Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: jSyWj2zNASdjD9jsvf06P/psHqC7qh/A8zjTnCq/RHQ=
Subject key identifier: 8A:33:F5:B5:BF:E0:02:C2:59:66:47:C9:BC:E4:98:1F:55:34:AB:B5
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 01A1306AFB121F7C4C21EB7B6F0574455841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 14:01:19 +0000
Manifest this update: Mon 12 Oct 2026 14:01:19 +0000
Manifest next update: Tue 13 Oct 2026 14:01:19 +0000
Files and hashes: 1: YeKyHo-fPzS0PXLTVc_ZhuOAnDE.roa (hash: JasqN/dFTwUl8qybymMvb6Z/5LOD9789U3Jts0vT2yw=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: lRXnevwefPQmv6UuqGSRz8QUel1ITKfGEhKkyQa5Ge0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6a:fb:12:1f:7c:4c:21:eb:7b:6f:05:74:45:58:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Oct 12 14:01:19 2026 GMT
Not After : Oct 13 14:01:19 2026 GMT
Subject: CN=8a33f5b5bfe002c2596647c9bce4981f5534abb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:b0:b0:06:91:17:30:2c:5e:0a:57:34:51:
a7:ba:0b:28:71:22:f5:15:50:4c:06:d1:89:be:00:
bf:59:a7:63:2b:36:98:db:cf:50:c1:42:76:9d:bc:
c3:22:02:0c:2d:9b:89:91:c1:a4:59:a8:9f:2a:0c:
51:56:01:81:67:7a:d8:44:db:2a:9f:62:0c:a6:01:
62:14:a7:cc:6d:74:74:bc:bd:10:2b:16:73:6c:6c:
79:b8:57:1b:0c:a5:96:a6:4a:78:ba:68:10:a1:01:
b6:3d:1f:97:8c:6c:05:04:ca:06:cb:6b:c8:f7:30:
58:fa:f9:80:21:7d:d8:78:b7:0d:55:1c:61:cf:87:
88:a8:ee:46:7d:b4:88:a5:3a:4d:b4:d8:94:e9:7a:
08:99:d4:6a:77:c5:97:6e:c8:1f:26:3e:f6:68:2f:
ba:2d:6c:bb:06:f2:af:7f:cb:09:ab:c9:c6:cb:ef:
f3:a0:ca:a0:a9:0f:40:af:7e:28:af:3b:1b:14:d4:
c6:2f:f8:55:c2:ec:14:3a:c2:b4:bb:fd:f3:15:b1:
2f:86:95:2c:a4:9a:45:4c:dc:77:f1:5c:21:0c:ba:
19:4a:43:6b:27:fb:a0:7a:18:eb:e1:12:74:c9:f6:
2d:82:10:54:df:45:df:76:f4:ba:de:dc:c7:f3:c4:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:33:F5:B5:BF:E0:02:C2:59:66:47:C9:BC:E4:98:1F:55:34:AB:B5
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b0:9d:d4:ac:99:19:94:db:9c:1b:5c:68:da:60:04:9b:b5:
ee:d3:66:10:a9:7b:61:b2:ad:7f:bc:88:9b:25:04:93:c7:19:
45:b5:f2:15:e6:0f:cd:df:ad:46:99:3b:9d:e7:65:85:ef:c9:
9a:3c:0d:fe:79:ab:3d:ad:31:58:72:c3:04:c9:f1:0c:9c:78:
36:69:f0:b5:b5:ca:7b:95:11:02:09:62:3b:31:eb:1c:c9:25:
2f:d2:aa:e8:d5:fc:3e:ec:5f:0d:07:77:94:01:78:6c:39:19:
e7:7e:75:7b:20:a6:ff:43:db:20:b0:10:54:81:64:1c:78:af:
66:45:b1:1f:11:83:7c:19:f6:5f:f7:fc:41:73:90:e7:b1:23:
a2:fe:e7:51:aa:96:9d:c5:3e:fc:29:8a:46:a7:eb:72:27:3f:
41:0d:ae:7f:12:0d:62:8a:ca:63:d0:55:7d:63:3d:97:ed:dc:
6b:2d:dd:b0:d6:7d:75:7c:b4:4e:2b:98:a7:b9:66:3a:0e:1d:
b3:b2:22:95:fb:f2:8e:ed:c8:70:54:ee:dc:78:cf:03:33:6a:
6b:d6:aa:1c:6f:50:58:3c:38:89:82:78:5b:9e:7a:69:a4:ff:
c9:fd:73:6f:f8:58:4f:da:d5:a9:22:ee:00:65:e2:32:08:6f:
f8:7a:dd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:02:51 2026 by rpki-client