Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: BBmKRpIxj1wGswjpwTXDbkOyn/2Ym9RKtyXdDdaGRpU=
Subject key identifier: A2:EC:28:BF:27:2C:EC:44:FB:4F:EE:BF:60:B5:02:39:0F:8E:30:8C
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 01A0D7CCE1A54B2DB3EDD482417CE108AC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 09:02:03 +0000
Manifest this update: Fri 25 Sep 2026 09:02:03 +0000
Manifest next update: Sat 26 Sep 2026 09:02:03 +0000
Files and hashes: 1: iWERPsQjBjOg7P2MlEko3KqBJk4.roa (hash: r2S9jXegLTLDs5TdcDl1C/SzyFIEfCu0kDdQUZgvfsg=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: iuJrJhVkcb8cLW6vdlH9TRmIjiEkCKqtleGRxGeWOBA=)
3: tpWKu4eR85JDF7KBw26Iwlu6TT4.roa (hash: B1xUcL+NqVQqUGxQDr0OwK307/1nuKUDqaxBQpOKHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:e1:a5:4b:2d:b3:ed:d4:82:41:7c:e1:08:ac:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Sep 25 09:02:03 2026 GMT
Not After : Sep 26 09:02:03 2026 GMT
Subject: CN=a2ec28bf272cec44fb4feebf60b502390f8e308c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:eb:2a:dd:67:5a:39:ba:70:75:ea:48:59:
9c:55:ae:1e:0e:c1:33:8e:2f:70:40:a2:83:59:be:
77:44:ca:b2:b7:a3:a2:ce:2d:96:51:db:38:f5:18:
70:c4:91:62:b6:5c:c2:df:ac:bf:d5:5a:4e:16:7c:
f1:b1:45:66:bd:89:c2:36:54:42:47:fa:f3:69:1a:
94:e9:4e:77:fa:92:4c:a3:61:36:f1:c5:35:07:e4:
79:25:fb:55:13:df:16:2f:cf:99:85:d8:69:12:7f:
a0:bf:09:23:f5:2c:c1:02:2c:48:ca:37:9c:16:03:
ec:db:41:2d:d1:41:89:3b:62:72:fe:de:e6:5a:6d:
ae:a7:75:36:10:01:b0:db:6c:4d:8c:e6:83:49:59:
87:c0:19:4f:ca:95:53:8f:8d:39:a8:3e:c8:42:94:
97:11:ad:ac:0d:27:77:4c:3f:0a:e8:d1:24:4b:2d:
12:6a:23:56:44:2f:f2:9b:8c:b4:ff:64:18:e8:b3:
9a:cc:97:e4:0d:ce:9e:0e:b5:6d:dd:28:8c:cf:40:
35:3a:53:20:a1:3c:dc:2a:8e:11:98:3d:b2:a8:d4:
7a:bb:47:94:f1:9b:d2:cb:de:4c:bc:53:ff:db:0e:
03:f2:a8:63:7a:ff:54:df:73:43:86:a3:51:1d:f7:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EC:28:BF:27:2C:EC:44:FB:4F:EE:BF:60:B5:02:39:0F:8E:30:8C
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d6:97:f8:4d:fc:7d:e5:62:43:75:fc:3e:3f:91:1d:da:4e:
10:3c:43:f9:58:fe:02:b1:79:eb:d0:eb:73:59:49:0a:87:4c:
b9:f3:8e:c3:1b:39:12:6e:ec:20:bb:52:69:9d:c5:1d:78:e1:
f8:30:43:e5:64:26:1a:b4:02:2d:ce:b1:ed:bf:3e:0e:f5:b4:
bc:47:93:a9:5c:cd:81:39:85:c7:d3:a0:f8:1c:59:c5:ec:57:
43:87:5e:ec:d7:34:7a:6c:fb:05:c0:a1:7b:9c:68:e4:08:71:
46:ff:b0:23:da:77:3b:93:c7:c2:3b:a3:17:79:ab:f4:b9:42:
51:a9:9a:f1:89:f2:6e:08:a2:1a:9b:91:14:fc:de:b6:4f:4b:
0e:cd:e4:c4:20:da:1b:d2:f9:51:47:6e:ee:0c:25:6b:ff:14:
46:84:0a:03:7e:74:0d:d7:0b:9d:38:50:61:51:c2:fb:b4:cc:
2f:b2:02:1d:da:f3:8f:fa:07:f4:33:a2:f4:65:0b:b1:1a:b9:
5a:c0:b5:bd:9c:1a:78:7d:f8:4a:97:b8:45:24:d9:1e:2e:1e:
6e:3e:d2:2d:07:2f:9c:f8:af:d6:61:72:86:15:64:db:74:9a:
8a:ab:ce:a0:29:1c:db:d8:14:ac:28:d1:c3:79:e0:ea:90:c7:
3d:bd:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:56:41 2026 by rpki-client