Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft
File: mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft (raw, json)
Hash identifier: IKBML47N+Yr/fcsZ46e75CRlF2E0b8Pc+LmUqqeNPFQ=
Subject key identifier: A7:83:87:6A:94:DE:F7:CB:C0:50:A5:43:73:86:52:0B:7D:A0:13:0C
Authority key identifier: 98:E6:85:0C:42:9E:4E:D5:2D:76:80:BA:99:99:C0:05:59:59:F5:CB
Certificate issuer: /CN=98e6850c429e4ed52d7680ba9999c0055959f5cb
Certificate serial: 01A17D3C9CA446C37E6E6C49A229E5C86F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft
Manifest number: 60
Signing time: Tue 27 Oct 2026 12:01:26 +0000
Manifest this update: Tue 27 Oct 2026 12:01:26 +0000
Manifest next update: Wed 28 Oct 2026 12:01:26 +0000
Files and hashes: 1: be_gkUlk9308BGLed9e-cdXDJwc.roa (hash: KnE/equmjlrwzaYmtyOj+kmh0gRoZ+9TcyDh0b0mqM0=)
2: mOaFDEKeTtUtdoC6mZnABVlZ9cs.crl (hash: TdykLlh/OL+j8CGDavcRW5lVQtdaS6iY4dpKbps2z3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:9c:a4:46:c3:7e:6e:6c:49:a2:29:e5:c8:6f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e6850c429e4ed52d7680ba9999c0055959f5cb
Validity
Not Before: Oct 27 12:01:26 2026 GMT
Not After : Oct 28 12:01:26 2026 GMT
Subject: CN=a783876a94def7cbc050a5437386520b7da0130c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:99:57:64:69:2b:82:0c:90:97:de:00:77:
33:9b:bc:0c:ca:33:ad:2b:be:de:b5:d1:51:09:4c:
23:c8:15:66:49:15:a1:fd:0e:b1:d6:f6:3e:24:32:
31:64:e9:ab:c0:8f:74:08:9a:dd:6a:ab:de:c4:d6:
8a:c1:4a:ca:72:8d:4c:12:cc:0e:fd:cd:e7:a3:03:
62:45:e7:fa:24:54:13:c8:ef:ad:07:ec:3e:da:9d:
87:40:0b:de:b5:ea:b2:86:1c:0b:49:54:d5:6f:2e:
19:56:bd:71:c9:32:ef:3e:96:43:07:2d:48:cf:fb:
8c:9d:94:2c:b8:b6:e5:63:43:3f:f7:8e:3b:53:42:
c6:2c:21:e6:c9:bf:09:48:28:67:17:48:0a:be:a0:
60:71:f0:34:6c:13:ab:cd:f4:dd:3c:91:f3:59:5a:
2f:a7:3c:aa:50:cc:99:a3:82:66:dd:6c:13:f7:54:
c7:8a:e2:e3:f2:db:95:8c:ee:1e:bf:07:2d:79:69:
d3:60:4c:13:89:fb:62:29:a6:d4:21:ae:93:72:8d:
25:6f:a8:66:f7:c7:49:23:18:2e:e2:1d:12:fc:36:
08:e0:54:e6:b4:b4:0c:aa:f8:37:1b:9c:9a:43:20:
34:c2:63:01:3b:19:02:5b:65:24:15:08:d3:05:9c:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:83:87:6A:94:DE:F7:CB:C0:50:A5:43:73:86:52:0B:7D:A0:13:0C
X509v3 Authority Key Identifier:
keyid:98:E6:85:0C:42:9E:4E:D5:2D:76:80:BA:99:99:C0:05:59:59:F5:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6f:73:b9:cb:d9:d0:7f:70:60:74:1f:0b:e3:00:cd:67:18:
72:ab:2c:8c:81:f4:35:34:09:1e:dd:a2:c5:65:20:49:d0:85:
e8:67:e3:f5:b5:7a:2f:2e:8f:bf:55:b5:de:cf:88:51:6c:fc:
a6:51:ad:de:da:ba:d7:09:20:ea:4c:cf:66:7e:b8:9e:5f:4e:
4a:2b:d9:d6:cb:2a:da:f8:fd:ce:19:c5:0c:93:17:3f:18:09:
3e:b6:2b:0c:d3:e6:df:26:bc:a2:43:36:6d:86:35:ad:55:e7:
d1:92:a6:35:b4:f6:1e:7a:dc:af:ad:02:b5:24:4c:ff:78:68:
51:09:11:61:95:db:0b:e2:c1:bc:4f:6f:53:21:ee:25:70:6b:
49:49:c6:25:96:24:db:31:86:5d:32:12:15:74:6e:ba:e9:d4:
9b:0a:bb:cf:28:fd:79:44:41:3f:49:8d:07:94:e6:89:16:e9:
22:26:e5:67:ee:ed:3a:b0:2a:e7:df:54:19:8a:cd:3b:dc:39:
0a:65:1b:c3:68:17:a2:8d:ab:80:be:f9:bd:d3:9f:1c:fd:93:
08:0f:76:cd:48:88:23:c8:7b:ba:5a:56:4e:f3:66:59:30:79:
4c:19:c3:74:7c:30:d2:83:c4:80:14:0e:a3:4d:99:53:6c:32:
21:49:7b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:31 2026 by rpki-client