Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier: akQCjP5kYDrQWkhOKfWJbrB734savqs8bxSVHC54CHI=
Subject key identifier: 7A:D4:6B:52:8C:CE:13:AF:CB:CD:04:BA:24:0A:E2:91:22:FB:B7:97
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial: 01A0F90EEF4D61F3F301E832E508887C454B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number: 0451
Signing time: Thu 01 Oct 2026 20:01:40 +0000
Manifest this update: Thu 01 Oct 2026 20:01:40 +0000
Manifest next update: Fri 02 Oct 2026 20:01:40 +0000
Files and hashes: 1: cAKVqYBd9IcAL6r2ZvxM_Qj1ndI.roa (hash: XqFaKsdiSRNsnwScS0QPlL53huZcp/xfhEBOIjWXbkk=)
2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: 2yVT/kq+FZiEpGOzQ7h5y1Q5jnAW5IpOA66scjH8H/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:0e:ef:4d:61:f3:f3:01:e8:32:e5:08:88:7c:45:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Validity
Not Before: Oct 1 20:01:40 2026 GMT
Not After : Oct 2 20:01:40 2026 GMT
Subject: CN=7ad46b528cce13afcbcd04ba240ae29122fbb797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:e7:d5:05:42:35:fd:38:a3:35:bf:65:82:
dc:c4:cd:ac:61:15:30:3e:81:44:48:d0:3e:b9:d5:
7e:6d:37:0f:9a:f3:fc:2b:02:b8:f1:a0:ff:8f:78:
7a:04:d4:fb:ee:3e:6b:3a:b5:8e:1c:ce:74:f1:5e:
9a:43:11:8b:b4:54:51:2c:0a:a6:d2:b7:43:9d:a0:
f0:eb:cd:7f:80:b6:39:d2:f4:59:c4:5a:8b:6f:31:
03:80:f5:ca:a1:9a:30:db:31:73:dc:1c:cb:c0:5a:
3e:35:1e:b3:3f:06:79:b3:85:79:be:21:74:76:d8:
1b:25:fc:24:17:1f:c7:78:69:c0:8b:ba:30:91:be:
5d:f6:4b:a9:86:c6:e9:9c:ec:ae:a0:19:f0:b1:5d:
a5:e1:b1:c4:b6:cd:ca:36:70:5f:50:90:b1:95:48:
f6:7e:fe:2d:d9:56:32:62:8f:a2:b9:7e:62:58:ed:
c8:f2:d2:b6:7e:f6:13:4d:3b:2b:48:1f:0e:81:1b:
e0:c4:df:58:c9:24:a8:e6:fc:d4:36:1a:8e:71:e3:
43:96:ff:11:4b:54:7e:9f:37:27:2e:e9:aa:50:c9:
73:fc:47:b1:96:99:96:05:79:b5:34:69:0a:eb:95:
1a:46:6a:f2:be:ed:76:32:81:bb:84:d2:cd:c5:bb:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D4:6B:52:8C:CE:13:AF:CB:CD:04:BA:24:0A:E2:91:22:FB:B7:97
X509v3 Authority Key Identifier:
keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b5:1a:41:04:ef:65:46:ad:bf:7c:d8:4b:93:b9:bc:97:84:
ae:0a:a0:1a:f7:5e:81:2e:c7:67:e0:d8:8d:e8:87:d2:e9:99:
af:0a:0f:15:60:6c:ab:75:7c:09:f4:20:88:8f:d0:21:6f:0a:
b9:cf:f9:18:f3:46:c2:2b:28:8f:9b:16:51:6f:75:7c:0f:32:
40:f3:ee:37:96:fb:87:14:fc:d7:df:26:03:4b:aa:c2:8d:ad:
fa:34:23:32:32:33:21:02:89:28:f9:bd:50:e6:fa:ee:12:39:
68:3d:96:cb:7b:c7:bd:94:f5:6a:2a:21:c9:eb:fb:78:08:d5:
61:be:31:ff:15:dd:e3:04:07:a5:04:a3:67:3f:25:12:b0:07:
a7:74:bf:39:fc:48:3e:7a:48:2b:9b:64:21:1a:c7:43:52:3c:
3e:c1:76:d3:ec:4a:8b:57:74:a2:7a:c6:a6:55:89:13:b6:54:
8a:bd:e8:3c:35:c0:53:73:b5:cf:3e:04:3f:ce:11:95:52:bc:
60:8d:b7:6b:a4:d9:57:91:60:ac:aa:8f:19:c4:77:78:75:fa:
76:2d:13:e7:8e:0f:74:33:86:27:cd:14:3e:31:70:23:26:c0:
39:b1:79:d4:88:a3:a4:44:84:69:8e:0c:e2:9c:cd:aa:47:0f:
f7:ab:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:33:04 2026 by rpki-client