Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File: R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier: jOO6fKuDjqpMW3QuIOM67+KS6x3KC0sewkfvnx0rRiA=
Subject key identifier: 25:2F:5E:F0:5B:54:06:25:A6:AA:AF:BB:E9:41:2E:AD:99:9B:AC:F1
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer: /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial: 01A187BFCA681EA19238EBB1A7904D0C84FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number: 0D4B
Signing time: Thu 29 Oct 2026 13:00:55 +0000
Manifest this update: Thu 29 Oct 2026 13:00:55 +0000
Manifest next update: Fri 30 Oct 2026 13:00:55 +0000
Files and hashes: 1: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: cmivYgZmdOIksooLDtECu1xALxGAixR5mscAp74NPIc=)
2: lDMKh21Wt4FbbKS1OgeKAWJLOUA.roa (hash: 3L7WTrIU7aPDIrcLzqUSb6E2nzrLgIJ/FaZM9uhhyxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:bf:ca:68:1e:a1:92:38:eb:b1:a7:90:4d:0c:84:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
Validity
Not Before: Oct 29 13:00:55 2026 GMT
Not After : Oct 30 13:00:55 2026 GMT
Subject: CN=252f5ef05b540625a6aaafbbe9412ead999bacf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:d2:3a:68:c8:2c:69:47:84:b5:a4:db:27:
fe:1d:32:46:a1:ba:d4:27:f3:14:fe:1b:ee:e4:c2:
ca:7d:9e:d2:0d:99:d1:fa:8e:0b:4a:4c:c5:5b:19:
0f:78:d5:f4:ad:8a:69:86:3a:d2:ce:bb:c2:12:ec:
8a:2d:42:9c:6a:04:62:1a:0e:83:1f:02:43:98:8b:
b1:37:4b:14:7e:71:a2:98:fb:f6:85:db:63:1c:94:
68:f2:73:84:06:63:98:58:2c:29:aa:82:42:1f:5a:
ea:b7:30:a3:97:7b:2e:41:5b:e1:9f:e4:a4:58:5b:
4b:43:8c:47:15:73:ad:bc:d6:b7:be:dd:14:2f:43:
27:3d:73:30:ec:75:a5:f4:df:26:20:34:cc:63:94:
2d:02:cb:47:73:28:d5:8c:7f:c3:8c:f0:04:9b:02:
02:9f:0d:13:b3:20:79:36:46:b7:e6:9c:83:45:98:
6c:01:dc:a2:05:19:80:d2:d1:3a:60:43:bd:08:a1:
13:f1:e8:24:ff:e1:6c:cc:7a:ac:da:5b:98:21:d6:
50:0d:ef:78:f8:c0:de:eb:97:90:27:55:4e:24:59:
b0:a7:fb:69:57:78:11:05:6d:85:d3:1f:8a:1c:ab:
27:f7:aa:8c:09:62:c4:05:ce:18:58:eb:01:ad:50:
81:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2F:5E:F0:5B:54:06:25:A6:AA:AF:BB:E9:41:2E:AD:99:9B:AC:F1
X509v3 Authority Key Identifier:
keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:dd:86:d1:05:1d:7c:b8:16:2f:d1:41:88:28:fd:dc:46:d9:
10:cd:0f:b3:16:83:d6:a2:c4:11:3c:a7:66:b7:35:c2:e4:55:
9f:8d:a5:ca:71:70:01:81:c8:c7:98:a9:e6:b3:c9:bf:54:f8:
ca:2b:c7:b2:32:12:f2:0a:2c:17:56:6f:cd:b9:f9:67:d8:40:
97:25:42:7e:23:42:4d:a1:14:d3:46:7e:3a:84:3d:cd:03:e2:
b7:84:1c:a2:e8:f5:1f:33:74:e3:a1:3e:43:f4:3d:6c:0c:b7:
ba:a7:2e:0b:c5:47:69:92:e5:4b:ed:8d:26:6e:94:f7:a9:b1:
a8:e7:a0:d7:6a:f2:95:4c:bd:d1:17:a0:76:17:dc:df:bf:fd:
7d:97:44:82:d4:7e:bb:de:35:22:ba:4e:4f:4b:01:3b:bc:eb:
09:ae:a8:77:86:c7:e7:3b:de:e6:ee:65:d2:a8:f0:5f:05:96:
0c:e5:0a:78:b6:ca:44:66:2e:ee:70:1b:92:52:3e:40:6d:8f:
39:55:35:89:85:d4:5d:29:84:65:78:09:9a:5b:e0:38:43:a8:
3f:30:28:f4:8f:75:ca:af:0a:4c:6b:c6:68:82:90:95:11:ae:
7b:cd:0e:1e:94:80:ff:55:ee:0f:b8:03:48:e9:0a:f3:ff:ba:
5c:62:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:08:27 2026 by rpki-client