Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: Xpv2IbbezOk85NwvAqhLMkRWn+mss+/T8xKojpzZSl4=
Subject key identifier: 9D:B8:5C:6A:D3:93:4F:AC:8E:59:65:BB:EA:E9:87:B1:6B:BA:4D:9E
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 01A12767B91D54B0CF6F6DA498C32BD49AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 19F0
Signing time: Sat 10 Oct 2026 20:01:11 +0000
Manifest this update: Sat 10 Oct 2026 20:01:11 +0000
Manifest next update: Sun 11 Oct 2026 20:01:11 +0000
Files and hashes: 1: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: xIncadxwbrfVjPgq8PZKSjPhkhJAAJBoVIi6c1a1ejY=)
2: jO9rf4-cCHZRF2KoiLta2NyAQgU.roa (hash: UwmPs36c2ef9tHjcukHaPVItxdtDMmpbGOtpHRoCvf0=)
3: xn4i-fiHxOz0VUsB8YhWKLghbLs.roa (hash: Ptihx8qc04YVHI7Uz+aNOpCGFom4Sx5jCTJsyxvgVYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:b9:1d:54:b0:cf:6f:6d:a4:98:c3:2b:d4:9a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Oct 10 20:01:11 2026 GMT
Not After : Oct 11 20:01:11 2026 GMT
Subject: CN=9db85c6ad3934fac8e5965bbeae987b16bba4d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:e5:b3:1b:95:69:11:17:49:e3:c3:c1:6a:
21:e9:02:a4:78:d2:26:69:21:8d:49:03:54:3d:00:
89:9d:7f:da:3c:6c:34:1d:77:f2:ee:1b:dd:cd:54:
70:a1:80:01:7c:32:41:b8:ba:32:60:59:9b:27:4d:
35:6e:6e:1a:76:f8:97:bb:fd:15:3d:9b:9f:ea:d0:
e7:d7:22:6e:e1:4b:80:31:58:f0:a0:2f:82:e3:28:
86:0f:67:4d:f0:bb:4d:a4:a7:ff:fb:16:a5:37:e1:
82:ff:07:d6:e5:90:82:5d:79:fb:0a:46:b4:e2:8a:
da:08:dc:61:38:09:35:a9:ac:bc:84:e9:88:5a:26:
1e:d3:d1:a2:8e:1c:19:4c:50:55:a4:50:2d:b1:c7:
9c:3f:c9:3a:90:71:04:fc:31:1a:34:90:d1:94:21:
ff:eb:af:86:78:ee:0d:7c:96:87:b8:5a:ab:74:50:
69:4b:de:65:52:26:a2:2e:c5:f1:0b:e3:c6:26:49:
54:55:54:b9:a4:d5:81:c6:31:f6:fb:f9:cd:13:4e:
f9:1b:84:da:b6:3c:37:51:66:2f:87:82:81:fd:89:
a1:a4:61:cd:57:21:47:40:8e:71:26:4f:eb:11:2f:
67:b7:e0:e1:ca:36:e1:29:81:33:4a:b2:fc:53:b2:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B8:5C:6A:D3:93:4F:AC:8E:59:65:BB:EA:E9:87:B1:6B:BA:4D:9E
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:78:ad:6e:97:f6:44:35:d5:80:cd:85:56:c6:b5:0f:a9:7f:
4f:b7:1c:1e:31:ef:39:93:74:8e:c7:75:9b:88:45:13:c2:c1:
8c:86:86:b2:88:43:89:4d:e2:36:e8:d2:ea:1a:ab:8c:2d:82:
23:41:ff:81:f1:79:bf:0c:dc:c8:2c:95:a9:c0:d4:0a:24:6b:
ab:0e:5c:dc:35:04:54:6a:46:67:36:bb:77:5c:70:fe:11:e1:
19:64:a5:1e:38:44:71:89:a6:43:cb:7a:db:64:60:eb:b8:6f:
d4:77:ba:02:d2:73:ad:24:9b:98:ce:69:e6:24:43:ed:37:6d:
7d:09:ea:8a:18:66:0c:2c:3e:f5:65:67:76:b3:3c:7e:f2:5f:
a0:e6:38:fd:f8:47:c2:cb:31:77:67:1e:86:27:30:45:14:be:
03:69:94:06:76:4a:34:78:7f:4c:6a:67:6b:58:4d:83:22:21:
d2:c1:98:b2:67:d8:f5:c9:b7:14:26:f5:3b:d7:17:d0:55:0e:
d8:cc:18:48:d5:31:02:ef:68:2c:56:81:d7:04:f8:a6:18:76:
77:9d:ef:5e:ca:93:b6:bc:fc:c7:24:38:94:a7:8f:1a:97:ce:
d8:59:c5:fe:32:bb:0c:cb:19:4c:da:de:f1:b8:62:9d:ac:d7:
98:30:29:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:38:24 2026 by rpki-client