Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File: MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier: u9K92bhuoqzbBQk5u+eB483yxIoB7UdBOKzHf/kVa+M=
Subject key identifier: E5:5E:4E:D0:64:9F:7F:53:BF:5D:C3:9B:5A:14:45:B2:9F:E8:21:7F
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 01A0E92DD0E5C4D4BFFF48B9E4645237A8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number: 1097
Signing time: Mon 28 Sep 2026 18:01:28 +0000
Manifest this update: Mon 28 Sep 2026 18:01:28 +0000
Manifest next update: Tue 29 Sep 2026 18:01:28 +0000
Files and hashes: 1: LMyd5AVVPstuPC5E7pVL_2qH79c.roa (hash: tZV4ibO3L7V8SZM1mv/sUwiQCz0xJaX2spb6v95tdyA=)
2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: vUHH4jeY+RnRwPsKH5dWHrJHJFD4pK9TBHpHFC8aJvQ=)
3: N5As3_5f02c5s8zn2uyxGXeV7es.roa (hash: agj60RbD37HPgv9kIsdcj8QWRgmWH3ok7Fvf9vYBX/k=)
4: mF3piSy-jnS5Px73pOdLyBwpLDc.roa (hash: DpGLpOFEpkxH6GUQ3DG6CgOD2t2rQ10aAlckjIhEa/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:d0:e5:c4:d4:bf:ff:48:b9:e4:64:52:37:a8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Sep 28 18:01:28 2026 GMT
Not After : Sep 29 18:01:28 2026 GMT
Subject: CN=e55e4ed0649f7f53bf5dc39b5a1445b29fe8217f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:e2:cb:04:9a:5d:cb:8e:d0:ba:6a:8a:75:
ff:02:b7:92:52:1e:6e:f5:da:9c:61:99:30:3c:45:
80:42:36:2f:4f:ae:fc:a2:95:17:fd:34:ea:ea:61:
5f:c4:60:85:79:25:f1:2f:58:46:b4:25:90:13:97:
ab:ef:ed:41:bd:36:2f:e8:45:92:f9:72:41:f2:d2:
cd:8f:97:2c:1f:f1:4b:07:96:7a:f2:80:51:41:5e:
1b:9b:b9:58:25:54:65:07:81:f4:d8:54:ff:88:14:
52:5f:b9:f5:e0:c1:ee:b9:ef:ea:ed:57:3d:8a:21:
e4:53:c6:d8:49:36:a9:28:8c:47:12:0a:df:12:e7:
a0:5d:18:2e:05:33:05:aa:ea:49:9d:63:bd:46:b7:
62:65:2b:36:12:79:08:14:17:b6:cf:70:f9:d6:a3:
88:24:64:d6:48:09:a4:02:b2:32:e5:9e:ad:27:72:
c0:b4:47:cc:82:ef:19:fa:24:d5:30:37:87:59:84:
2f:cb:10:24:fb:b0:61:cc:4e:7f:2d:59:03:82:96:
8f:ba:c5:74:c2:61:a1:10:38:36:f8:cf:a9:82:75:
97:c2:21:07:c2:4b:56:d2:de:88:e3:5b:c2:d2:6f:
a2:16:ee:2d:7d:29:cf:98:1c:a9:ad:d0:44:fe:50:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5E:4E:D0:64:9F:7F:53:BF:5D:C3:9B:5A:14:45:B2:9F:E8:21:7F
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:66:44:56:d2:eb:3a:c9:ac:2e:2b:f4:0c:2b:a0:07:1f:d5:
4b:58:9f:2e:4b:27:59:b5:18:0f:b5:d7:2f:64:83:c5:e4:93:
f5:13:9e:f7:e8:3f:b5:16:8c:39:4a:c6:10:ec:50:be:6d:b0:
b4:03:b9:40:52:71:7d:b9:9a:33:42:59:d0:dc:69:07:4f:1b:
4e:22:c1:bc:84:b7:93:74:36:48:27:6d:61:0d:72:5d:a2:32:
ce:ad:62:6e:a3:02:b3:1c:d1:bc:c4:a0:cb:38:27:6c:cb:8b:
4e:3f:1f:e5:de:c7:0c:d0:3e:71:44:5c:e0:36:a1:f6:8f:f0:
52:24:44:a2:97:aa:e5:b4:4d:52:9d:f4:36:a2:de:da:b0:75:
e1:db:17:3d:48:db:7a:3d:ce:f9:9d:45:27:59:a9:dd:51:8f:
01:b2:6d:5e:03:46:41:9a:b4:19:cf:0b:d3:47:d6:08:43:fb:
4b:4f:41:e1:76:14:5e:b7:ba:df:bc:5a:6c:89:ae:78:f6:82:
e8:0a:ea:2a:f8:1a:85:39:c0:9a:db:09:69:4f:37:75:db:44:
e2:a1:05:4d:d2:4d:24:64:c2:db:cd:ae:27:58:ab:cc:a0:9d:
f3:6a:28:3c:ca:64:af:98:7e:00:4c:05:42:c9:6d:ec:38:f5:
5e:d0:dc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:51:46 2026 by rpki-client