Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
File: mBFkq3lqrTz68oOQ9k3ew92W0pA.mft (raw, json)
Hash identifier: DS4+J27OAhXnAftTx9zd6zdaRxjuPyjNNHvmRH4tEKA=
Subject key identifier: C1:02:FD:00:00:AC:F6:C0:6F:4C:24:9E:45:EC:5B:A7:69:12:C8:15
Authority key identifier: 98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
Certificate issuer: /CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Certificate serial: 01A12AD65D073B5F63F22225FBA230652BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
Manifest number: 0118
Signing time: Sun 11 Oct 2026 12:00:53 +0000
Manifest this update: Sun 11 Oct 2026 12:00:53 +0000
Manifest next update: Mon 12 Oct 2026 12:00:53 +0000
Files and hashes: 1: VEOXlbCEYPXuq0fRxQy_0buCUmo.roa (hash: 1UgV51kONbQoeYkLuDiM4fOStjiZf9fRzxoncm+9qmI=)
2: mBFkq3lqrTz68oOQ9k3ew92W0pA.crl (hash: 7+fRVKCV7djiAz3iMQXL0N+htECRgvkAqKNxfRZZTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:5d:07:3b:5f:63:f2:22:25:fb:a2:30:65:2b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Validity
Not Before: Oct 11 12:00:53 2026 GMT
Not After : Oct 12 12:00:53 2026 GMT
Subject: CN=c102fd0000acf6c06f4c249e45ec5ba76912c815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:11:71:a6:46:c4:38:74:87:f4:12:49:c3:
f4:c5:64:3c:ec:f7:b0:8c:e8:b7:db:ac:ef:ee:8a:
82:da:3b:e5:1e:4b:1b:6c:ba:4c:0f:66:bf:d5:3c:
db:5b:6c:2d:6d:0b:fb:49:93:e7:d6:4a:71:4e:0f:
53:e9:dc:e3:6b:05:3d:e7:a9:d7:30:70:c2:cc:6a:
d1:e0:24:af:f2:57:e1:3d:7e:0f:43:62:fe:67:88:
1f:4c:d0:fd:d2:d8:4f:c6:81:a6:b4:9e:27:87:6f:
5d:74:ee:cd:6e:68:a2:50:fe:fd:43:c9:09:01:0e:
0f:31:a0:5d:bb:6f:45:4b:ee:83:12:7c:59:ad:61:
41:a1:fd:5e:3b:20:4a:df:6e:ba:d6:0d:36:e6:59:
a1:84:31:2b:63:13:fb:57:e1:55:fb:14:1b:56:8c:
b8:60:c0:29:f9:01:12:c0:a9:03:b6:10:26:2a:51:
9b:3d:26:76:d7:53:9d:71:4e:f5:7d:73:63:78:93:
c8:cb:a8:21:cf:a1:6d:54:fb:44:f1:79:d7:98:5a:
08:99:20:1b:b6:b1:62:74:c9:c5:8e:93:5b:39:28:
65:52:3a:67:8e:06:8c:43:6d:cd:d5:f7:dd:c0:07:
76:b0:8d:9f:9c:b3:1d:b1:e7:b7:f7:61:f1:6f:24:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:02:FD:00:00:AC:F6:C0:6F:4C:24:9E:45:EC:5B:A7:69:12:C8:15
X509v3 Authority Key Identifier:
keyid:98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:47:72:db:e8:65:df:d5:fc:73:75:f6:00:09:c2:a5:c7:fc:
0c:7b:c8:78:f7:85:74:72:49:bb:4f:5a:bd:db:f9:de:2e:6d:
d1:4e:93:0f:2a:a8:88:f3:cc:e0:48:03:8c:42:5b:c7:b4:e8:
eb:4f:33:91:38:4d:ff:d2:6d:03:65:34:1f:11:63:24:17:a6:
21:bf:68:27:30:bc:03:97:6c:5b:8b:49:46:89:86:1d:a8:8f:
99:2a:cd:46:50:eb:9a:ff:bb:c3:39:89:c1:38:43:15:e2:22:
95:ec:19:28:57:1d:73:fe:12:20:27:09:10:5f:c1:a8:86:b8:
1e:34:f7:ed:fc:7f:1f:0f:73:5e:b8:58:95:93:f1:e8:85:0e:
c5:a4:18:7e:cb:06:93:a3:f4:3b:83:c9:88:b9:7e:e5:79:18:
fc:46:26:63:52:6d:ff:35:2f:ab:6f:14:e7:b7:d5:06:23:44:
b2:70:d8:b9:29:86:43:a5:c3:0d:ab:d0:7d:80:2e:1b:5e:66:
e6:bc:54:f8:4c:9d:cb:9f:18:e0:e7:d7:04:16:04:f4:f3:23:
b0:4f:a2:26:53:24:87:27:22:3a:30:c5:f5:9f:0e:51:ff:c1:
ef:9e:8f:89:26:64:36:30:95:28:d4:f3:ed:a0:01:a2:42:aa:
12:7e:5f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:36:37 2026 by rpki-client