Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
File: n5D0diDPsoZkkPXRGL0lpQBTEeY.mft (raw, json)
Hash identifier: hhO6BH8wdQ6WthQnHDmqf+RQ7VkirWnVGmiJjjMtAO8=
Subject key identifier: BF:C6:B4:39:37:57:6E:84:31:D2:26:DA:BE:B7:46:A3:49:D4:5F:C5
Authority key identifier: 9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
Certificate issuer: /CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Certificate serial: 01A0CC35362C3CA2DB3625997EEE103A01C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:34 +0000
Manifest this update: Wed 23 Sep 2026 03:00:34 +0000
Manifest next update: Thu 24 Sep 2026 03:00:34 +0000
Files and hashes: 1: Qk8SUDtv35PQudBghJLMDCkV05Y.roa (hash: CGtXCN1Ppc2jLH4a4E4mJ8Yb24I37XQwBgJ85+uhimE=)
2: VLazWnEoP4FNqXwAq5qItoa84gg.roa (hash: GIpN7+SpErb0kVRnHT1vQxVl+Mf313Qjqs5dCJFjsZA=)
3: n5D0diDPsoZkkPXRGL0lpQBTEeY.crl (hash: ysgy0JyzefKSwZ0EhMNhI5ZvjrRJ9WZ/HbJq8GW+PB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:36:2c:3c:a2:db:36:25:99:7e:ee:10:3a:01:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Validity
Not Before: Sep 23 03:00:34 2026 GMT
Not After : Sep 24 03:00:34 2026 GMT
Subject: CN=bfc6b43937576e8431d226dabeb746a349d45fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:b5:86:90:1f:8b:50:b8:af:cd:9e:e7:36:
7b:59:75:e6:e4:b0:ee:c0:2b:d1:2c:32:ca:1a:8b:
7b:dd:04:34:32:93:82:7d:0e:d5:50:c8:d0:7a:c1:
c3:e9:7b:4e:a7:cb:98:54:f3:06:d9:84:c8:e9:2a:
ab:9c:8a:04:66:84:3e:d7:0a:b7:9d:b8:27:13:c1:
0a:3c:ef:b4:76:ec:a0:13:fb:59:b0:11:19:7b:25:
ec:de:61:5e:0b:da:02:55:55:89:23:5f:3a:d7:e1:
8f:bb:38:93:1b:21:fb:64:e4:df:f4:2b:d0:02:66:
1b:9e:9d:50:cb:2e:e5:4c:c4:00:9b:34:ab:64:ce:
55:27:c1:54:02:a6:f4:ef:4b:ed:e6:a0:17:ad:19:
85:38:56:ae:60:40:08:58:cc:9a:5b:2a:d3:b9:b3:
bd:13:81:f8:dd:22:1e:08:47:5d:c7:f1:16:20:2e:
d0:8d:37:85:1c:5e:3a:1a:d8:7e:9a:9b:ad:eb:92:
d6:6b:f1:15:6c:ea:b2:7c:95:44:75:ce:20:70:89:
08:c0:70:91:34:82:45:df:88:51:e3:5f:f0:98:68:
b8:aa:61:ed:74:2d:fc:55:81:a7:90:42:40:d0:cd:
21:04:c6:1e:1a:a6:e7:7f:bf:bd:06:67:7b:4f:f9:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:B4:39:37:57:6E:84:31:D2:26:DA:BE:B7:46:A3:49:D4:5F:C5
X509v3 Authority Key Identifier:
keyid:9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:54:32:4d:84:57:69:37:c2:44:aa:65:83:1c:5d:be:87:ef:
fd:e8:d1:ef:19:87:ef:ff:5d:fd:ab:d6:8d:ac:22:79:f2:94:
18:27:f5:34:df:7e:42:f1:c5:87:df:97:11:74:ad:71:f3:10:
d1:2e:96:9e:0f:5e:2d:88:10:29:3b:cb:bb:d5:92:02:15:58:
30:09:60:1e:83:89:17:e4:7f:17:dd:4a:29:ee:6d:7c:ed:30:
b6:47:b3:d3:1d:89:3c:a2:5a:82:46:73:e1:32:7f:db:b3:09:
00:40:53:d2:73:ae:39:13:50:86:89:42:69:21:f8:2e:ce:31:
35:c4:88:3a:db:d3:d7:23:cd:45:4f:76:81:2d:7a:f6:d9:22:
22:b1:c1:3d:14:df:38:ef:c6:0f:a9:bc:ca:1d:f0:e4:59:b7:
2d:79:29:f0:71:28:12:cd:7b:9b:f5:8b:a2:f2:52:41:55:9b:
a1:e7:8d:f7:14:cd:6e:34:8f:2d:3c:ad:77:f4:57:c4:43:c9:
44:77:47:60:d4:80:0e:8e:ec:05:da:7e:23:72:5e:91:10:82:
c7:8d:b8:35:bb:c9:93:d6:c1:16:ab:6f:0c:b4:72:41:da:18:
1e:cb:62:19:6d:54:4a:94:ae:d7:82:f4:5f:4f:d8:de:61:44:
c0:2f:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:33:37 2026 by rpki-client