Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
File: d5pKQpXGOP3nYPPNpHbYv8JxErI.mft (raw, json)
Hash identifier: XZHYcRof60bCuLfcLFHIFXehR6fMCxD+WQ/vTeQ4WuM=
Subject key identifier: 4C:78:63:74:A3:0F:33:F1:E9:C3:3A:24:59:02:3F:22:EE:AF:98:4D
Authority key identifier: 77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2
Certificate issuer: /CN=779a4a4295c638fde760f3cda476d8bfc27112b2
Certificate serial: 01A199FCD7D1E2C87D9F533FD10F40CF28E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
Manifest number: 058A
Signing time: Mon 02 Nov 2026 02:00:46 +0000
Manifest this update: Mon 02 Nov 2026 02:00:46 +0000
Manifest next update: Tue 03 Nov 2026 02:00:46 +0000
Files and hashes: 1: 1SXyN0yfhT5cSdi9C9NJ49pGu4Q.roa (hash: 9hRMwF9OzYcY4aoj5DqpON+f2xbb5moy11vfbRHpWD8=)
2: d5pKQpXGOP3nYPPNpHbYv8JxErI.crl (hash: FaPCLcEygUTH4P+0tre/dl6mYc5iXwY9QN2f7qeiLlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:fc:d7:d1:e2:c8:7d:9f:53:3f:d1:0f:40:cf:28:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779a4a4295c638fde760f3cda476d8bfc27112b2
Validity
Not Before: Nov 2 02:00:46 2026 GMT
Not After : Nov 3 02:00:46 2026 GMT
Subject: CN=4c786374a30f33f1e9c33a2459023f22eeaf984d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:9d:29:c5:03:a9:e6:3c:3f:57:48:f8:c4:
12:28:4a:2a:c2:8d:b6:58:e7:41:0d:ea:20:47:ed:
4e:e5:68:6f:bb:34:85:a9:68:be:0b:6e:0a:44:47:
84:6c:74:eb:fb:4a:d0:00:6b:13:bc:60:33:ee:8e:
20:af:99:cb:4b:6e:4c:d5:7e:b4:f8:60:60:0a:55:
a7:ab:ef:8e:29:e9:50:81:e6:88:04:f9:e2:4d:ce:
76:1b:e2:10:fb:36:1b:aa:16:c9:d5:f2:94:6b:6d:
59:29:a5:01:91:ef:2e:63:ca:d6:a3:6a:97:b5:8a:
44:ac:d6:7f:ac:a2:a8:1a:73:cd:82:df:a6:12:9b:
58:40:a5:8e:01:71:37:b4:77:e4:7e:e1:e1:59:c7:
87:86:b4:09:b1:cd:83:04:d7:70:1c:75:22:33:f9:
09:6a:41:6b:8c:ae:63:02:9d:1b:da:6f:4d:0b:0d:
3d:d6:99:b8:c8:4a:b3:d4:09:ca:62:eb:b1:8a:30:
41:79:9c:2b:a9:d0:1b:9e:bb:e9:fb:e3:ce:51:44:
79:2d:7a:0e:8f:e8:a0:3e:55:c5:35:fa:19:b9:18:
6c:33:0b:df:bc:c2:77:94:30:da:b7:be:35:ed:b7:
ac:39:5f:cb:f2:23:aa:f2:47:27:92:8f:f6:ec:7a:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:78:63:74:A3:0F:33:F1:E9:C3:3A:24:59:02:3F:22:EE:AF:98:4D
X509v3 Authority Key Identifier:
keyid:77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:00:b0:53:80:82:83:1f:55:14:4f:8a:24:3b:ae:ff:be:d9:
65:4f:64:50:c4:81:d8:0c:c2:73:64:20:a6:13:ae:fa:25:08:
2a:68:7a:cd:09:fe:e0:ab:8d:b3:1b:5f:85:6f:06:b9:7c:be:
46:8f:92:7a:87:ee:6d:31:7d:35:ba:63:2e:7e:85:2c:0d:23:
66:16:35:7a:7c:5e:44:9d:70:60:20:c8:fb:5c:9b:a0:fe:8a:
50:47:aa:bf:dc:88:9f:16:64:5a:39:18:cf:72:89:dd:49:f3:
89:04:2a:64:1b:9e:13:9d:db:e3:df:a1:ef:70:f9:d3:a9:d0:
f7:0f:fa:fb:6a:f2:95:c2:3e:39:d2:cd:19:52:b9:dc:c1:60:
4b:a2:94:c9:80:bb:59:6f:7e:d0:b5:41:0a:94:3c:c9:ed:79:
10:ee:d4:49:d5:28:89:68:aa:ab:2c:96:36:f9:c7:fb:cf:39:
0f:1a:38:32:30:5b:0d:52:88:8d:52:fa:d8:05:f4:c6:94:de:
5c:a6:1c:d6:95:48:31:56:37:98:f5:91:37:df:6a:2f:5f:f3:
5d:8d:c6:b8:78:59:d1:8f:3c:39:0d:ac:3f:4e:b2:10:bf:c9:
73:3d:52:a3:0c:56:f1:12:81:39:11:ab:4b:75:35:18:fc:f6:
19:e5:3a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:29:32 2026 by rpki-client