Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
File: mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json)
Hash identifier: L1bskn3GJXGrxCFTRojK4Pi9+tZS7h0p+Vw8KuwBENk=
Subject key identifier: 9F:E0:D2:49:E6:55:B6:02:89:78:90:29:5C:5E:80:F6:51:9D:87:49
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Certificate issuer: /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial: 01A0D15BD44F0F4FA43D9F31C404FBF32C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
Manifest number: 0968
Signing time: Thu 24 Sep 2026 03:00:51 +0000
Manifest this update: Thu 24 Sep 2026 03:00:51 +0000
Manifest next update: Fri 25 Sep 2026 03:00:51 +0000
Files and hashes: 1: 1-in7LMhFpQ3SRGa-Iv12w-L9osE.roa (hash: p5UNy6JSWBgEDxhzbnTAtJTc0CoC4BoiXS2WVhGNjLY=)
2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: FaGAwNJk4iEYyXPUUma26N55VCCP6t1rnGJEIu49HmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:d4:4f:0f:4f:a4:3d:9f:31:c4:04:fb:f3:2c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Validity
Not Before: Sep 24 03:00:51 2026 GMT
Not After : Sep 25 03:00:51 2026 GMT
Subject: CN=9fe0d249e655b602897890295c5e80f6519d8749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d4:53:8d:6f:fb:2b:fa:37:81:9f:79:11:fd:
c3:75:21:fd:e0:07:9c:fb:13:bc:e8:16:5e:62:11:
00:a7:6d:21:10:c5:65:d0:29:12:ee:02:32:18:7f:
38:ca:f7:c0:2b:7a:52:18:4e:d8:c3:28:6e:dc:6b:
b1:bb:1d:d8:61:fe:88:a3:e1:49:c1:43:85:10:d4:
f7:7a:e1:f3:27:12:25:40:56:4a:fc:33:27:df:39:
42:fd:9d:e9:b1:55:57:98:f2:f0:b4:df:b6:dd:66:
e2:fc:03:eb:0a:f2:a1:6b:6a:1f:81:6a:1d:bf:b9:
85:19:45:a4:1c:16:1b:64:c0:4d:1e:aa:b5:4a:7a:
d5:6b:cc:18:81:1f:43:e5:8b:13:2a:3b:e2:3b:49:
70:87:56:98:b4:3c:b5:2d:03:ac:20:6d:d9:ea:7f:
aa:53:0f:47:73:6a:88:1c:d0:42:45:48:d0:0a:18:
36:c5:76:c8:82:3f:88:23:54:d8:0f:1f:73:a1:b0:
a4:20:b0:1c:e1:03:f5:54:8d:59:fa:62:0f:3a:ac:
bc:2f:a6:8a:0c:ae:a3:2f:ba:f5:01:16:e5:bc:43:
0c:ed:fd:19:09:da:26:21:63:37:d6:23:ab:65:27:
00:c4:fa:f2:f6:a2:fd:6f:f1:fe:97:1f:4b:3a:3f:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E0:D2:49:E6:55:B6:02:89:78:90:29:5C:5E:80:F6:51:9D:87:49
X509v3 Authority Key Identifier:
keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:84:3e:97:59:66:ad:48:4c:a1:3f:8e:47:d9:11:be:ee:cc:
29:bf:cc:cf:50:aa:ca:ee:06:7f:2a:fc:4f:b3:45:e6:6b:0c:
a7:d7:c8:e0:61:17:85:1a:f7:25:7b:95:4d:9c:5e:5d:8e:92:
96:c6:07:89:f9:cb:16:d3:ef:04:35:4a:a8:4d:49:6d:8a:42:
ad:e0:96:2d:95:9a:ef:ef:3e:07:fa:cf:20:fa:85:77:98:5e:
02:8c:50:a7:b6:07:0d:f0:f5:b6:e1:f7:44:ea:80:f4:04:6c:
24:4f:29:d5:a3:69:79:59:06:9c:90:91:b4:61:9b:22:3e:4b:
7a:e3:25:d6:50:68:89:a9:b5:6f:99:d2:73:c1:20:36:96:49:
0d:1e:20:eb:99:9e:7f:7a:f0:62:a3:5e:02:90:6d:14:eb:f8:
e4:fa:bb:ae:62:d3:76:01:94:23:6d:cf:8d:55:9f:99:eb:6e:
05:4a:cf:a4:d4:30:4f:9d:f0:f5:cd:b8:ac:84:c5:3e:a7:24:
18:95:be:2b:d9:26:ea:9c:e8:55:3c:58:ce:35:74:cf:ba:3c:
f4:7f:3b:f7:c0:8a:2f:98:c7:d6:34:33:d1:73:74:51:ae:e2:
91:5f:b4:a0:ab:f3:db:c9:8d:6e:f6:31:f8:6c:95:e5:25:b3:
eb:14:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:19:17 2026 by rpki-client