Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: dvQI9S5Y7FHPOOVoC4WEPZn5UM7voxB50h/3yN7Tdi8=
Subject key identifier: 76:77:73:01:97:58:E5:FC:8F:4E:22:5E:52:56:74:E4:F9:15:44:94
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 01A0D5397740DCBC6DD1242EBD2716BD9C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 21:01:48 +0000
Manifest this update: Thu 24 Sep 2026 21:01:48 +0000
Manifest next update: Fri 25 Sep 2026 21:01:48 +0000
Files and hashes: 1: 13v4LR-kEjAIRzbDQkbfPRC2xqA.roa (hash: I9za9QTYUmGMdQFI8DmW9yvA4iSaksBWoeOdAw7Bnjc=)
2: Xwng2aOLLOOXGJWWCrEGpFiiseE.roa (hash: 6yqVFWixLzqYnXIf35RXEXUfb95qxNvK5438TeN6PcA=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: RJ0iYRAYtEZ9XPp8YmnT8mETvL0dV6OQdgKOEZamb0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:77:40:dc:bc:6d:d1:24:2e:bd:27:16:bd:9c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Sep 24 21:01:48 2026 GMT
Not After : Sep 25 21:01:48 2026 GMT
Subject: CN=767773019758e5fc8f4e225e525674e4f9154494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:f7:80:d8:ce:ea:8d:a2:8a:f8:d0:24:d5:
89:b7:04:8e:f6:c6:be:76:76:9f:8c:5e:f9:9c:f5:
14:cc:04:3f:ce:79:3f:e5:f3:ae:24:19:04:ba:d4:
b9:26:10:33:b7:b4:dc:84:fd:65:38:3c:2a:b2:e9:
a2:01:68:dc:f9:4b:47:43:80:b5:90:7f:15:f7:95:
b8:5e:25:92:2b:e6:3d:00:95:0a:46:b6:b7:b9:9e:
63:59:20:70:2d:06:45:4b:0f:a2:2e:cc:d6:25:83:
09:5c:c1:a8:d2:10:0a:51:2e:80:8a:07:14:32:59:
29:fa:7d:69:94:5e:75:a5:a7:5e:00:dc:31:0c:9b:
9c:6a:24:85:cf:27:e6:c6:53:a8:02:3b:91:ea:5c:
38:a3:59:6a:0c:9f:7b:30:df:e4:a8:a2:cc:fd:f6:
8d:e8:98:a9:31:0b:36:e7:ed:73:68:14:a6:eb:99:
24:75:3c:77:c5:5c:57:55:3c:3c:3a:dd:5f:da:65:
82:ee:cc:ff:30:e0:af:b9:0d:3c:67:55:b6:c5:cd:
e3:d4:9f:ae:4d:73:15:8a:37:76:60:47:55:04:f5:
5a:8c:49:e2:e9:1a:a4:d7:43:f5:41:df:73:2b:0e:
73:71:59:38:ed:03:af:ae:60:dd:a8:89:eb:96:39:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:77:73:01:97:58:E5:FC:8F:4E:22:5E:52:56:74:E4:F9:15:44:94
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ce:f1:0f:cc:e1:10:b9:80:ba:40:d8:d0:d0:f4:b7:29:9c:
60:90:a5:54:1c:4d:39:75:83:ba:73:1c:5a:46:e9:8d:51:13:
da:6e:5a:47:e8:57:1e:30:9d:b4:ea:ab:74:3e:d8:cc:24:c6:
68:10:46:11:c4:f3:e1:40:e5:4c:93:73:14:4f:07:f0:1e:43:
b1:14:6b:fb:55:5b:37:b7:27:41:01:85:06:96:11:78:51:b3:
55:14:81:2b:01:93:e6:d9:df:cd:24:08:e0:01:ea:68:1e:8f:
0d:8d:9c:86:7a:ff:1c:87:09:d2:24:64:cf:00:58:86:db:3e:
13:5d:e9:41:1c:d7:38:b7:a9:7c:ca:c2:1b:0f:18:7f:45:97:
b7:15:d2:6d:27:ec:8c:5c:37:fb:18:46:03:84:c1:82:56:71:
87:44:8b:3b:d1:75:4d:3e:53:b0:8b:04:be:7a:c6:16:c0:95:
9c:57:2e:65:f9:30:ff:e5:41:df:1c:e0:d6:e2:35:d4:46:cc:
ac:98:ad:01:64:96:70:ee:e0:fa:9c:f7:ad:ff:61:0d:72:98:
df:a5:cb:21:cd:e9:83:2d:88:f0:4a:15:08:51:4a:ac:89:c0:
12:69:bf:7b:3f:df:76:07:ad:3e:ef:fe:3e:23:fe:28:e5:b3:
f0:34:39:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:46:59 2026 by rpki-client