Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
File: mIb0shUIFe2ng-fzz7m35Tzn2X8.mft (raw, json)
Hash identifier: JP7zvGU+HEuRr6LPKZZKJNDsuHAUt09vw1TR70Oyln0=
Subject key identifier: 17:9A:61:03:06:7F:3F:58:47:A1:4A:D8:C7:CD:EE:48:B3:62:66:BA
Authority key identifier: 98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
Certificate issuer: /CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Certificate serial: 01A17B843B65F4FB0B44CC6BFEDCCECFCFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
Manifest number: 019F
Signing time: Tue 27 Oct 2026 04:00:25 +0000
Manifest this update: Tue 27 Oct 2026 04:00:25 +0000
Manifest next update: Wed 28 Oct 2026 04:00:25 +0000
Files and hashes: 1: E6Emgi8OOcxRYIN6dlPoick6xdc.roa (hash: b17vqDW+cXgHkIk7rlMgxV1W0X2t1+N9MIRFO/oaFGs=)
2: cJhwzvA4MmD9szzdzlqYrmM_RIk.roa (hash: 0CQ7EyVMolzZdZkEGpCpBtQGO5aHXkTTya7T0UCv1hY=)
3: mIb0shUIFe2ng-fzz7m35Tzn2X8.crl (hash: 0cmBnpzDKUCtAh4ay6V3R0ACGjqDl4/apWYsHFHKvf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:3b:65:f4:fb:0b:44:cc:6b:fe:dc:ce:cf:cf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Validity
Not Before: Oct 27 04:00:25 2026 GMT
Not After : Oct 28 04:00:25 2026 GMT
Subject: CN=179a6103067f3f5847a14ad8c7cdee48b36266ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:e0:0b:bd:de:a0:2b:45:3a:51:76:e4:c3:
e6:58:d4:91:cf:78:25:5f:20:56:d3:9b:db:ca:43:
19:bb:6b:35:cf:60:df:31:cb:76:ce:21:34:69:2b:
18:fd:ae:02:fd:95:1b:22:f1:42:59:a8:85:e4:0f:
ad:7f:b9:b3:74:d0:61:26:56:e7:12:ab:29:1e:21:
28:dc:ab:ec:19:28:bd:b5:b0:ea:d3:f6:50:d1:ca:
f2:74:3c:3d:6a:a6:c2:21:bc:f9:af:93:83:0c:9c:
76:4a:ec:cd:8f:14:2f:65:16:bc:fa:28:ab:27:97:
53:e2:d9:e8:f1:5e:8f:ef:6b:11:95:47:78:fc:d6:
94:a1:ca:ec:53:e3:d3:67:e2:b0:ca:5a:24:48:5a:
d8:bb:91:17:29:6c:f4:51:dc:76:ab:cd:ed:af:56:
49:83:9b:c1:de:fe:40:b6:7e:45:c8:75:25:4a:56:
1b:d9:13:02:98:ce:de:b5:fc:6e:9b:df:8a:8d:bb:
d5:8d:5b:71:32:ff:51:f9:9d:e5:68:c2:ba:c4:b4:
11:64:9c:09:ff:c8:6b:46:71:36:55:30:d7:5f:84:
27:47:af:c0:0a:46:79:0e:79:bb:f6:fa:3d:b1:82:
37:3f:b9:bb:26:23:57:f9:68:ea:b6:0d:3d:f3:bc:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9A:61:03:06:7F:3F:58:47:A1:4A:D8:C7:CD:EE:48:B3:62:66:BA
X509v3 Authority Key Identifier:
keyid:98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:91:cb:1e:7e:71:59:ce:88:be:d7:d5:78:e6:7d:bd:c7:69:
8c:eb:36:b8:fd:fe:d8:f8:45:e5:c7:82:6c:b6:53:2e:ad:84:
80:66:b4:47:d4:d1:d6:0e:e1:be:0f:53:81:9b:5d:11:1a:98:
72:1f:0d:55:db:90:21:06:11:84:6b:31:4c:3b:ad:77:fa:56:
34:0b:1b:0b:73:44:19:78:28:d6:db:8f:ed:48:21:6b:d2:8b:
82:34:f9:4d:5e:bc:a3:09:ff:1d:3f:d5:c4:a1:e8:17:22:8d:
ef:8a:e3:5e:68:25:40:37:73:33:d7:8c:c1:15:fb:15:58:23:
5c:3c:13:86:49:88:d6:8e:c6:86:c3:17:9b:04:f9:06:0f:3f:
6f:88:e4:93:c0:40:53:3a:b9:60:9f:21:cd:9a:41:d6:63:b9:
e2:08:91:a0:58:01:39:53:bd:a9:76:5f:9d:61:09:27:3f:3d:
b2:6b:2b:42:18:e8:fa:58:0c:74:92:62:1c:12:df:31:d5:41:
6d:a4:4a:d5:cb:7f:67:d1:41:05:ff:64:25:8f:d5:06:f2:16:
70:63:f3:2a:d2:04:0e:b6:24:83:21:f0:ff:89:d5:86:7f:6e:
bc:32:82:49:24:ac:d0:30:b6:f5:72:4c:dd:cb:1c:a3:6d:93:
39:3b:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:16:56 2026 by rpki-client