Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: kezJX61Tir+LSOFwr4N2q84zZwcgoZza3waUq4B1mE4=
Subject key identifier: 01:1A:32:F3:3A:AD:07:F1:EC:C9:F4:8D:77:F4:14:44:9B:E3:6F:1E
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 01A08DC40FDE76F716380B0BDAF265D657F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 1A4D
Signing time: Fri 11 Sep 2026 00:00:31 +0000
Manifest this update: Fri 11 Sep 2026 00:00:31 +0000
Manifest next update: Sat 12 Sep 2026 00:00:31 +0000
Files and hashes: 1: KFiiFWif923SIcwC9nBmJ-HUVJ4.roa (hash: ycwpSj4ZG3+CrkzSV++20ftzs6baQIacEYL2lp7sLR0=)
2: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: S5mLUgGz3S+Cihi3hRSSaUQbZ424ROF+Zn3ZIKG1XQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:0f:de:76:f7:16:38:0b:0b:da:f2:65:d6:57:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Sep 11 00:00:31 2026 GMT
Not After : Sep 12 00:00:31 2026 GMT
Subject: CN=011a32f33aad07f1ecc9f48d77f414449be36f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4b:37:ec:11:61:a3:ab:94:9f:22:62:c5:bc:
59:84:04:16:cc:24:9e:20:d2:53:68:25:5d:aa:e2:
21:cb:aa:17:b0:d1:92:08:2e:67:a2:94:40:54:3d:
21:04:0a:3d:51:ad:9b:76:ba:93:ef:31:6a:e1:bb:
1f:e2:fc:27:f2:4b:2a:3f:e3:35:7d:ca:d5:48:89:
58:b5:de:52:64:70:15:d5:7c:0d:49:fe:f9:1b:82:
b8:47:bb:ef:43:4f:40:5f:12:62:10:9f:ef:d0:a5:
2e:63:dd:52:8f:30:74:99:21:8b:b3:e4:5e:c6:61:
89:8e:c8:ac:a5:49:c6:60:64:d3:e0:36:fc:75:fe:
c0:b0:60:d2:7b:de:07:ee:b2:62:6a:2e:c4:a9:bb:
0b:9a:57:29:ad:23:1e:ea:63:8c:16:1e:3a:52:a0:
4d:d9:ce:54:b4:10:40:09:a2:87:81:e3:5d:32:81:
07:6c:59:0c:e6:1f:e3:56:60:3b:88:4c:7a:57:12:
fa:6b:15:df:63:e8:49:23:b6:37:6c:81:71:2a:91:
e4:01:d0:63:f8:5c:7d:8f:3a:5f:98:37:bf:90:b1:
9d:fa:07:8c:e8:71:a9:45:53:b0:f8:dd:c8:90:eb:
bf:ce:c4:9b:4f:e6:7a:09:14:6c:f6:c1:8a:e5:09:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1A:32:F3:3A:AD:07:F1:EC:C9:F4:8D:77:F4:14:44:9B:E3:6F:1E
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:00:90:e2:33:e4:63:de:fe:9f:1b:48:1d:b8:5f:e6:f6:12:
91:d4:a2:3e:4d:f1:63:8d:ff:fd:5b:78:43:80:a2:b4:fa:04:
8a:0b:a3:18:a2:ba:4e:39:5f:19:b8:54:e6:f9:03:a5:59:8b:
e7:a7:b4:61:23:71:af:4d:2c:6b:7c:e7:a1:cc:56:c1:4a:c9:
d0:0c:95:1d:0b:f7:c8:be:99:80:6b:20:9f:e2:c1:e2:e9:87:
75:5e:6d:3c:39:41:4f:bc:9b:6b:33:07:4e:90:db:3f:9c:18:
ed:50:f8:ab:4a:df:8b:68:44:ad:05:8f:2c:25:a4:a4:ff:3f:
ba:50:82:b9:55:01:0f:14:71:17:a5:23:1d:28:b2:ef:e4:62:
5b:a6:38:f1:45:3a:e7:3b:e5:08:36:a3:da:23:8e:1d:28:7b:
37:31:4c:89:d8:11:8d:d4:72:35:06:fb:51:99:02:be:d6:48:
b4:49:ae:63:bb:a4:d1:94:ba:26:4e:9c:df:b1:9c:08:71:4e:
0f:90:c4:74:91:5a:df:00:7a:38:41:e6:0a:f7:dd:be:06:0f:
f1:c0:d7:fc:5b:59:fe:d1:a6:ca:38:d5:7f:a6:67:0a:59:0a:
b4:5d:e4:aa:57:49:25:82:55:c6:66:8e:f7:7d:b8:db:ad:e5:
13:db:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:51:20 2026 by rpki-client