Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: PUY8xbXsN97PHX/uIT5IpE7Ou1hc9Jm8sO71PY6Mur0=
Subject key identifier: 3F:24:DF:93:2F:2A:4E:7A:0D:60:E5:E5:C6:F5:C9:A2:7F:41:8F:BE
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 01A118620E1FA477E9C3B74449399667F0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 1A91
Signing time: Wed 07 Oct 2026 22:00:41 +0000
Manifest this update: Wed 07 Oct 2026 22:00:41 +0000
Manifest next update: Thu 08 Oct 2026 22:00:41 +0000
Files and hashes: 1: OflZg6TFsEKRZGwqwFjxO_4uzgA.roa (hash: 9iTUJuItwJxSzT9lJ39rRuHUjdkumJ61tcp/ZIi1CnM=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: ItaTLkLVUNOqYYGCtVaoKUZmClZY8s6LthuyZj8Y6b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:62:0e:1f:a4:77:e9:c3:b7:44:49:39:96:67:f0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Oct 7 22:00:41 2026 GMT
Not After : Oct 8 22:00:41 2026 GMT
Subject: CN=3f24df932f2a4e7a0d60e5e5c6f5c9a27f418fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:eb:ee:e6:54:44:36:ae:74:14:65:70:67:
b6:7b:64:1b:45:ee:d9:31:bc:7c:b9:90:7c:49:cd:
ab:cf:82:8e:45:3c:02:e2:0c:0b:57:2e:65:cf:c0:
25:fb:41:91:c1:d4:15:45:99:bd:c2:48:61:84:ed:
20:dd:af:4f:a7:d6:00:41:e1:08:c5:38:27:10:c7:
24:ca:17:26:70:09:f4:a9:72:c1:04:40:b0:bb:f3:
b6:2c:45:0d:89:34:fb:54:35:58:19:24:47:74:da:
9a:49:2f:35:30:38:19:f4:bb:9f:e5:b8:b3:ae:5f:
50:bf:8f:a1:87:6a:56:8a:2b:b3:0d:03:60:b5:58:
c3:08:b5:08:ef:25:49:2a:44:9d:c1:a6:4e:3d:7a:
54:4e:e8:c2:5f:5e:60:1c:1d:e4:d3:d9:ab:eb:85:
24:96:b5:09:f9:b5:0b:da:14:81:4a:8d:61:4c:88:
00:2f:63:4b:e7:ec:d2:41:df:85:3e:ff:94:12:22:
17:e1:44:69:7d:af:30:6a:63:a6:f5:5d:c2:f1:e4:
9c:1a:50:a2:02:51:f1:98:fc:f3:92:d7:57:69:d2:
54:a1:2d:51:1f:f2:71:c6:25:43:88:93:b9:31:b1:
5b:85:c2:3d:fd:27:54:32:29:d4:ec:1b:66:2c:3f:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:24:DF:93:2F:2A:4E:7A:0D:60:E5:E5:C6:F5:C9:A2:7F:41:8F:BE
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6e:a1:e5:4a:fb:c0:7c:2e:33:37:17:d0:4a:bb:1d:a2:18:
45:f0:8c:ab:e2:df:8b:cf:34:2a:96:b9:73:ea:da:b5:23:f1:
c5:e3:28:f6:b7:7e:dc:bb:af:c1:a8:1e:23:cf:8d:2d:32:d1:
87:65:d2:8d:7e:ce:b7:0a:e6:8a:1f:2a:b8:e4:58:01:cb:c0:
23:27:6b:dc:c0:d0:6b:38:cb:64:55:72:1a:22:87:3e:8a:52:
de:ad:b3:bd:02:e6:21:4a:b0:fc:24:de:b9:54:e6:ec:61:41:
94:c6:40:44:08:86:dd:0b:e9:33:d4:dc:b1:57:3c:f8:1b:10:
65:36:d9:5c:4b:c6:60:29:f4:34:90:65:ae:d9:31:20:5f:c2:
5f:41:df:82:a6:be:02:f8:be:ec:74:b5:69:e0:23:94:65:77:
17:f9:ee:5b:df:c3:ee:77:a2:3e:cc:e4:2c:7a:ed:6e:1a:73:
e9:e5:61:3f:bc:0d:b9:70:39:20:bb:c9:16:60:2f:60:44:70:
2f:43:b1:79:6a:b1:cd:01:b4:b9:69:2b:2f:6f:d3:f1:77:cb:
19:18:d3:dd:f2:f9:1d:40:e1:6c:4d:db:b2:26:42:f2:1f:ae:
cd:89:e9:e5:19:9f:bb:94:e0:be:52:7d:b4:c1:0a:6a:36:07:
9f:bd:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:47:01 2026 by rpki-client