Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
File: M5rxdTy1gnt7QzdTtXxHjUqtbus.mft (raw, json)
Hash identifier: tmmb9SpV9jzoYvgUXmWzUSEum80XQF84TkBR/7J37uw=
Subject key identifier: 15:02:A3:A9:72:FC:EA:9B:25:A8:45:52:9E:4B:83:96:EC:E7:7B:32
Authority key identifier: 33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
Certificate issuer: /CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Certificate serial: 01A16AFF6715EB52022DCF10DABE30AA598D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
Manifest number: 0136
Signing time: Fri 23 Oct 2026 23:01:25 +0000
Manifest this update: Fri 23 Oct 2026 23:01:25 +0000
Manifest next update: Sat 24 Oct 2026 23:01:25 +0000
Files and hashes: 1: 1Tl9UIhCqeKOtou3xYXepXYcMhg.roa (hash: 5AkZht3+a78cap99bgI8nP4neP9y8A6GlDJrz6Dteng=)
2: B48qkRdOfa6_cPOlPzDgOqUlWSg.roa (hash: wSI7kbco2gmflRi9epKlQvIQAAUD21wLcZHQLK7txNA=)
3: DQBKGiZGDTDf_MhJYHXFm05lwLY.roa (hash: n5gQOXIBUlgRM18cV4srzrmBIxmZMJi0pTGhNSWt7ec=)
4: M5rxdTy1gnt7QzdTtXxHjUqtbus.crl (hash: gFxPffAKJnSe8yQbZ2CVVWotcsr6OfngBVlGzceDVhc=)
5: QSCGwSsoRSbt1W2PmX3ch0nQTSY.roa (hash: R4X1zIr5apakhLTxXprIGVOA1Cqy//r8dlHgHlvik2c=)
6: Srwm0O5XziVvTMCAUPAPHDtyOL4.roa (hash: Xqk8aLHxkijmEc5CYN4gn6Fq5GjplNDxfZlZrnMA9sY=)
7: XRa-p6VrifJy5ugNFDkQeJ2v7pg.roa (hash: vt5PHv7coIM1JmNeX6jiBcQ3MwSimt+j/3Pge4DDNa4=)
8: ZNzJPMt2B1SyImQTB05Yvsvkd14.roa (hash: leKWlyfh6OtsxG9LVgSYbJDdSIf0o1TbZ02gUSkJ9+8=)
9: pr-1xePD4ZCkXz1RmxaUJla7Wk0.roa (hash: /UkrVYY41cQP/8A3LMNbtpf3fvfzlt7M2OaVy/IHrJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:ff:67:15:eb:52:02:2d:cf:10:da:be:30:aa:59:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Validity
Not Before: Oct 23 23:01:25 2026 GMT
Not After : Oct 24 23:01:25 2026 GMT
Subject: CN=1502a3a972fcea9b25a845529e4b8396ece77b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:4f:e7:11:e7:85:e8:c1:db:d3:f8:01:7f:
24:46:86:3a:b5:20:12:31:a8:00:b7:b6:47:b8:e5:
5d:7b:5f:1d:9f:d2:39:c2:f5:be:8d:73:d5:1a:9f:
ec:50:67:bd:e0:72:01:6b:16:c8:b0:70:e7:34:46:
28:86:83:1d:ce:ed:48:3b:6e:9b:79:22:a6:ca:90:
e2:ae:fe:d3:91:a5:82:3d:80:15:8e:73:e0:c0:de:
08:5c:0b:fc:61:06:22:31:52:57:5d:b7:18:5b:4f:
33:20:ea:70:3f:34:af:91:aa:21:52:a0:f3:a9:66:
8f:58:e4:c0:a2:73:78:14:16:2a:08:73:48:e8:17:
fa:56:3e:96:9b:81:63:d4:59:39:26:2e:1f:6e:12:
1e:45:f3:dd:bd:f1:99:a7:09:93:e1:cd:2e:bc:01:
c0:82:89:2c:cc:a4:b3:61:fc:ad:a9:7e:41:df:9f:
3f:f5:bb:9a:0e:b4:99:40:61:ad:7b:69:e2:12:8f:
ee:40:8e:ab:4c:db:77:fe:af:bb:7d:7c:02:74:e6:
44:29:33:b8:33:be:cd:1f:cf:58:ac:31:06:0b:f2:
5c:5e:2f:db:de:44:25:73:a4:eb:43:fa:46:26:5d:
c2:01:e8:fc:c5:6f:06:8a:cb:e5:71:90:70:01:93:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:02:A3:A9:72:FC:EA:9B:25:A8:45:52:9E:4B:83:96:EC:E7:7B:32
X509v3 Authority Key Identifier:
keyid:33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:22:69:cd:52:2b:e9:a0:de:d2:22:f0:69:e9:f6:e4:c0:9e:
80:41:f1:d9:22:be:d0:8e:cd:c0:53:7b:72:1b:b8:55:12:77:
02:fc:0f:cb:16:c7:5f:94:bd:74:29:4f:e5:2c:22:42:fb:2a:
80:ab:ed:e3:59:0a:0d:af:b1:7f:f7:cf:2e:36:79:3f:73:b2:
00:a2:39:ad:9d:f1:4b:59:08:bd:03:0a:79:ae:46:9a:ef:a5:
9f:ff:aa:91:4b:8c:6b:99:5d:9f:ea:fa:12:2c:72:e8:d1:19:
37:9a:66:1d:5e:a7:18:4b:79:68:ee:22:f7:96:99:c8:21:bf:
d3:73:95:09:5c:98:67:b4:28:04:da:97:95:c7:21:db:69:fe:
b1:1c:f6:0c:3a:ba:97:80:ff:f6:57:62:f9:0a:4e:b4:72:6b:
b4:56:d6:2f:c8:be:63:50:eb:7b:9c:6f:01:23:48:94:c3:9d:
ac:2c:df:fd:9d:0e:ee:5d:a9:59:6d:4e:c5:8a:7c:e5:40:85:
5c:f0:5d:6b:ec:e4:ba:44:1c:09:e2:28:02:50:a9:44:14:89:
86:0c:8c:a8:db:56:77:bb:79:85:51:f5:3c:4d:a3:37:9b:86:
a0:f8:93:7a:8e:b5:00:fa:a4:7a:9e:74:b1:57:0a:66:c0:cc:
89:cd:75:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFq/2cV61ICLc8Q2r4wqlmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOWFmMTc1M2NiNTgyN2I3YjQzMzc1M2I1N2M0NzhkNGFh
ZDZlZWIwHhcNMjYxMDIzMjMwMTI1WhcNMjYxMDI0MjMwMTI1WjAzMTEwLwYDVQQD
EygxNTAyYTNhOTcyZmNlYTliMjVhODQ1NTI5ZTRiODM5NmVjZTc3YjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5tP5xHnhejB29P4AX8kRoY6tSAS
MagAt7ZHuOVde18dn9I5wvW+jXPVGp/sUGe94HIBaxbIsHDnNEYohoMdzu1IO26b
eSKmypDirv7TkaWCPYAVjnPgwN4IXAv8YQYiMVJXXbcYW08zIOpwPzSvkaohUqDz
qWaPWOTAonN4FBYqCHNI6Bf6Vj6Wm4Fj1Fk5Ji4fbhIeRfPdvfGZpwmT4c0uvAHA
gokszKSzYfytqX5B358/9buaDrSZQGGte2niEo/uQI6rTNt3/q+7fXwCdOZEKTO4
M77NH89YrDEGC/JcXi/b3kQlc6TrQ/pGJl3CAej8xW8GisvlcZBwAZOrPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUCo6ly/OqbJahFUp5Lg5bs53syMB8GA1UdIwQY
MBaAFDOa8XU8tYJ7e0M3U7V8R41KrW7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTVyeGRUeTFnbnQ3UXpkVHRYeEhqVXF0YnVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUt
Y2UyMjUxODdmYzM4LzEvTTVyeGRUeTFnbnQ3UXpkVHRYeEhqVXF0YnVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUtY2UyMjUxODdmYzM4
LzEvTTVyeGRUeTFnbnQ3UXpkVHRYeEhqVXF0YnVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCJpzVIr
6aDe0iLwaen25MCegEHx2SK+0I7NwFN7chu4VRJ3AvwPyxbHX5S9dClP5SwiQvsq
gKvt41kKDa+xf/fPLjZ5P3OyAKI5rZ3xS1kIvQMKea5Gmu+ln/+qkUuMa5ldn+r6
Eixy6NEZN5pmHV6nGEt5aO4i95aZyCG/03OVCVyYZ7QoBNqXlcch22n+sRz2DDq6
l4D/9ldi+QpOtHJrtFbWL8i+Y1Dre5xvASNIlMOdrCzf/Z0O7l2pWW1OxYp85UCF
XPBda+zkukQcCeIoAlCpRBSJhgyMqNtWd7t5hVH1PE2jN5uGoPiTeo61APqkep50
sVcKZsDMic11XQ==
-----END CERTIFICATE-----
Generated at Sat Oct 24 06:08:10 2026 by rpki-client