Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: T2kACTs7lUtYRWmmpnr6WCCGpNL0FqcmVUA2jjmRVg4=
Subject key identifier: 23:AE:34:01:F4:66:B7:71:00:77:B6:0B:0B:96:F5:82:33:75:66:3F
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 01A0E2BE3D7B311F93CDA86007CD70E73179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 1A79
Signing time: Sun 27 Sep 2026 12:01:53 +0000
Manifest this update: Sun 27 Sep 2026 12:01:53 +0000
Manifest next update: Mon 28 Sep 2026 12:01:53 +0000
Files and hashes: 1: KFiiFWif923SIcwC9nBmJ-HUVJ4.roa (hash: ycwpSj4ZG3+CrkzSV++20ftzs6baQIacEYL2lp7sLR0=)
2: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: jBoLZcY3CiamMCWiOcQLjq33ZFDcxSXkHHLjAXyJZ2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 12:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:be:3d:7b:31:1f:93:cd:a8:60:07:cd:70:e7:31:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Sep 27 12:01:53 2026 GMT
Not After : Sep 28 12:01:53 2026 GMT
Subject: CN=23ae3401f466b7710077b60b0b96f5823375663f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:cd:f8:e4:45:bd:c8:6d:c1:95:44:81:90:
5a:9d:be:3e:57:30:29:dc:c6:af:47:56:56:17:d2:
15:e8:6a:48:ad:47:9c:42:35:c5:6f:85:7e:b3:c4:
f7:e6:f3:63:ba:64:6d:8e:f2:1e:59:47:75:68:8a:
22:61:d9:67:3a:49:da:45:d4:b9:63:fd:23:67:15:
64:13:cc:db:60:2f:ba:56:1a:61:8c:5d:7a:04:0e:
03:02:f6:32:d4:de:3f:5e:60:8e:0b:04:24:2f:8d:
9e:57:10:59:d2:f1:8b:5d:39:9a:e8:d7:47:fd:aa:
95:82:a5:58:71:11:a4:64:03:cf:3b:c1:9c:31:d0:
1d:0e:44:9c:09:79:6d:53:68:1d:4c:cf:fb:90:d7:
14:a8:bd:95:ac:cd:9f:7e:f9:01:fe:99:16:71:fa:
be:60:fb:af:58:b0:01:af:82:b5:9b:d5:68:a7:17:
d2:f3:c1:bc:6a:ed:25:b3:86:57:d9:56:8b:fe:11:
6c:a1:03:1c:ea:2f:14:01:11:8e:3f:40:da:9c:e5:
6d:b5:fd:ee:66:ae:17:01:2f:d4:0b:18:e6:d3:b8:
a4:02:4f:bc:dc:11:59:1b:19:a1:a5:4f:d8:26:66:
93:78:35:e0:90:4d:a5:7f:d5:ce:0d:18:27:f2:c5:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AE:34:01:F4:66:B7:71:00:77:B6:0B:0B:96:F5:82:33:75:66:3F
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:31:13:92:5e:ec:22:69:47:e0:20:6a:5b:d8:c9:19:eb:d1:
da:0b:10:f1:19:b4:38:1d:bb:cb:84:76:93:2a:07:f5:02:2e:
d6:93:50:bc:5b:87:c6:b8:06:36:76:da:c1:6b:5d:7f:ba:cf:
c2:7a:4c:de:7c:49:43:11:8c:71:a0:62:3a:c3:1c:a4:de:51:
a4:ce:dd:6c:2b:03:7c:bf:3f:32:a5:1e:04:50:c4:aa:f8:00:
64:3b:ae:0d:22:fe:22:ac:29:e8:c8:bc:2d:4b:38:bb:9a:43:
6d:5f:69:75:25:65:ea:74:bd:cd:d0:fe:ab:9e:8b:f5:21:d1:
27:97:f9:8e:40:0d:fa:6f:3b:31:67:79:f1:25:79:6f:bd:e1:
fe:81:78:5e:08:11:42:5f:ff:75:05:1e:12:15:c9:bb:3f:2e:
cf:05:2d:11:80:9a:ed:72:a0:a1:46:5e:ca:28:4b:39:11:a1:
0a:2e:52:20:1b:f3:32:73:0c:f9:92:b1:48:1e:22:24:15:41:
c8:76:f0:85:dc:7e:75:dd:41:a2:05:ba:41:32:38:c5:40:25:
0b:13:f3:7f:aa:33:3d:0c:16:ee:f3:b2:cd:d8:c7:70:b1:74:
a7:3d:af:73:03:79:fd:e8:1d:d7:a7:ed:78:b2:6f:ad:5f:11:
11:f5:81:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDivj17MR+TzahgB81w5zF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1
NjgwMDEwHhcNMjYwOTI3MTIwMTUzWhcNMjYwOTI4MTIwMTUzWjAzMTEwLwYDVQQD
EygyM2FlMzQwMWY0NjZiNzcxMDA3N2I2MGIwYjk2ZjU4MjMzNzU2NjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWLN+ORFvchtwZVEgZBanb4+VzAp
3MavR1ZWF9IV6GpIrUecQjXFb4V+s8T35vNjumRtjvIeWUd1aIoiYdlnOknaRdS5
Y/0jZxVkE8zbYC+6VhphjF16BA4DAvYy1N4/XmCOCwQkL42eVxBZ0vGLXTma6NdH
/aqVgqVYcRGkZAPPO8GcMdAdDkScCXltU2gdTM/7kNcUqL2VrM2ffvkB/pkWcfq+
YPuvWLABr4K1m9VopxfS88G8au0ls4ZX2VaL/hFsoQMc6i8UARGOP0DanOVttf3u
Zq4XAS/UCxjm07ikAk+83BFZGxmhpU/YJmaTeDXgkE2lf9XODRgn8sU+QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOuNAH0ZrdxAHe2CwuW9YIzdWY/MB8GA1UdIwQY
MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt
ZWY5Yzk1Mjc2OTMyLzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy
LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzETkl7s
ImlH4CBqW9jJGevR2gsQ8Rm0OB27y4R2kyoH9QIu1pNQvFuHxrgGNnbawWtdf7rP
wnpM3nxJQxGMcaBiOsMcpN5RpM7dbCsDfL8/MqUeBFDEqvgAZDuuDSL+Iqwp6Mi8
LUs4u5pDbV9pdSVl6nS9zdD+q56L9SHRJ5f5jkAN+m87MWd58SV5b73h/oF4XggR
Ql//dQUeEhXJuz8uzwUtEYCa7XKgoUZeyihLORGhCi5SIBvzMnMM+ZKxSB4iJBVB
yHbwhdx+dd1BogW6QTI4xUAlCxPzf6ozPQwW7vOyzdjHcLF0pz2vcwN5/egd16ft
eLJvrV8REfWBgA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:12:06 2026 by rpki-client