Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File: rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier: h+ozeE4paboin3gpDSHcjbX1wl8FI5ChU5QY8J8lMPw=
Subject key identifier: 1A:10:41:EA:17:DA:DD:2E:80:4C:E3:E2:E2:7E:F9:84:13:5C:91:2C
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial: 01A0E13D6242668B3D84DAA44965A13002AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number: 1A11
Signing time: Sun 27 Sep 2026 05:01:31 +0000
Manifest this update: Sun 27 Sep 2026 05:01:31 +0000
Manifest next update: Mon 28 Sep 2026 05:01:31 +0000
Files and hashes: 1: NZ4KU7XjOTlJfpxZEeYBOqiocLc.roa (hash: 1hvoqCoD4N6W+G9hGoZfjVl3mm68AnZJdnlCiI2tn30=)
2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: NHR5BWt0Dtrl1IvhC21Ps82pd7wGhWjEEniAgAal6h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:62:42:66:8b:3d:84:da:a4:49:65:a1:30:02:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
Validity
Not Before: Sep 27 05:01:31 2026 GMT
Not After : Sep 28 05:01:31 2026 GMT
Subject: CN=1a1041ea17dadd2e804ce3e2e27ef984135c912c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:76:f1:c6:64:de:9d:2c:67:ee:85:e7:43:
30:ad:14:06:85:32:dd:d5:ed:50:f2:9d:94:0c:32:
44:d8:4a:59:33:de:71:0b:14:a1:9d:32:91:5e:1c:
60:8a:38:78:60:62:ab:7e:36:b7:cd:9d:b6:0a:bb:
79:1a:9f:2e:83:4e:cc:6d:0a:cb:ea:6f:28:eb:a5:
a2:66:f4:b1:8c:5c:42:00:0d:e7:3d:e4:6d:28:da:
e2:3e:75:3d:a7:3e:f1:7f:d8:e2:d7:70:c3:34:37:
ed:4e:7b:de:b9:ef:13:f8:5b:8c:f2:53:5c:96:7f:
90:fb:e4:15:d8:5b:ce:32:7a:6a:1c:3e:91:f0:d7:
a1:ad:0e:be:1d:a0:55:c8:0f:2a:90:ab:d3:06:1b:
4a:11:de:ac:22:f0:de:38:13:9c:bd:cb:73:f5:26:
6b:42:82:8e:32:6d:59:c7:11:e0:16:51:bf:7c:ae:
31:ce:6f:6b:91:77:80:9e:bc:cc:a3:5f:01:be:96:
a6:4c:ca:ab:c9:c5:ec:bd:c8:53:0a:be:63:47:db:
c9:83:3c:9b:6e:ba:b5:83:b7:18:23:0b:60:5f:0f:
22:ff:9d:4e:92:75:3a:1d:ab:cd:dc:6c:07:47:8b:
0d:8a:71:06:7d:fb:fd:8a:6f:e4:db:7f:a3:4c:f2:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:10:41:EA:17:DA:DD:2E:80:4C:E3:E2:E2:7E:F9:84:13:5C:91:2C
X509v3 Authority Key Identifier:
keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:90:28:64:34:31:ef:76:14:26:f1:5e:a9:6b:35:ca:46:c7:
f4:ad:51:71:5f:80:c8:51:bb:4e:1c:27:7e:71:52:16:1c:6f:
65:93:0a:8d:93:ce:ac:c9:b9:b9:c1:c8:96:7e:51:95:05:3f:
31:5b:45:1f:2f:57:37:41:66:47:12:b2:32:9d:28:26:54:1a:
4c:d3:01:ea:81:a5:44:f5:eb:25:b3:52:7a:d3:5e:f1:03:93:
d6:ad:2e:9d:4b:10:2b:9a:f6:d4:c9:32:e8:b8:58:a1:14:d1:
c6:c4:c6:fb:d6:23:1a:d5:5e:fe:8d:0b:78:44:4d:6c:74:8e:
c5:e0:93:87:58:ba:65:9b:16:89:3b:d2:9b:5c:a8:f7:93:dc:
61:17:b1:31:bd:f3:2b:43:4b:81:6b:42:94:69:6f:53:d9:9b:
32:27:35:30:10:80:f6:c3:6e:85:4a:3e:88:1e:84:33:a7:40:
a4:b6:7d:4e:73:ea:f4:fb:5e:dd:f3:6e:6b:dc:bc:b6:d9:e3:
b5:19:12:36:8c:6e:bd:2b:8b:ae:8c:84:45:07:95:ba:0f:e3:
75:a9:87:ee:c2:40:1e:91:3c:02:68:7f:27:cb:4b:ff:c8:71:
54:1b:a4:eb:ed:34:b4:9b:03:c1:3e:32:aa:a9:14:a5:cc:7d:
19:48:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:42:30 2026 by rpki-client