Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: TzSzPjgWGkXQV1AxMiVVIgpbbE1cOcXA/66VxiPzCyE=
Subject key identifier: C6:32:55:F2:90:23:FC:4C:81:8F:22:EC:86:AC:C2:1B:A9:31:5D:3D
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 01A0D2379C57C1E2FACECB00799D4CA7F591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 199B
Signing time: Thu 24 Sep 2026 07:00:54 +0000
Manifest this update: Thu 24 Sep 2026 07:00:54 +0000
Manifest next update: Fri 25 Sep 2026 07:00:54 +0000
Files and hashes: 1: 1-1b9kIdAlblnsi3fi8wMUDdRXmQ.roa (hash: EHBhiVunuwqspkFW8sGSqvBOxHJnouc2J5HPWr1aeGw=)
2: 9aFjflm38MN581vnLtWpsCX-q7Y.roa (hash: yLjtSs5KlibIMz+VoXmAGRKRF617RWal83eBR+rXqCQ=)
3: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: 6z0uIZ1HPMQzuX5Y1kgR8UgDnBUvCp+apLpfDYSQ0iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:9c:57:c1:e2:fa:ce:cb:00:79:9d:4c:a7:f5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Sep 24 07:00:54 2026 GMT
Not After : Sep 25 07:00:54 2026 GMT
Subject: CN=c63255f29023fc4c818f22ec86acc21ba9315d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:e5:6a:f4:4c:d2:ae:3f:88:3e:1c:61:d8:
f4:28:0a:f2:9d:c5:c4:77:ac:da:6b:02:36:73:f5:
0a:bc:9e:b0:6c:97:49:8f:5c:f8:f2:82:9c:0d:d7:
97:a3:e7:c3:00:6f:ff:d1:cc:a7:da:21:22:dd:1f:
37:4d:f9:57:48:44:9a:d3:e3:41:de:fb:78:4e:9c:
90:2a:ec:45:63:35:0b:50:6a:f5:f9:78:36:35:c9:
86:d7:ee:af:ba:c3:7c:2c:66:4f:36:72:cc:c7:7b:
06:72:30:9a:2c:7a:0f:67:df:1d:10:1c:6c:e2:a3:
08:fc:a8:0b:25:a6:49:1b:88:c1:bd:63:bf:58:8e:
55:2c:b1:16:b6:ef:1e:1d:e5:8a:64:72:03:ca:9d:
a0:a8:3f:37:0a:2a:91:0a:af:fe:61:bd:3c:e1:ea:
33:7b:b4:67:87:54:90:fb:a8:49:55:f0:46:51:6a:
72:ee:22:a8:47:ae:46:e4:bc:94:7b:a0:ad:39:4f:
82:a4:9b:b2:e5:a2:eb:7f:99:5e:1b:a8:2a:b1:6c:
35:e1:2a:eb:96:71:4f:c5:48:ff:ea:13:53:63:02:
3b:4d:9e:66:d9:1f:35:0a:e7:84:65:7d:76:63:45:
57:46:fa:d1:d4:6d:6b:17:1d:1f:e3:9a:70:76:e6:
a0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:32:55:F2:90:23:FC:4C:81:8F:22:EC:86:AC:C2:1B:A9:31:5D:3D
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:8c:d1:e9:6d:be:ad:2b:45:bd:75:c7:90:b6:11:ed:f2:
11:d7:67:4d:2b:6c:b6:f7:53:30:2e:9d:b0:88:3c:b0:86:ab:
45:2b:1e:8d:69:fa:fe:13:d6:01:c4:37:16:b9:5d:41:ac:c2:
5b:38:64:a5:4b:36:52:04:2b:0a:4f:28:16:4d:b5:55:35:a9:
80:7a:3a:cc:d8:a5:63:71:67:3c:d7:28:67:98:dd:cf:a1:b4:
76:d4:ec:46:5a:98:18:4b:d1:3b:96:98:38:76:91:5b:93:fe:
ea:a8:8a:9d:fe:ad:e3:ef:68:e5:30:57:8b:8e:f2:7e:9b:f2:
82:54:b7:8f:f1:e1:76:63:ef:a0:82:4a:19:46:f0:f1:9e:86:
3c:92:f0:fd:aa:81:38:af:3a:2f:12:61:39:ca:6e:cc:a8:3d:
02:90:97:00:7d:8d:16:37:b2:99:6f:d2:21:12:09:4c:08:53:
1d:de:8b:ea:15:40:3e:3b:f4:09:9b:0e:db:59:15:c1:3f:85:
0e:ad:74:7f:35:1b:eb:53:19:74:d1:3e:30:3a:46:53:47:09:
ae:0e:de:8a:19:fd:65:b2:9e:1b:45:1f:92:83:e0:37:a5:2c:
1d:a9:f7:36:2a:e4:9c:92:65:85:72:d3:92:ba:80:1f:eb:34:
7d:03:28:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:09:27 2026 by rpki-client