
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
File: mJre8bGpea83LsZ1WgtUIaBncbs.mft (raw, json)
Hash identifier: Wdx7ervF9nR/0FG9OKIsF17Y/ehLDnCx+JeII9Pl0ws=
Subject key identifier: 88:5B:48:F3:35:17:2C:84:15:01:D4:E1:E8:B4:DA:07:31:3A:56:AB
Authority key identifier: 98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB
Certificate issuer: /CN=989adef1b1a979af372ec6755a0b5421a06771bb
Certificate serial: 01A1231CEFBE1ECFD6FC43E75B06D7750736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
Manifest number: 02A8
Signing time: Sat 10 Oct 2026 00:01:01 +0000
Manifest this update: Sat 10 Oct 2026 00:01:01 +0000
Manifest next update: Sun 11 Oct 2026 00:01:01 +0000
Files and hashes: 1: mJre8bGpea83LsZ1WgtUIaBncbs.crl (hash: OtVHHXkExA14hX5VHhz6EDCOZ3jy0jzNo6L6MkPB0go=)
2: tLe7pLUB1FbsxJodBjiaylvPWqY.roa (hash: iCcIo0MXZAGo4QKL7jZTOf07lWCaTF9D6uBBNDm3oqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1c:ef:be:1e:cf:d6:fc:43:e7:5b:06:d7:75:07:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989adef1b1a979af372ec6755a0b5421a06771bb
Validity
Not Before: Oct 10 00:01:01 2026 GMT
Not After : Oct 11 00:01:01 2026 GMT
Subject: CN=885b48f335172c841501d4e1e8b4da07313a56ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:41:16:24:c0:bc:1d:0f:cc:47:40:4e:42:
65:bb:6b:61:ef:20:f3:96:1f:97:06:e3:39:dc:2d:
12:1b:ea:00:60:ac:3e:a0:f7:d9:ee:fc:64:e5:87:
b9:c9:29:8c:58:3f:7d:4d:42:df:c0:d2:84:88:68:
c2:05:bb:fb:a7:43:bf:27:40:14:72:5a:a7:a2:11:
bf:bb:d6:a4:77:aa:cc:48:f4:57:02:39:74:67:82:
20:6c:9f:be:91:93:09:fd:38:4e:41:6f:a1:8b:9b:
31:53:e5:4f:21:8f:a5:6b:ce:8d:d8:61:42:11:b8:
e3:0a:ee:cc:9d:fa:8b:47:78:8b:aa:07:e9:ac:af:
4c:44:a0:18:b1:30:75:48:05:6f:12:fd:11:e7:55:
de:46:18:f7:a4:b9:70:e6:bf:4a:5e:39:ac:33:8f:
1a:23:73:46:52:d6:1f:67:f1:4e:c8:82:c5:87:95:
57:c8:61:c2:27:20:4b:d7:e8:79:07:55:f3:a6:4c:
a6:af:39:7a:f8:e3:25:06:46:d1:01:6e:9b:57:6c:
19:c8:25:9f:6b:9c:e8:6d:71:cb:b9:7e:80:9d:17:
e0:5f:3a:f3:ca:ad:4a:7a:d1:c0:7a:40:c5:e7:d3:
a8:11:8e:f2:62:5f:c7:10:1f:73:53:90:d4:31:c9:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5B:48:F3:35:17:2C:84:15:01:D4:E1:E8:B4:DA:07:31:3A:56:AB
X509v3 Authority Key Identifier:
keyid:98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d8:81:41:ed:96:98:bb:bc:6f:6a:bb:5c:9e:6a:2d:97:05:
56:1e:ab:43:e5:9d:50:3b:42:2b:49:52:02:ca:f9:ba:93:b7:
53:6e:90:21:9a:01:1f:1d:79:6e:e2:db:10:ee:45:3f:a8:42:
be:f8:45:ba:33:3e:37:93:96:61:66:71:13:6b:5e:7b:65:1d:
45:8a:9a:f5:80:6c:ed:74:4a:04:77:01:7e:2a:b9:93:73:0c:
fe:7a:b3:96:84:82:71:5b:fe:b5:13:6b:db:89:ce:b8:d5:18:
f2:07:86:ce:5f:f4:da:bc:6e:42:56:1d:f4:56:3b:93:56:af:
7f:51:da:c2:ff:2f:6d:50:e8:e0:7c:64:f6:e0:05:aa:02:52:
26:19:68:bc:ed:c7:1e:6b:97:24:a4:e7:c9:1e:b2:63:49:92:
19:43:8a:bf:aa:51:5e:85:e4:fa:5b:cc:74:0d:a9:d2:42:17:
ad:d3:fb:af:fb:79:a6:9b:0a:a7:76:58:ad:22:5d:0c:e3:f8:
c9:e2:a9:bc:bb:6b:b6:4e:60:ed:fa:96:7e:f5:98:61:cd:76:
9d:fe:8f:ca:66:e2:d3:fb:8b:d2:dc:ac:37:67:31:c9:69:85:
8c:7a:ca:a7:ea:0a:d1:33:b5:40:8f:58:38:fc:f8:b1:3f:6d:
54:a4:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:43:33 2026 by rpki-client