Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: WMxgZ2cGTl4Oy7gOk/80yqoOckpvUMWgMQpZCoLmG+I=
Subject key identifier: 09:CF:D7:30:DF:33:88:6A:74:D4:80:80:44:51:28:C9:9C:64:D4:AB
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 01A0C520831D485AA8747D635E8268A40603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 04CF
Signing time: Mon 21 Sep 2026 18:00:37 +0000
Manifest this update: Mon 21 Sep 2026 18:00:37 +0000
Manifest next update: Tue 22 Sep 2026 18:00:37 +0000
Files and hashes: 1: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: 5lHZOoR2/x+QXZkI/mxMVEWcyWQKpS41NyZ9/Oos/Sc=)
2: zdVWA8x7Os7mCMN0eXBm1ttPtdc.roa (hash: +6pIktdgc4eoF9sOvoW/ifb/Jig+BT9B1Ye47c39Uds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:83:1d:48:5a:a8:74:7d:63:5e:82:68:a4:06:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Sep 21 18:00:37 2026 GMT
Not After : Sep 22 18:00:37 2026 GMT
Subject: CN=09cfd730df33886a74d48080445128c99c64d4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c6:b3:60:47:98:a1:df:09:21:6c:6d:b6:14:
f0:c0:0d:f8:ce:68:f7:ea:8b:15:dd:de:2f:83:79:
ad:03:06:5b:21:34:18:c9:b0:83:bf:86:f2:10:d3:
e1:19:2b:56:31:76:0a:ad:a0:01:ed:73:0f:67:fc:
36:e9:49:74:5d:01:f5:83:f1:f8:dc:ea:b9:71:5b:
51:de:65:59:50:91:04:db:2e:fb:06:68:8f:ed:18:
2a:3f:93:47:4d:3f:2f:30:10:3b:1a:e4:ff:17:e0:
44:0f:71:8e:29:56:df:25:af:af:52:d5:98:6a:dd:
71:7e:e7:30:4f:2c:dd:dc:b1:17:3b:70:7f:a6:8b:
95:1b:7e:ac:e7:96:a8:12:fe:7f:9a:bb:f5:d0:e1:
33:c4:8b:d3:4c:de:19:65:bb:02:c3:cd:74:65:ec:
91:0e:7f:33:41:68:d1:0e:08:d9:22:17:3a:73:30:
4e:9a:93:80:07:84:ac:82:d8:22:37:82:cc:c1:9f:
29:6e:ba:b5:39:2d:5a:c0:a4:8e:1e:77:01:f7:78:
53:2d:78:33:a0:4a:e4:88:9f:75:0b:04:60:b1:82:
09:0a:50:8c:21:b9:f2:bb:19:c8:3f:34:35:68:bf:
b8:37:ae:93:ed:fa:14:09:a9:f7:82:11:de:4b:19:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:D7:30:DF:33:88:6A:74:D4:80:80:44:51:28:C9:9C:64:D4:AB
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5c:cf:88:c5:0c:d1:c8:98:c9:2c:fd:57:3f:7c:67:fb:e9:
63:07:bc:da:d0:f4:cb:62:fa:bd:2d:5d:cd:9b:f9:7a:7b:df:
3c:14:9f:8f:e3:05:bf:18:de:7e:cb:fc:cd:6e:ac:87:75:a6:
3a:6c:81:5a:dc:fa:48:cd:96:12:91:54:e0:67:af:6d:b8:c9:
74:e7:65:0e:40:e5:80:2f:40:3d:2b:85:89:bd:46:2f:60:a7:
f0:4e:e3:ab:97:d2:e2:c2:63:72:d9:8a:c3:0e:ac:6e:22:a6:
4d:f2:84:dc:5f:4e:5b:0c:48:31:f8:f4:5b:ac:67:22:a1:4d:
37:53:70:38:98:66:85:35:59:ae:12:6c:9b:2e:61:80:68:be:
16:dc:e0:f0:67:90:87:f7:b4:3c:f1:56:57:54:14:42:38:65:
d0:bf:05:63:f2:ba:49:0b:29:3d:59:f3:4f:ee:9b:16:b8:4a:
5e:f2:87:49:26:2f:c8:b9:08:18:f0:27:13:e4:ab:e7:c7:b0:
bd:cb:f9:0f:49:a4:d2:7c:75:8f:f7:d3:7a:9a:a5:e6:85:0a:
27:07:06:dc:cf:28:3c:0b:bc:61:11:9e:8c:c7:b5:0f:21:1a:
ae:c8:f3:6e:92:e5:cc:e8:86:e9:60:b9:8c:03:2b:f0:8d:f4:
5d:e6:27:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:23:57 2026 by rpki-client