Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File: m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier: MijzfljTpUs5LCqBsepa3is5kYURdOqbOu4Ti8AosBg=
Subject key identifier: BD:E1:F2:C2:6C:AB:4C:29:98:F8:BA:B8:FD:56:34:7A:68:A0:37:2F
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial: 01A18006847F56111DDDF4C2F284E41C91C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number: 0D0A
Signing time: Wed 28 Oct 2026 01:01:13 +0000
Manifest this update: Wed 28 Oct 2026 01:01:13 +0000
Manifest next update: Thu 29 Oct 2026 01:01:13 +0000
Files and hashes: 1: PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa (hash: So755h/YppAq4z9zJnxXyj3ozNgia1MYJ3MvAVJ9wDU=)
2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: oin7a/jhhXw6INCdvGQNAKB2/pgrWr9INQ7Eb9hg0SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:84:7f:56:11:1d:dd:f4:c2:f2:84:e4:1c:91:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Validity
Not Before: Oct 28 01:01:13 2026 GMT
Not After : Oct 29 01:01:13 2026 GMT
Subject: CN=bde1f2c26cab4c2998f8bab8fd56347a68a0372f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:79:ad:d4:a9:83:96:0e:8e:95:6e:b7:5c:
18:41:a7:e7:a3:52:db:34:e4:2e:f9:b0:be:c1:ea:
d1:cc:48:00:55:cf:7d:51:dc:b4:92:61:54:7f:20:
66:74:23:88:8d:4e:2d:a6:36:2c:42:84:2d:ab:5b:
8a:40:e8:2a:e4:13:a8:9f:b1:dd:cc:64:e8:0a:a7:
5e:49:a2:f2:e6:03:60:13:86:43:ee:65:35:f6:4b:
9a:37:92:48:9a:39:61:f2:f7:98:ab:8b:21:95:10:
63:50:73:37:54:63:f1:f5:ec:73:b1:11:f4:98:e4:
fb:50:5c:21:7a:70:08:2c:53:35:88:1c:a3:eb:ff:
fa:81:35:32:d2:4e:68:10:d0:1e:e6:be:8c:45:ac:
68:dc:60:1e:2e:b6:4a:41:f0:32:09:b8:e4:db:ce:
94:50:69:48:a1:f2:95:00:9e:e5:6b:97:a5:a2:bf:
2e:14:f0:e6:db:69:fa:b7:4c:9d:95:ce:67:12:0f:
ff:c9:9b:01:e2:d5:8e:8d:44:df:01:0d:4e:c8:8b:
4e:ef:03:0f:23:e5:47:74:64:2f:c3:5e:0e:fa:cf:
ad:87:72:07:d6:14:bf:07:6f:c0:d6:79:6d:04:92:
43:b4:85:8d:37:3f:01:39:b1:b3:1f:96:89:82:c6:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E1:F2:C2:6C:AB:4C:29:98:F8:BA:B8:FD:56:34:7A:68:A0:37:2F
X509v3 Authority Key Identifier:
keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e3:52:92:30:5b:23:26:4c:82:ea:3a:60:f7:06:65:a3:3d:
44:01:4d:e6:ab:68:e1:95:f9:a0:17:a4:22:49:4b:49:c6:80:
0f:f7:cd:43:f1:d3:eb:6a:12:0c:fa:4f:6d:a8:de:32:b0:7a:
8c:46:a0:33:54:96:1a:b3:d2:c9:77:60:38:3e:a6:b5:2a:8a:
44:35:71:8c:08:6d:fc:ba:7d:f6:ba:51:68:76:18:ca:64:50:
75:a2:50:d2:91:fa:01:43:2c:fd:ff:5c:a9:b6:ba:16:07:6c:
ee:cb:6d:83:8d:3e:97:4b:67:48:3c:84:44:58:c3:32:fa:38:
dc:89:c2:f6:f9:2f:cc:e6:b0:50:bc:45:03:e0:f8:4e:10:64:
4a:42:2a:83:71:03:04:df:26:5c:72:4b:44:2e:a7:92:b4:ff:
a4:2e:01:78:e0:ed:8d:13:84:b5:f6:1c:90:d4:e1:03:7f:7a:
19:8a:40:87:0d:b9:4d:9d:d5:3d:9a:f7:1f:71:1f:69:4b:45:
5e:f7:f9:75:a4:46:72:61:e7:14:a4:11:a3:30:34:f7:c8:7b:
86:01:64:e4:c8:0d:a1:aa:00:4b:97:28:d4:b2:a2:9f:6b:f0:
3c:95:4a:45:db:da:87:5b:bb:8f:a1:63:f4:65:ce:a0:1f:9f:
c2:d2:45:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:18:23 2026 by rpki-client