Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
File: rnmjPOer5bhoQPOwbZjsisCfWaU.mft (raw, json)
Hash identifier: /c3Be6ECnt+kuqnWWP/c5CwYGp8Q/CQKR4XthiY6NS8=
Subject key identifier: 4B:59:A6:88:AF:AE:87:42:4D:6C:1D:63:93:98:3C:FC:38:50:80:9E
Authority key identifier: AE:79:A3:3C:E7:AB:E5:B8:68:40:F3:B0:6D:98:EC:8A:C0:9F:59:A5
Certificate issuer: /CN=ae79a33ce7abe5b86840f3b06d98ec8ac09f59a5
Certificate serial: 01A12E7BEEAA1E3B269A19473B4D1419F9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
Manifest number: DF
Signing time: Mon 12 Oct 2026 05:00:36 +0000
Manifest this update: Mon 12 Oct 2026 05:00:36 +0000
Manifest next update: Tue 13 Oct 2026 05:00:36 +0000
Files and hashes: 1: HWjg4cqDlFcPbsnpbgKlaCRlbTY.asa (hash: T59UJlc60g8iD9F8A5gW9lus5ZkgqKFSvYU4ouF7Krc=)
2: rnmjPOer5bhoQPOwbZjsisCfWaU.crl (hash: vJYVzj9smYIML1Hosh7h+vpRCy1ajS/Y6I7ySEmA6GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:7b:ee:aa:1e:3b:26:9a:19:47:3b:4d:14:19:f9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae79a33ce7abe5b86840f3b06d98ec8ac09f59a5
Validity
Not Before: Oct 12 05:00:36 2026 GMT
Not After : Oct 13 05:00:36 2026 GMT
Subject: CN=4b59a688afae87424d6c1d6393983cfc3850809e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:ef:97:94:1b:38:c3:e6:d0:9c:ac:b1:16:
87:be:67:8e:8c:fb:70:8b:b4:33:98:e6:40:ca:70:
d8:57:bc:a2:23:1e:a8:88:12:e6:52:93:60:c7:1f:
9a:d6:a2:9c:cc:8c:6e:9b:77:cf:3d:bf:ed:cd:f5:
54:2e:7d:b0:b7:85:a1:75:da:41:49:09:eb:7e:fc:
52:63:b8:69:a7:b5:a0:e1:19:78:89:37:86:23:80:
54:42:42:23:8e:4e:45:67:1d:39:66:7b:18:e6:fb:
3b:f1:e5:a9:f2:73:6d:32:c4:d4:89:25:b4:62:2f:
ea:20:7f:e7:d7:1d:ba:74:c3:d1:05:1f:43:39:ed:
0a:92:9b:30:85:1b:74:65:39:a6:fe:b5:da:6d:6b:
8e:97:9a:9c:49:74:7a:05:a0:12:e4:aa:50:e6:b7:
a0:16:03:81:02:33:61:66:a7:3f:0b:a4:b9:da:af:
7b:0a:8c:1e:1e:46:0d:1c:ad:8d:79:a8:ef:a3:dc:
e9:1d:45:98:b4:a7:54:ff:e7:03:6d:eb:14:45:90:
2c:6b:4b:c4:b8:b1:9d:a9:55:36:4e:e9:71:d9:ee:
4a:dd:d3:c2:8a:84:49:2b:56:84:f4:9e:43:ff:60:
dd:19:5b:43:32:b9:9c:86:52:70:24:db:a2:78:0f:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:59:A6:88:AF:AE:87:42:4D:6C:1D:63:93:98:3C:FC:38:50:80:9E
X509v3 Authority Key Identifier:
keyid:AE:79:A3:3C:E7:AB:E5:B8:68:40:F3:B0:6D:98:EC:8A:C0:9F:59:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:eb:ad:3b:bd:e2:69:05:87:3e:8d:76:a1:3e:f3:75:8c:61:
42:5e:dc:01:21:8f:d7:02:a3:74:70:df:69:33:37:0a:5d:cd:
34:a0:c5:99:f2:0b:5b:e8:e7:4d:dc:b8:80:63:66:17:16:59:
28:07:bc:08:09:13:1f:34:c3:23:a6:b1:91:8d:90:9e:71:86:
d9:08:2c:ab:77:b4:18:63:f3:89:a6:6c:79:c6:63:a2:3f:38:
d7:9d:4d:9e:58:01:6a:78:84:2f:5a:f2:f1:d2:66:e5:5c:ab:
4d:cf:cb:b4:2f:4b:f3:f3:65:16:02:dc:4f:3d:fb:74:c3:f2:
be:ea:f8:b0:1f:0a:41:ab:59:50:e3:3b:3d:bc:1e:9b:4d:35:
38:0c:e8:be:81:56:17:f3:81:6d:46:b8:1e:2f:ca:1a:1f:91:
6d:c3:29:84:e5:d9:d1:bd:e0:59:45:68:8c:8d:c7:e4:d5:07:
39:c4:45:69:56:0f:34:cc:a7:2e:0f:12:45:01:8b:34:b5:1d:
df:a7:77:5b:07:20:8b:f4:09:c4:24:f7:ee:d5:fa:6b:6a:3f:
50:51:3e:44:ca:05:93:57:b3:4e:7e:1d:0c:35:d5:8a:3e:d7:
51:3a:5e:f1:e8:d3:7d:14:0a:a3:34:aa:11:ee:72:61:fe:b6:
a6:68:00:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 09:59:07 2026 by rpki-client