Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
File: mIb0shUIFe2ng-fzz7m35Tzn2X8.mft (raw, json)
Hash identifier: D+9iDY1ZvSHHC9P1F7ntJohAbjKBZ4LocZ7Z2hRD92c=
Subject key identifier: 4F:2E:8D:DB:07:87:92:5A:1D:75:BE:FD:E8:73:9A:27:0B:20:79:47
Authority key identifier: 98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
Certificate issuer: /CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Certificate serial: 01A13DB88557E5657DF6DE1443C33096EB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
Manifest number: 017F
Signing time: Thu 15 Oct 2026 04:01:05 +0000
Manifest this update: Thu 15 Oct 2026 04:01:05 +0000
Manifest next update: Fri 16 Oct 2026 04:01:05 +0000
Files and hashes: 1: E6Emgi8OOcxRYIN6dlPoick6xdc.roa (hash: b17vqDW+cXgHkIk7rlMgxV1W0X2t1+N9MIRFO/oaFGs=)
2: cJhwzvA4MmD9szzdzlqYrmM_RIk.roa (hash: 0CQ7EyVMolzZdZkEGpCpBtQGO5aHXkTTya7T0UCv1hY=)
3: mIb0shUIFe2ng-fzz7m35Tzn2X8.crl (hash: SqsWBFXNdJcHLqPqkDwzJm/uCGqNZqpH/jAv3ICR5GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:85:57:e5:65:7d:f6:de:14:43:c3:30:96:eb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Validity
Not Before: Oct 15 04:01:05 2026 GMT
Not After : Oct 16 04:01:05 2026 GMT
Subject: CN=4f2e8ddb0787925a1d75befde8739a270b207947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:32:0e:11:8c:14:b4:9c:72:b4:70:f3:fe:
0d:48:52:98:f8:e0:e2:e1:b7:e8:0c:34:0d:a4:dd:
26:7f:85:cc:37:f3:a7:59:bf:13:eb:6d:62:4a:d3:
c6:62:91:9b:59:4b:f7:bf:56:c8:5e:40:e2:dd:78:
67:62:be:5c:d5:31:6f:41:93:1e:fc:ab:34:4a:da:
25:76:1e:9b:a1:e1:a4:ff:c0:03:45:d7:76:61:c7:
64:dc:00:53:d9:65:8f:e5:8a:e4:df:e0:89:b5:af:
a1:b6:43:28:a9:cd:72:78:5f:6d:d1:e5:bf:57:3a:
34:52:8d:da:fc:62:20:ad:28:63:5b:85:7a:c5:9d:
1e:38:42:d2:6e:29:60:a0:af:de:ed:04:90:49:a1:
1b:ce:26:4f:3a:4c:d0:7d:19:d1:b3:f4:4c:46:22:
de:33:a2:a4:f1:7c:83:28:91:14:7f:8d:f1:d1:a3:
ed:e0:cc:62:03:3d:6d:7f:2f:24:23:dc:61:c1:da:
cb:14:7b:f9:1a:19:d1:cf:de:66:9f:66:25:c9:31:
74:7d:59:8e:ad:36:7e:c1:08:d5:0a:eb:82:2f:fa:
44:dd:3e:59:4e:f2:d4:4c:00:42:1a:e3:be:74:f5:
ea:cd:28:9a:e9:d5:23:0e:df:4c:3c:65:b6:a3:13:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2E:8D:DB:07:87:92:5A:1D:75:BE:FD:E8:73:9A:27:0B:20:79:47
X509v3 Authority Key Identifier:
keyid:98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b1:bd:64:da:45:98:ca:4a:47:44:52:52:cd:06:6a:a3:a7:
07:16:74:8a:c0:93:9d:2c:a6:36:7c:a8:35:e5:ba:80:ba:a6:
6e:76:b1:6b:40:5c:03:e6:d3:fc:76:81:8b:23:b2:97:c6:d0:
88:3b:e0:e4:53:74:70:13:8c:26:42:76:88:b0:7b:b7:92:21:
43:13:df:80:2f:68:a2:e3:0f:68:e1:37:8e:00:f4:6d:6d:d9:
16:ab:ea:4d:2b:0b:1b:db:2c:fc:1d:a4:e0:e2:e6:13:31:75:
9d:bc:bf:2a:ae:34:e5:f8:81:27:03:ea:37:d9:6a:62:01:7d:
df:89:e3:47:2b:b5:06:2b:3d:ba:ad:17:65:ba:da:44:f4:30:
28:91:5f:b4:97:da:bb:0f:b9:2e:66:f3:90:41:d8:b2:47:77:
d8:e5:bf:f5:65:ec:13:e2:71:09:a9:dc:ca:e5:71:8a:66:8e:
12:08:e3:61:16:24:b0:a7:90:b7:af:ae:23:62:fe:fd:23:1e:
4d:e5:d9:a9:01:dc:b6:49:e3:f7:31:a4:9e:1c:f1:44:1a:53:
ff:89:01:a5:51:9b:a3:87:fc:e4:7a:ca:3b:da:9b:1e:30:55:
55:cf:ff:2f:33:e7:86:4b:bc:3d:a7:71:4b:46:ce:b5:c9:0f:
ba:c2:3a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:43:05 2026 by rpki-client