Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: RliMWqDEmFqckosfozlWOre9TIQbkkVYWm0UVcbfzyo=
Subject key identifier: C2:31:05:46:19:F0:9E:CB:3C:C9:C3:8B:2F:AA:0C:4D:53:E1:97:4E
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 01A0F869B0260C3446B29DF9D2A5F4016487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 1A80
Signing time: Thu 01 Oct 2026 17:01:10 +0000
Manifest this update: Thu 01 Oct 2026 17:01:10 +0000
Manifest next update: Fri 02 Oct 2026 17:01:10 +0000
Files and hashes: 1: YeKyHo-fPzS0PXLTVc_ZhuOAnDE.roa (hash: JasqN/dFTwUl8qybymMvb6Z/5LOD9789U3Jts0vT2yw=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: MRDvMGKZc1xzLlsClptclDai1jVYhJuaRISxwm0/ek0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:69:b0:26:0c:34:46:b2:9d:f9:d2:a5:f4:01:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Oct 1 17:01:10 2026 GMT
Not After : Oct 2 17:01:10 2026 GMT
Subject: CN=c231054619f09ecb3cc9c38b2faa0c4d53e1974e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:78:a0:46:c9:f4:f6:d5:5b:26:3a:f6:cf:
d4:aa:72:f4:1a:5d:5e:87:64:c2:e2:6e:ce:72:c1:
55:e5:11:44:de:16:1b:f4:1f:bf:f7:d4:71:5e:62:
00:46:e3:7d:52:04:08:8b:53:33:0b:d5:61:b1:98:
22:46:c2:08:27:b8:07:5b:10:04:f5:ef:30:14:d0:
73:0b:05:31:6e:95:28:e5:cd:8a:24:00:e5:f3:ed:
aa:17:c1:5c:0b:a8:7c:9e:5e:cc:7c:e6:6f:e1:e0:
2e:ca:db:49:73:15:f4:a1:e6:28:38:e6:15:03:5a:
f6:3f:6d:5c:34:4e:c5:cd:ae:2f:c9:76:65:ae:2c:
13:81:30:b1:09:50:85:7f:3b:ef:c9:e4:0b:fc:fe:
40:5d:db:2a:66:96:2f:d9:75:17:0e:c4:74:3f:48:
f3:31:bc:08:af:cb:26:bf:20:8a:d6:c8:47:b0:e7:
cf:d2:fa:e6:2a:93:83:fc:60:17:3a:a2:2d:70:a0:
f4:73:7b:93:9f:65:77:d7:b8:61:fa:b1:e9:5d:50:
e6:cb:7a:27:f6:cb:c1:fd:1e:7a:fd:8e:3e:e2:f1:
16:fd:cc:40:fc:0e:ff:b4:39:1b:75:4f:2c:86:10:
f2:fd:bf:5c:c9:36:29:5a:e1:a4:ef:27:3f:f0:49:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:31:05:46:19:F0:9E:CB:3C:C9:C3:8B:2F:AA:0C:4D:53:E1:97:4E
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:90:e3:3b:5d:77:f1:f1:05:f8:5b:7d:ac:d5:10:dc:06:a3:
20:7b:8b:80:0e:40:a9:45:11:b5:d4:ae:c0:7d:94:99:11:c9:
0b:0f:84:3c:80:ee:a2:60:b8:7b:da:9b:f8:68:0e:37:4d:6d:
a6:ce:01:00:70:9a:d9:77:9e:af:15:7f:2f:24:94:e1:6d:d4:
82:85:e3:16:7e:c7:e0:71:76:0e:09:0e:73:15:12:a7:93:c3:
e7:a7:3d:39:cf:29:3f:f5:3f:3e:fa:ab:4e:36:2a:61:8e:27:
e3:fa:a9:9e:14:2f:65:04:9e:c7:02:41:21:cd:03:09:70:df:
7d:64:40:9c:51:c4:a7:cd:64:88:0f:8c:12:8e:de:47:e6:56:
d0:48:ae:6c:ba:79:20:63:7a:4c:4a:94:3c:2f:a3:56:b4:58:
b2:aa:8a:26:e9:53:62:8f:c5:fb:ad:44:ed:83:a0:9e:fc:24:
c2:64:1e:8b:b9:a3:20:63:f6:6f:c2:0e:e0:8b:14:5d:10:92:
0c:9d:40:3c:a1:2d:1b:6f:67:50:e7:9a:eb:d5:58:5f:64:73:
a2:98:cc:78:f7:8d:4f:fc:47:b5:5d:94:0e:37:0e:c9:0d:87:
42:4b:4d:08:c3:15:63:9b:d4:01:ed:c6:32:5c:3d:d2:11:75:
ab:dd:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 11:31:10 2026 by rpki-client