Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: zZleLDTkwyuRZIfw+GN6LEUrxdDBdiGvvjdh/jQL/8c=
Subject key identifier: 32:A4:FF:E3:18:B3:8E:5E:34:4E:44:21:FF:A7:76:B3:02:C2:A9:94
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 01A1811939062844A21E2980801D4C225654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 06:01:16 +0000
Manifest this update: Wed 28 Oct 2026 06:01:16 +0000
Manifest next update: Thu 29 Oct 2026 06:01:16 +0000
Files and hashes: 1: KFiiFWif923SIcwC9nBmJ-HUVJ4.roa (hash: ycwpSj4ZG3+CrkzSV++20ftzs6baQIacEYL2lp7sLR0=)
2: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: fzwQvyO+/by18uHGw5H3YhUZZXYprGd2uUIppFMTFmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:39:06:28:44:a2:1e:29:80:80:1d:4c:22:56:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Oct 28 06:01:16 2026 GMT
Not After : Oct 29 06:01:16 2026 GMT
Subject: CN=32a4ffe318b38e5e344e4421ffa776b302c2a994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:c6:d5:57:ea:2a:1a:e7:ff:7b:ff:f1:9c:
17:2f:07:de:d0:8f:a4:2c:f7:2d:7f:f6:11:d2:07:
cd:7b:f6:be:da:ef:16:38:c2:40:e1:75:bb:70:08:
1b:ec:26:8f:8c:db:9b:5a:30:21:c9:97:1a:41:43:
74:9c:61:2d:b2:ba:79:18:37:cf:a2:90:a0:7e:ef:
0e:5f:7b:b2:75:0e:c6:b9:d5:a1:aa:a5:7a:fa:31:
3b:c4:8d:5d:fc:8e:fb:27:19:f9:2f:6b:1a:70:d4:
87:ea:3c:7f:ba:55:ef:2a:32:d4:fd:fc:55:01:b3:
dc:e4:ee:44:b1:c5:d9:c5:ca:50:db:fb:17:d4:16:
aa:53:c4:49:c1:28:52:b8:01:cc:3d:87:96:09:9a:
d3:fb:67:73:cf:f9:13:0c:62:0b:20:b4:4a:53:6f:
63:d6:8e:56:8e:24:96:22:11:e8:f4:b9:cc:d2:f6:
2c:08:9b:cb:cb:bc:f0:fa:65:72:8a:3f:67:37:7e:
d3:a9:d8:1a:b9:a4:f6:9a:d0:f9:24:95:ee:06:5f:
a0:1b:58:d4:30:ed:35:75:08:c3:60:d2:18:5b:48:
3e:aa:e7:89:08:0d:3b:72:3a:aa:8f:75:c7:3c:98:
e8:d3:ad:91:e6:b2:e4:47:46:81:fc:4a:03:c2:a8:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A4:FF:E3:18:B3:8E:5E:34:4E:44:21:FF:A7:76:B3:02:C2:A9:94
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:77:33:73:00:ed:78:e9:6b:5c:25:d7:d8:8d:69:2a:8d:3f:
cb:57:8b:3b:a9:93:c0:fc:8d:4e:74:cd:8d:99:5d:9d:9c:be:
97:4c:a4:c2:cc:48:77:95:74:58:54:e1:1d:1e:f2:83:19:4d:
d3:c7:a7:a7:79:f4:db:e4:c8:e7:47:d4:8b:53:b3:33:95:e0:
a2:c6:2c:10:61:ba:52:22:97:dd:c9:37:fb:21:20:c9:1f:86:
ee:56:63:e5:4c:55:b8:0f:6f:3c:fb:70:4c:91:a0:33:55:97:
59:19:a6:21:93:c1:49:2e:bc:db:3d:db:f5:af:5f:80:6d:62:
37:ab:c1:9b:f3:2e:a1:3b:c8:41:63:7e:08:25:4f:20:bc:17:
e1:28:c7:cf:1f:4a:ec:24:01:72:f9:e7:a8:12:96:ab:63:41:
d7:5a:39:40:e3:03:c0:d9:87:7e:2d:91:9d:10:49:13:06:4a:
a7:be:15:5e:d0:ab:a6:f5:ba:a7:55:1d:25:c7:7d:96:af:d2:
cd:d8:92:ca:dd:53:2c:d4:5e:29:c7:e0:24:63:13:ea:fd:b2:
5b:f7:d0:10:25:45:a7:ac:c7:2c:18:31:9a:01:85:52:61:53:
4b:1c:09:e8:4f:40:7a:c4:62:13:c7:59:2d:93:8f:3e:e7:b7:
5f:e9:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:12:19 2026 by rpki-client