca72963b425ba9d0880d9e5ce4cb02a01a25c085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:44:da:ce:b4:c3:ff:84:33:52:af:77:c3:1d:
68:11:74:23:2d:66:80:8e:a9:fe:24:25:d1:51:19:
cb:82:32:f0:92:8c:e7:4f:0e:7e:2a:3e:3b:c1:91:
f1:24:93:30:96:3b:a0:e4:d4:dd:f8:b1:86:91:e9:
65:f4:49:5b:99:00:76:a1:75:58:56:8d:0f:e9:9a:
68:a2:a2:e5:79:49:22:8b:df:c0:f3:ff:ca:22:01:
17:a0:da:1d:7c:f1:d9:43:de:d8:9a:c1:c8:f6:7f:
6a:e2:cf:21:b6:6e:90:65:1e:4e:8f:ea:e6:d4:41:
d3:a1:3b:9e:89:a8:29:82:e5:aa:27:d9:ed:57:4b:
bd:58:ad:6e:13:15:c9:7f:2c:55:d2:36:8e:c1:bc:
af:4e:e1:dd:4f:42:2a:12:35:90:4f:cc:2e:03:d9:
f3:3b:97:f8:f6:b8:95:0c:4c:9f:d7:ae:1c:6d:fd:
f9:54:65:60:81:ea:5c:57:2e:5f:f3:67:5f:0d:bf:
4c:6f:d9:f9:f0:36:f0:a3:a9:21:44:06:75:30:2e:
c0:62:5b:51:4f:d7:5b:0f:e9:b4:68:b2:1d:a6:d7:
98:40:40:fc:98:14:7e:82:6a:2a:ab:c0:de:33:da:
e2:16:59:53:9e:6c:0b:0d:57:19:7a:9a:f3:d9:e8:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:72:96:3B:42:5B:A9:D0:88:0D:9E:5C:E4:CB:02:A0:1A:25:C0:85
X509v3 Authority Key Identifier:
keyid:E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:29:df:73:32:fb:8a:02:03:4d:83:28:7c:f5:af:ec:43:b8:
2a:16:89:18:84:20:04:a3:89:8f:25:1e:b8:44:5b:cd:98:d4:
fa:73:2f:19:84:23:8b:69:bb:a8:63:9a:34:01:83:66:3e:a7:
f7:82:1f:cb:10:21:dc:b4:ea:ff:3b:db:68:a1:b0:49:99:43:
7a:10:f4:f2:9f:66:93:12:7b:e6:35:31:65:7f:61:37:75:69:
4d:6f:94:3d:88:e5:5f:55:b6:33:1c:42:89:bc:6d:2f:fe:23:
88:90:b3:ed:5b:00:e0:1b:f9:4e:6b:f2:6d:32:ce:ab:1e:55:
db:02:df:d6:9f:75:aa:f7:31:f3:3a:8b:fd:bd:ad:70:e7:8d:
b4:48:79:75:e4:d8:a8:f9:b1:8a:33:73:2b:19:9c:72:95:8a:
cc:f2:41:2d:06:15:7a:28:25:f7:0b:21:b9:18:07:f5:89:c4:
a5:72:f4:6e:d1:eb:51:c0:5d:77:f8:c0:93:ce:1d:fd:9d:38:
17:7b:af:42:86:c3:37:85:67:41:27:50:b3:9c:78:fc:4b:54:
7a:07:a4:45:3c:26:ee:67:f4:80:69:86:2d:ea:4b:19:1f:8a:
b8:54:e2:fa:59:5e:8b:05:b2:0a:1f:7b:6c:1e:cb:e0:89:6b:
6a:33:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:42:52 2026 by rpki-client