Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: 5MHEn/OAsS+y0wzQjf5umY/7rcLchdtt0tHRbz9cNxY=
Subject key identifier: E5:6C:F3:5F:54:FB:B5:39:64:42:2B:C1:EB:02:E9:C0:59:89:43:39
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 01A0CD113E1412D54F55D60907AF5452EFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 07:00:54 +0000
Manifest this update: Wed 23 Sep 2026 07:00:54 +0000
Manifest next update: Thu 24 Sep 2026 07:00:54 +0000
Files and hashes: 1: ftwoquu3DFj4eBFEtCkmR8T9CQA.roa (hash: 4rlrRLmH28vbIC123d5cUoLsBf7n1zeaVCkiEqiDVnA=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: VJ8VAzyFtr7Lz16GYe2LAw48N7k9IhYA2ggpa6MUuJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:3e:14:12:d5:4f:55:d6:09:07:af:54:52:ef:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: Sep 23 07:00:54 2026 GMT
Not After : Sep 24 07:00:54 2026 GMT
Subject: CN=e56cf35f54fbb53964422bc1eb02e9c059894339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:fc:7b:99:cd:78:35:3d:52:b3:56:f7:fe:
07:65:90:1b:4f:84:9c:ae:60:1e:69:f3:7a:1e:83:
3f:24:43:20:97:5f:52:cd:6b:3e:fd:9f:eb:95:88:
a8:0f:bb:77:d7:6f:0c:ef:33:0d:ba:8a:b7:c1:2e:
32:36:11:4f:7e:86:39:0d:40:59:9f:72:af:b9:0d:
ce:00:60:d8:81:8a:dc:31:dd:6c:9d:b7:68:ec:cb:
62:37:e7:da:4f:4f:3c:b8:02:88:cd:d8:43:94:8d:
aa:30:5d:96:d3:36:1e:a3:e6:fd:e8:1e:c5:03:ae:
bc:cb:44:4e:3d:33:2b:ff:f3:21:02:f8:43:37:be:
fb:0d:cf:2c:f2:d6:83:9d:8d:c3:47:c2:04:0a:5c:
43:3f:f7:16:f3:82:de:11:f1:c6:88:32:1b:ec:b4:
ef:60:d4:2f:a3:ed:60:7a:9a:a6:f4:63:36:f5:f6:
fa:d9:81:ff:e8:29:54:97:cb:a4:4b:79:5b:71:f2:
64:6e:92:30:8e:87:a3:d6:0b:19:e2:21:05:aa:b4:
f7:1f:28:e3:6e:14:a6:2f:9c:e0:ca:b6:b1:31:b5:
15:09:47:ca:a3:78:aa:13:12:d7:bf:d0:24:f6:08:
ab:8f:cd:16:c4:b7:6a:39:f1:70:0c:ae:78:a4:2f:
ec:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:F3:5F:54:FB:B5:39:64:42:2B:C1:EB:02:E9:C0:59:89:43:39
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c0:84:6a:a6:01:40:59:cc:d7:66:4e:25:4c:0f:18:84:8c:
bf:49:bf:a2:12:f8:ba:26:26:71:61:4f:db:75:64:3f:65:c7:
e4:45:06:7f:5b:a2:62:25:d8:9a:27:83:65:e9:70:ba:e1:64:
56:d0:c7:ae:5a:71:ef:ce:e5:bf:dc:3f:15:87:8d:ac:75:a0:
e2:c1:df:b6:7d:d9:3f:26:39:c4:b5:64:f4:09:d1:b0:71:0a:
0a:29:32:71:31:af:51:6d:df:00:06:9c:bc:40:dd:a3:46:5d:
36:00:26:ee:e7:57:25:63:e8:f8:64:c8:5a:90:b1:4b:db:b2:
04:93:8f:21:b6:8f:7d:ef:8c:00:d5:c6:1f:02:73:0b:1e:99:
28:cc:b0:99:57:25:d8:27:a1:92:50:c4:d7:7a:1d:fc:b4:01:
95:ba:50:61:3b:b2:b0:7c:af:69:28:c6:0d:ce:f4:34:e7:53:
cd:76:84:f5:c7:37:02:bb:0b:80:29:2b:74:e6:eb:3b:d2:58:
f1:aa:f0:e0:dd:48:a9:5f:de:fb:a4:0e:8d:56:03:db:39:0a:
59:01:ef:d5:93:1b:cd:26:01:5b:22:91:8f:49:f0:62:b9:1e:
9c:f5:97:40:eb:7c:22:60:d8:06:8a:57:4a:d6:71:4f:9e:5c:
f0:cb:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:47:51 2026 by rpki-client