Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: ZsM4r3YGaB+CQk9QL2QkdsjWukGlpVRT7Mnr9Pqeoz8=
Subject key identifier: 88:AF:3D:EE:84:56:4C:11:D0:BE:A5:2C:51:97:99:1E:7B:D3:C3:3C
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 01A175144E54EA415728699247D78D646D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 1AC2
Signing time: Sun 25 Oct 2026 22:00:27 +0000
Manifest this update: Sun 25 Oct 2026 22:00:27 +0000
Manifest next update: Mon 26 Oct 2026 22:00:27 +0000
Files and hashes: 1: l7mxcgxG2vvRma3sWadEtW1ntNc.roa (hash: Oe03jMKj/3hOFNV41Fj4a9I/w6YctsdBe8hcEuPIMTE=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: dDP3Xtu34HjUqo5zeMzKPSNapY3xiVnAo80/bdEyWD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:4e:54:ea:41:57:28:69:92:47:d7:8d:64:6d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Oct 25 22:00:27 2026 GMT
Not After : Oct 26 22:00:27 2026 GMT
Subject: CN=88af3dee84564c11d0bea52c5197991e7bd3c33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:0b:43:f5:be:fc:76:56:ad:d6:b7:10:16:
de:58:fc:f4:ec:89:95:6f:08:b3:48:5e:ff:2c:1f:
68:59:1b:8b:75:25:c5:6c:95:b6:c4:d3:ea:ca:0d:
ad:fe:4f:78:9c:13:c5:22:88:cb:5a:29:14:43:9e:
a9:51:5d:b6:a9:d6:2d:b5:fc:3b:e8:a4:bc:2e:4d:
72:06:e6:ac:fe:91:a4:e8:e9:91:6c:2f:da:e3:83:
0e:1e:0d:c0:67:6b:d4:05:17:3f:c9:e8:a2:87:42:
b4:65:66:e7:f2:c4:c5:62:8e:9f:6b:18:07:e2:9c:
0a:1a:4b:63:5c:f7:20:bf:f6:85:0f:17:83:2f:f2:
41:a5:ab:7c:b8:ac:3e:85:2a:7d:f1:b2:0f:82:95:
c3:e0:6a:48:00:4d:c7:3a:e5:43:82:41:26:88:f7:
52:90:63:06:fd:20:36:03:93:76:a0:97:ab:af:c6:
a2:9a:db:16:01:45:8e:35:82:63:a4:6f:1b:5f:56:
14:fb:54:cc:ea:18:7a:d3:a7:14:75:b8:bd:91:42:
e9:33:13:4b:be:3c:50:ac:80:05:cb:75:4a:cc:1e:
22:5d:48:d7:5b:b4:08:c8:cf:81:20:18:1f:a1:da:
97:7b:0f:4b:ab:43:7f:5f:3c:d6:20:94:a5:e0:53:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:3D:EE:84:56:4C:11:D0:BE:A5:2C:51:97:99:1E:7B:D3:C3:3C
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cf:41:04:da:6d:60:fe:7e:bb:9e:a1:47:51:fa:7f:0b:03:
f4:0f:0b:ee:96:8b:0e:ac:70:85:dc:e2:41:21:81:c0:7e:3d:
6a:fd:9c:5e:95:ac:8b:99:1f:87:d0:6b:8b:f0:4c:5a:81:49:
7d:82:2d:4f:41:c7:67:a8:64:41:98:4e:e4:85:db:60:7c:75:
24:ad:0e:75:90:dd:25:7e:a3:88:89:5a:cf:ad:3c:49:af:48:
bd:7d:b1:89:9c:85:c4:be:fb:03:99:19:c6:9c:c6:22:ca:47:
59:66:25:3a:0b:fc:69:aa:96:95:c6:0f:5f:d3:d2:2d:bb:10:
f2:50:83:7a:c4:bd:57:64:99:ee:19:01:32:10:d8:9e:f7:59:
b3:1f:05:c9:50:6c:ba:0d:ca:34:e4:3a:1e:75:8a:8a:f9:69:
a2:bf:7c:b6:b6:86:0b:73:11:0e:1f:ba:30:b3:f7:03:3a:71:
ba:e2:8e:29:a5:10:b5:a1:55:3d:18:6a:ab:9b:9b:1c:54:94:
ed:c4:6f:53:13:7a:bb:0b:39:31:5d:61:f6:81:14:dc:65:47:
22:c3:e8:5d:05:8a:cf:21:14:30:31:04:a7:ae:22:01:e1:c4:
35:bb:13:5b:09:0a:96:2a:af:59:a5:9b:c7:f6:0d:e3:24:f9:
fa:af:46:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:33:31 2026 by rpki-client