Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: pf6DKilTlV1/GvDTlVtYT5xbD5tM+4cUh6JWXCFD/9Q=
Subject key identifier: 97:A1:4D:58:6B:41:CF:BD:ED:36:94:2B:75:37:B9:E8:08:52:22:8B
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 01A0D2A5D124A284667F4A43B219050D5A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 09:01:17 +0000
Manifest this update: Thu 24 Sep 2026 09:01:17 +0000
Manifest next update: Fri 25 Sep 2026 09:01:17 +0000
Files and hashes: 1: 1-WshWzag49fgBIIVS2C0Ln43YnY.roa (hash: UrL7K+EtrLLqE/i5EAvmTal0bqvr0HWJvCJ78tbp0jM=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: xgalvYYaD6JXFaKGiRGjSQRPXUBqjHSq1Q+cqO3tIuw=)
3: vBdouYkRW9ci3JYZ30IDKLuHdds.roa (hash: WJUobDpZaCY+TaeHhazACg6LZ8z6jzGQfsE7W/uWZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:d1:24:a2:84:66:7f:4a:43:b2:19:05:0d:5a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Sep 24 09:01:17 2026 GMT
Not After : Sep 25 09:01:17 2026 GMT
Subject: CN=97a14d586b41cfbded36942b7537b9e80852228b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:99:4a:a8:a7:f4:2f:f3:9d:3d:82:73:5a:
33:f1:bd:0a:43:41:9c:fb:17:37:3c:f1:f0:fd:f2:
43:66:6a:e7:aa:bd:0d:e9:c3:2e:a2:3f:9f:ee:d4:
a3:ac:16:c1:4a:72:2f:b8:63:ab:83:90:4d:d3:fe:
ef:33:c5:21:6b:85:8c:7d:59:dc:1f:b3:4b:00:e9:
f2:28:3b:66:ea:ce:ea:1a:8b:ea:6c:ce:40:49:57:
1e:65:6e:e8:2e:f5:70:aa:d2:71:0b:3a:1b:07:78:
a6:82:23:35:b4:e5:75:1a:36:89:0d:eb:7b:78:2f:
62:f7:6a:c9:c5:26:e4:0d:b2:f1:e0:3d:86:35:26:
e0:f7:3e:16:43:79:93:3e:76:a6:87:ba:58:f8:2b:
df:e1:eb:3b:97:fb:d4:21:e2:2f:42:cc:b0:62:aa:
bb:47:19:6f:98:a0:7e:55:69:ea:fc:83:79:af:da:
1c:b7:81:48:11:4e:b1:ae:3a:7a:28:5a:dd:d7:f6:
a6:05:64:85:84:b2:32:64:c1:98:dd:62:e6:95:78:
9e:8d:0f:99:47:4f:66:89:9a:a7:5e:5e:62:91:9e:
bf:5c:f7:a2:39:9b:a7:9e:a4:cd:35:a7:07:7a:39:
08:2d:b8:26:60:38:ce:a6:d3:73:ce:23:b0:b2:f1:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A1:4D:58:6B:41:CF:BD:ED:36:94:2B:75:37:B9:E8:08:52:22:8B
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:50:81:52:86:2c:2e:06:eb:c5:8c:02:6a:90:46:eb:45:b5:
9d:3c:26:c3:db:a5:76:88:f8:8b:c3:c2:e4:79:23:7c:ff:9e:
48:8a:94:f9:17:08:12:03:b3:ea:73:9d:de:86:e7:db:32:99:
b2:a2:e9:b3:37:3d:ef:96:2c:fb:c3:6b:8b:6b:ba:6a:f7:ac:
6f:d8:1c:cb:07:41:d8:de:01:7a:c8:72:1c:b5:0a:10:6f:f4:
f2:61:8d:84:4b:43:dc:f5:fb:d3:2f:5c:8c:26:a2:ce:92:04:
f1:9b:e0:ef:b0:a6:4f:69:e5:0a:48:25:d9:33:c1:3b:62:9a:
74:16:9b:dc:bf:38:bc:88:6f:77:78:d5:32:4a:a2:5e:b1:1e:
22:66:ff:5c:70:50:d3:64:99:96:73:04:cb:3c:8f:85:25:f0:
ff:3d:e3:39:8a:e6:58:96:2c:b8:5a:96:f4:9b:52:f2:6c:73:
91:7a:93:03:76:b8:8c:08:a5:02:a8:40:3e:41:2f:53:a0:8c:
01:61:0a:13:bd:37:d3:14:dc:70:6f:17:eb:93:05:c2:67:2f:
51:94:d1:d0:12:0d:45:58:6e:42:ac:5d:f9:09:cc:a9:1e:b0:
75:34:0a:0d:2f:da:95:2d:f0:e8:b7:82:35:d9:6a:b2:52:dc:
7f:fb:d8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:28:47 2026 by rpki-client