Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: R/vrDNBvSCpFfAWhO+tDm+GBXsJCQSxD0EmAz7LCjWo=
Subject key identifier: BE:F8:F5:89:05:1B:7F:BB:05:3D:4A:52:C7:01:26:D7:CA:22:EA:CD
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 01A12E453D27AA320272A02D049ABF05ABDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 1AAC
Signing time: Mon 12 Oct 2026 04:00:51 +0000
Manifest this update: Mon 12 Oct 2026 04:00:51 +0000
Manifest next update: Tue 13 Oct 2026 04:00:51 +0000
Files and hashes: 1: Hm9jDBLH-sqHFB-kWgpns9uuTu0.roa (hash: em9fSdCaWmu85DiyoLonhSdzPO36ZF77WoiFZ16jO0Y=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: gJm7AjFYqKCGk0u6AD+Y4s7vbwBeRMAqvO0ijtCecLQ=)
3: u-E8c_HIPJtAfwHxjdimDSR9iEU.roa (hash: Ssl8FJdCbKGVA9enj4PlMZpIMHgYMYA2rL+PziMx0XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:45:3d:27:aa:32:02:72:a0:2d:04:9a:bf:05:ab:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Oct 12 04:00:51 2026 GMT
Not After : Oct 13 04:00:51 2026 GMT
Subject: CN=bef8f589051b7fbb053d4a52c70126d7ca22eacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:35:18:d3:a2:7a:0b:61:85:a7:7c:21:73:
fe:4c:02:8c:45:6a:55:ba:41:d6:6f:09:41:af:84:
cc:18:3e:4a:0d:08:27:02:ba:eb:a5:bf:be:09:71:
f4:1d:e7:2f:ef:43:87:7c:8b:63:26:2c:4a:82:6e:
5d:ff:2d:88:21:94:c6:32:9c:e9:2c:20:1b:a8:5c:
7b:53:5b:69:48:7e:9c:f8:19:8b:50:80:a7:fe:cb:
b5:b4:61:f9:c9:fc:7c:67:78:6f:9f:f3:68:23:b7:
98:e6:fd:07:8a:85:83:09:d2:45:c5:51:82:75:9c:
a6:32:5d:ee:00:74:1f:d3:71:23:6c:28:c6:e8:46:
68:81:80:54:27:d7:b4:db:84:3f:57:90:26:74:d1:
f3:48:d4:38:eb:f2:75:f9:46:9e:43:f2:1f:76:74:
09:e0:94:48:c3:41:0a:b3:4e:9c:fe:3f:42:c6:29:
cf:87:e1:ca:8b:6d:50:54:fd:1e:81:15:5e:00:1c:
36:10:a9:c9:31:43:3c:74:3b:44:c3:56:7b:01:95:
73:db:28:a5:63:d0:d5:79:e5:7f:97:c4:34:52:44:
e6:bd:dc:ea:85:aa:f0:19:d6:07:fb:cc:ac:83:57:
2e:6a:0b:e5:7b:88:1c:6e:d9:f1:39:ae:85:fc:40:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F8:F5:89:05:1B:7F:BB:05:3D:4A:52:C7:01:26:D7:CA:22:EA:CD
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:08:0a:d2:66:08:76:23:b1:7a:43:0e:d0:c1:58:50:4d:29:
5d:04:b0:ed:64:7e:dc:f0:3a:81:c3:81:61:5c:a6:6d:ba:74:
a0:5d:b3:31:82:b0:2b:e9:c4:e0:e1:3f:0c:62:5a:02:9f:a5:
f8:24:8f:b1:27:24:40:79:34:61:7e:d0:1b:dc:84:5a:59:89:
2e:21:c3:cf:b6:24:e4:94:25:8c:79:34:6f:c2:91:d2:1a:f0:
97:1f:f6:25:07:a9:f8:b3:2a:0f:01:bc:88:bb:69:d4:71:47:
0d:ed:63:a7:af:56:d7:fb:50:b1:75:1e:e3:09:3d:5a:60:21:
b9:d8:73:71:a4:67:dc:31:5c:09:73:ef:42:9a:cc:58:4b:50:
76:98:0b:d1:e3:06:7b:c8:79:cb:b0:c7:2f:1c:94:88:93:8b:
13:5c:db:2f:ef:70:17:cc:bc:7c:af:5a:0d:c3:d3:85:d0:06:
7d:d2:a4:84:88:c4:6b:c9:41:2f:18:3d:57:8a:6f:25:8e:99:
68:62:7a:29:5c:e3:68:c7:6c:4d:ad:07:27:09:69:ad:a0:b8:
86:2f:e2:46:4f:20:05:a9:ee:af:97:a1:06:30:ea:c9:29:28:
1b:79:c7:63:6d:74:fa:03:4f:f0:60:87:58:00:2c:72:c8:b8:
3b:a2:c0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:44:33 2026 by rpki-client