Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: ifMmIwqiOw0oyTV72mMFXKuchoeTTm+Am1jC4XkOFzY=
Subject key identifier: 34:3D:30:A7:4D:D7:D2:73:7A:BF:41:14:9E:44:6F:36:84:39:3D:7A
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 01A12CFC229CB6E794C9E38D6F3EB6936DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 1A9F
Signing time: Sun 11 Oct 2026 22:01:23 +0000
Manifest this update: Sun 11 Oct 2026 22:01:23 +0000
Manifest next update: Mon 12 Oct 2026 22:01:23 +0000
Files and hashes: 1: WHwPKWlS1MbhHwPa_EcSvzO973g.roa (hash: ZJla+7f5axXV/6uT6lJ/b0sWEBJptZZvhKtPIna394I=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: ulDtIFb2JnRrrfGVPb0apeCOviZXDQjpvdOCupy/JhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:fc:22:9c:b6:e7:94:c9:e3:8d:6f:3e:b6:93:6d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Oct 11 22:01:23 2026 GMT
Not After : Oct 12 22:01:23 2026 GMT
Subject: CN=343d30a74dd7d2737abf41149e446f3684393d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:4c:37:c0:9b:9e:d2:6b:4a:13:a9:c0:08:
72:db:ce:71:df:ac:a5:d0:78:7f:44:24:32:17:56:
b5:65:97:83:92:39:f6:b5:02:1b:1c:aa:a7:31:a7:
ad:08:e5:65:e7:3c:2a:a8:7b:e8:b1:c8:fe:87:bd:
18:64:42:f7:67:63:64:f1:32:a8:bf:5e:a0:44:a9:
45:87:28:4b:4f:d7:19:ea:c4:fe:4a:6d:95:18:80:
6d:a7:cd:95:c9:7d:82:8b:59:af:dc:a4:ac:86:c7:
fc:d6:34:44:6a:5c:ad:be:47:2d:0b:4c:4c:d6:4f:
60:5a:3e:4f:a2:6c:85:43:7b:12:e0:92:68:fe:e7:
64:91:93:f9:a9:da:9b:20:db:da:64:3c:3a:27:db:
cd:f5:6c:42:44:fd:e9:88:e6:6c:29:d7:6c:51:f4:
ec:86:43:80:ec:4f:05:3c:f2:f6:0b:04:a8:9a:6f:
30:43:93:9d:11:99:39:c0:f8:f8:0d:4d:e8:c3:46:
67:eb:46:3a:6d:e3:c6:c2:47:dc:97:58:ad:fd:3f:
9a:8b:73:52:5c:5c:11:a1:ce:f8:d6:ee:a6:8b:ef:
88:cf:2a:c6:6c:de:ac:cd:8e:e1:c3:e3:56:a3:26:
3c:90:24:a4:dd:0a:40:66:96:1a:a2:f1:22:16:af:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3D:30:A7:4D:D7:D2:73:7A:BF:41:14:9E:44:6F:36:84:39:3D:7A
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6b:99:bd:33:1a:63:25:30:ee:c7:f6:39:41:bd:ff:a2:b4:
a2:19:b6:40:c7:33:74:a3:e1:1a:4d:a4:30:19:cf:45:32:51:
24:ca:7a:11:97:c0:66:62:2a:59:95:01:be:bb:89:cf:f8:60:
37:bf:cc:2b:ef:d1:ac:94:b3:0f:b3:6c:60:d2:ea:a9:c5:fa:
63:29:3f:02:8c:15:2e:31:6e:e5:6a:70:7f:a3:a9:b1:1d:40:
ea:c6:f1:bc:80:1e:ca:0a:d7:c9:79:b2:d0:c0:b8:ad:0b:7f:
6e:d8:a5:b6:f9:56:57:df:4b:e6:7c:0d:17:15:c2:65:cc:ce:
8e:b1:57:af:94:5f:3c:83:cb:e7:dc:fd:ed:3f:1c:4d:d0:9a:
ae:96:a4:f7:05:9a:dd:c1:b1:17:c9:a2:95:75:ea:19:ca:83:
ad:5d:1f:81:ed:5b:3c:80:01:a6:83:c7:5c:f8:fa:0b:54:c2:
4b:0e:e0:c9:74:19:96:0a:38:f6:51:45:1e:be:37:f6:b6:fa:
f6:0a:89:ec:ec:78:56:94:77:3d:f9:ea:ac:39:f7:c2:a9:eb:
03:c0:27:d6:01:5d:cd:cb:a0:55:f1:76:86:46:6f:5d:6d:d5:
34:51:88:da:2d:06:f4:4d:d5:85:94:d8:a4:0c:e5:93:20:74:
cc:f9:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:19:28 2026 by rpki-client