Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
File: mZKB6H1em4dY8kDnju9xAsQBIYk.mft (raw, json)
Hash identifier: Oaju3JJyI2YXPH4w8xnGxFqI0rOVWnnc8rwToAuDzw4=
Subject key identifier: 19:07:81:D4:A2:72:93:14:31:B4:29:C7:50:9B:AF:19:47:08:F5:8C
Authority key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Certificate issuer: /CN=999281e87d5e9b8758f240e78eef7102c4012189
Certificate serial: 01A1DE39B7D18D8875B3CD94956172602E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
Manifest number: 1A89
Signing time: Sun 15 Nov 2026 08:01:26 +0000
Manifest this update: Sun 15 Nov 2026 08:01:26 +0000
Manifest next update: Mon 16 Nov 2026 08:01:26 +0000
Files and hashes: 1: 84a_5dunO5tT13Gn8_j3cCElA5U.roa (hash: myvurQJ8o/9M7JEPK/Rdbm3h4MrG2xioG91InHNEhRU=)
2: mZKB6H1em4dY8kDnju9xAsQBIYk.crl (hash: JpZtFYaUDlQheh5IVw/5Q910PNpjZ4ubMuniRbw4TeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:b7:d1:8d:88:75:b3:cd:94:95:61:72:60:2e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999281e87d5e9b8758f240e78eef7102c4012189
Validity
Not Before: Nov 15 08:01:26 2026 GMT
Not After : Nov 16 08:01:26 2026 GMT
Subject: CN=190781d4a272931431b429c7509baf194708f58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:7d:95:60:0b:f9:42:7b:4a:8b:ba:83:d1:
d1:9f:d7:92:44:d2:70:c1:b4:3f:28:35:d9:aa:86:
31:f9:4d:e5:cb:1e:0c:65:d6:b9:d6:c1:10:e1:a7:
1c:bf:25:39:da:51:b8:32:61:43:be:69:47:7d:2f:
ac:b2:97:e5:03:ad:45:e6:32:eb:bd:66:d6:fe:6a:
e9:a7:d9:23:e6:0e:fa:b0:3e:6f:58:4f:dc:4f:00:
6b:af:1a:cc:3d:33:87:ea:7e:15:fc:b9:37:cb:b8:
22:07:66:db:2d:32:a6:f7:c6:47:97:74:9f:95:cf:
48:4f:29:65:00:11:01:8a:06:45:d7:df:4c:3e:16:
d8:de:32:61:ec:6c:03:b5:ae:2b:74:0e:cd:7c:43:
13:e5:a9:8a:da:77:90:e1:36:da:cd:d0:33:4a:64:
02:3a:c9:e7:b5:84:24:70:99:66:5b:e1:a2:15:bc:
a5:32:77:9f:e1:17:03:ff:21:a1:d7:58:12:66:98:
e4:f1:a4:eb:69:17:a6:de:81:9f:b5:30:a7:42:10:
42:c7:2f:dc:e9:1f:55:f5:32:89:8e:bf:0f:51:70:
cb:0d:eb:13:c2:39:f7:0d:de:11:ad:65:8c:55:6e:
0b:d1:c5:1f:0e:65:34:5b:05:27:f0:dc:2e:93:01:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:07:81:D4:A2:72:93:14:31:B4:29:C7:50:9B:AF:19:47:08:F5:8C
X509v3 Authority Key Identifier:
keyid:99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:14:38:bd:88:59:00:d7:0b:22:2a:78:ac:01:23:0f:12:b2:
b7:f1:d4:c3:4c:bb:06:40:5f:9b:57:1e:ba:ad:36:ec:9c:5c:
d2:02:bf:b5:68:3f:27:c1:59:7b:87:81:fc:26:87:02:7e:f1:
a4:b4:42:8e:51:36:40:f5:81:98:24:91:65:e2:d7:3a:e4:2e:
e9:3d:73:99:be:2d:3e:b4:31:9b:1d:2a:ec:fd:6d:d1:68:8d:
d6:39:15:a4:79:0f:a7:00:e5:3a:a9:3b:3a:44:49:fd:55:c1:
0d:f8:47:a9:99:86:68:a1:45:46:a6:12:88:86:84:9e:b6:e2:
ae:1e:40:b7:94:02:1a:62:5b:c8:b2:c9:e4:bc:2a:26:bf:07:
70:8c:fa:5c:21:7d:a3:cb:bb:10:30:c7:e5:ba:97:b7:19:8a:
57:2d:35:d4:fa:a0:06:62:23:1d:8d:3a:94:f0:41:69:69:69:
9f:7d:16:26:6f:2a:1e:76:7f:8f:82:83:c1:5d:82:fe:68:0c:
27:ae:48:49:84:1a:4a:b7:d1:62:85:3b:f6:cf:2e:78:5a:d3:
9c:e9:37:92:55:a0:31:92:50:4f:15:80:20:53:60:cf:a7:3b:
48:1f:5f:90:a4:18:69:05:28:37:ef:2a:30:ba:d1:25:2b:16:
53:c6:f9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:47:25 2026 by rpki-client