Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier: XJakNy6YKPqAbq/OG29Xah4Ew3mpWT1WbsmZXoPD2X0=
Subject key identifier: E5:2D:89:96:35:30:51:C6:2E:1D:2A:F3:80:5F:CE:92:93:22:8E:CE
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 01A0CFDAB2BB4E32CBCC5840745D78A1A1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number: 0B63
Signing time: Wed 23 Sep 2026 20:00:11 +0000
Manifest this update: Wed 23 Sep 2026 20:00:11 +0000
Manifest next update: Thu 24 Sep 2026 20:00:11 +0000
Files and hashes: 1: 3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa (hash: AzZG+4D5GxDUpzfM6ZHMgxfiWGvCIzXIyJrcYsz9Als=)
2: _WqApLTSHnn-QALIm4js6GY_w-E.roa (hash: vRro0DgNa75sk/Unt/zDQwG9CVSw25Sr8T6Yt4LIK54=)
3: e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa (hash: 2MJbHB4+HtGJ4wxkgZ0Dl95e/tJehFc1YChaP86nwFM=)
4: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: b4OegntXc2w8Bx3wXiOvXsbbfnf7IvSZK9rhM9Tc4co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:b2:bb:4e:32:cb:cc:58:40:74:5d:78:a1:a1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Sep 23 20:00:11 2026 GMT
Not After : Sep 24 20:00:11 2026 GMT
Subject: CN=e52d8996353051c62e1d2af3805fce9293228ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:d1:c9:db:ca:cb:d7:13:c9:2c:b3:b1:8b:
39:85:3e:4e:0e:25:01:04:2b:26:b4:02:0b:86:54:
e0:85:eb:1b:ae:41:0d:8e:fa:ed:c2:4d:8a:bc:a9:
04:f5:5f:93:4e:e8:5a:8f:e9:7b:cd:fe:91:d6:90:
f2:46:97:98:4b:ce:9a:b0:19:5e:1b:76:17:66:68:
db:5f:df:76:7f:71:b4:18:c1:eb:81:69:3d:4c:8c:
0c:9d:54:4b:39:f0:8d:7b:1a:a8:87:b7:ae:46:67:
09:47:7c:4d:d0:c6:4c:79:46:c2:8d:a1:36:99:d6:
3e:bd:05:e9:c1:96:b9:7c:48:8c:04:18:3e:a0:0b:
7f:09:df:34:c1:66:4d:8c:a8:3f:45:be:6c:60:f5:
d5:68:e8:9d:bc:7e:ee:13:ea:ba:cd:d1:d8:44:49:
28:d7:6f:0c:ff:7a:1b:76:99:fe:32:63:62:cb:e0:
1e:4d:06:1e:7e:19:79:7d:2e:6f:4b:fc:14:8e:22:
7b:a1:a0:77:73:51:3d:6e:f3:ad:23:ab:62:b1:0d:
0d:0a:fa:e7:6a:43:a4:d1:8b:6a:c2:08:b4:e8:d1:
81:ed:bd:28:97:09:fd:c9:6d:59:cc:05:24:7d:47:
08:52:4b:9f:1b:8f:6e:48:ce:94:0c:f4:bf:7e:f0:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:89:96:35:30:51:C6:2E:1D:2A:F3:80:5F:CE:92:93:22:8E:CE
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:07:ed:38:43:f8:05:9b:9e:f3:53:cf:61:a3:06:70:fc:c9:
22:85:e1:8d:9b:ba:4c:e1:cd:8c:52:cd:e4:1a:39:d1:c7:01:
d0:25:3c:ad:47:cf:3f:4f:49:16:37:c6:80:70:81:68:08:9a:
ef:2a:36:fa:a3:ea:8c:ea:0c:4d:0e:47:bf:d6:d3:d4:18:cc:
e5:87:ae:9e:50:a5:48:b1:ff:0d:45:47:ec:85:31:f6:87:ba:
ee:36:37:ee:c0:ac:ab:a6:53:0d:65:5c:a9:88:92:ca:6c:f7:
1d:38:1a:98:96:7e:f6:75:a0:47:36:fd:3d:ee:13:34:82:75:
70:96:65:8e:49:a1:e7:70:a8:b5:05:02:ca:e5:b5:ad:01:47:
47:d6:30:de:25:37:70:1d:05:19:81:f5:f4:b7:98:8c:ce:d4:
2c:cb:ee:e7:e6:f3:5a:0a:da:4d:3e:9e:73:fd:24:84:39:64:
33:ef:24:da:ae:22:b9:3b:24:09:13:6b:17:5e:87:0e:55:c2:
a7:65:70:df:0b:e7:76:40:66:41:7f:84:b6:43:50:34:1b:e6:
a5:82:cb:6d:c3:03:e4:e2:5d:e1:32:b9:6a:a3:d8:2e:a3:2d:
11:53:b4:1d:2b:72:3d:c7:fd:62:9a:d1:9d:b2:25:01:9b:0a:
c8:c6:38:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:15:47 2026 by rpki-client