Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: Ua7RNKffqYfYRV9C2ygoZbs0ecnvxJq7VZn5ADM2Ef0=
Subject key identifier: 5F:FD:B3:30:9D:75:ED:12:43:50:1E:8C:BC:AC:34:A7:4C:BB:FC:9F
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 01A12F57F088E625CE55CA4D6CA5EE9E7E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 1AA8
Signing time: Mon 12 Oct 2026 09:00:54 +0000
Manifest this update: Mon 12 Oct 2026 09:00:54 +0000
Manifest next update: Tue 13 Oct 2026 09:00:54 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: Ybdmf6B8Yv7K+TeUEHLd0K0CDBHkPYuP/p1VjjIS3bg=)
2: I5ohKLBmaxUTevQzWj4-q9pt2AE.roa (hash: vsHj8OGuxxJT7n23kvdJawzwXXsXNMGYAz3VXPfMYE8=)
3: JXkrwkvLZXqvLpWo6GIqE9djHow.roa (hash: pvxp7edBiYpg9R4WGN/sBmyvZQpHSdt5YdDqPGYyoLU=)
4: Jb48XUzprHRQSa7zDmEwkm8bHB8.roa (hash: UeQ11+qXjfNfzNk6IX1DTTmTHuYUChCRYnGGfuhQmW8=)
5: M4MI8IskioFX_GL9An1slOnzOXk.roa (hash: +6v5Ea5o3E61ySsVOGY9En91TXxPv4H1t9U0YnMleQI=)
6: cFUEIWQu7qe64nrzejsq3hzv3fw.roa (hash: Y5DG1bnBMtUo7Z76/zjvm84VdL7RwBfBAjPP2M8PD/c=)
7: hkFrsNhiq0TnoVB5lv6ukrym9kU.roa (hash: Lpo1dIydhWwC2a6odejRAjq7zYy9EyLkYPWh1THs0As=)
8: svxysR0fryYPn1ckppavIVkehYU.roa (hash: 8MNRRTqy3XlQo1M7+GUmMiXWjPTZpOon/19BgW0t8Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:57:f0:88:e6:25:ce:55:ca:4d:6c:a5:ee:9e:7e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Oct 12 09:00:54 2026 GMT
Not After : Oct 13 09:00:54 2026 GMT
Subject: CN=5ffdb3309d75ed1243501e8cbcac34a74cbbfc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:82:14:0f:1e:8f:72:9a:05:7c:b7:db:56:
df:6e:00:b3:5f:35:2c:f9:f0:23:37:c0:9f:a1:8d:
72:c3:c0:04:90:44:6b:1a:44:43:46:86:88:9c:9c:
f7:5a:bc:8c:4b:28:78:95:48:66:d6:36:d4:cc:56:
0c:8d:e3:5c:c6:3c:0f:06:85:21:a3:83:0d:b0:c0:
ba:f6:74:3b:1b:c1:79:d2:98:7b:f9:54:3a:b2:25:
e7:6b:85:47:ce:2a:db:dc:56:27:b3:d3:f8:f7:16:
1b:21:86:21:ca:4c:ce:3a:79:ea:33:d4:ea:de:67:
45:8d:5b:c7:4c:1b:9c:86:b9:e5:3d:b9:26:eb:1e:
f5:3b:65:81:b9:7b:96:bf:19:62:e6:4d:b6:4b:f8:
bf:91:45:73:fe:d5:30:3e:a2:5d:9c:bc:11:ce:86:
eb:c7:63:c7:75:7b:da:07:67:3d:32:d4:ea:0e:43:
0e:0b:08:b3:ac:48:42:be:fc:f3:39:26:bf:e6:e1:
1c:ed:c4:e7:f6:8d:35:54:8c:59:fc:43:4b:5b:23:
d5:33:cf:1f:c9:0a:03:2d:1a:b8:cb:08:60:ec:33:
0f:cb:6c:e0:55:37:c4:d4:d8:ef:c3:61:b8:7c:ca:
35:3e:6f:1f:1b:59:70:85:4a:7a:7e:96:c9:a5:18:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FD:B3:30:9D:75:ED:12:43:50:1E:8C:BC:AC:34:A7:4C:BB:FC:9F
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fc:d9:67:53:ff:62:f7:8c:86:20:24:b9:fa:68:c9:84:24:
db:3e:f2:65:5d:16:f9:6b:99:d0:b7:94:49:39:fe:ef:bf:5e:
46:c4:f5:eb:40:cc:ac:f7:c0:3a:2c:5c:f5:1f:85:a5:32:63:
e1:08:40:cd:f3:a6:07:d9:b6:83:f9:e6:a5:39:42:e1:d9:97:
db:a6:13:a6:72:f5:36:66:38:47:39:8d:4f:89:f8:af:00:1b:
86:6c:12:55:d9:33:60:c0:0a:20:bf:7f:12:c4:ae:8d:93:28:
f7:4a:77:02:5b:63:85:4c:aa:86:39:46:34:7a:44:a2:06:db:
ee:20:dc:6a:ba:02:8e:68:5d:bb:3d:de:49:44:7a:c0:f2:82:
d2:0a:de:3e:04:10:96:b2:71:cd:f8:aa:ee:80:80:f6:32:91:
91:1e:b6:75:34:ca:e8:07:2b:bc:54:12:07:5a:fe:06:70:18:
13:ca:5c:24:05:09:16:dd:95:50:dc:a0:5d:db:7c:a5:0c:23:
9b:fc:10:69:d6:3c:b1:7d:d5:10:1b:a4:c8:b5:31:1f:8c:f6:
a6:3b:cf:aa:94:fe:07:d8:28:ac:c3:b8:52:75:a3:89:6a:7d:
b9:87:24:b4:f1:4b:a8:c2:ec:fa:8f:42:50:83:cf:6a:33:fb:
2c:db:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:36:45 2026 by rpki-client