Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: 0J5R2wYfgU2ctfSB3veK5xT9zw/2mQ6Hinctl3UWu3k=
Subject key identifier: 09:17:FA:5E:3A:19:69:94:B0:DE:FB:E7:11:A4:33:63:A8:CB:34:50
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 019EC2921E3A1808F0B6E5800576FC86ABC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 20:00:16 +0000
Manifest this update: Sat 13 Jun 2026 20:00:16 +0000
Manifest next update: Sun 14 Jun 2026 20:00:16 +0000
Files and hashes: 1: YeKyHo-fPzS0PXLTVc_ZhuOAnDE.roa (hash: JasqN/dFTwUl8qybymMvb6Z/5LOD9789U3Jts0vT2yw=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: n2h0PrViX59cXkLZoCC6WDOTV2doGGbgC5YnN3I1osk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:1e:3a:18:08:f0:b6:e5:80:05:76:fc:86:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Jun 13 20:00:16 2026 GMT
Not After : Jun 14 20:00:16 2026 GMT
Subject: CN=0917fa5e3a196994b0defbe711a43363a8cb3450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:9d:5a:cb:93:15:07:46:d7:4c:6e:68:15:
8d:30:7f:8d:6c:de:2b:bc:a2:5d:53:44:3b:b7:02:
82:26:f2:84:ee:85:21:be:73:47:e6:ec:ba:a1:3c:
12:f4:ff:df:81:04:f3:a1:5c:cc:3f:9c:16:0f:3f:
e0:26:01:15:0b:45:3b:40:94:76:b8:3e:bb:b3:e7:
d7:69:98:79:c2:56:20:4e:30:6e:58:55:fb:7e:94:
55:c0:51:7c:19:43:80:67:fa:dc:42:57:cf:98:ba:
4c:64:f6:9c:1e:1b:e7:c5:b5:6f:12:15:a0:f5:f6:
f0:d0:34:fa:26:48:95:fa:17:56:69:17:6a:3e:5b:
72:13:0e:e1:0e:85:57:a2:0c:c7:1c:45:1c:11:c7:
54:57:ff:33:5c:b1:15:1f:bc:e3:3f:b8:36:f9:04:
a9:3a:52:33:20:05:ef:a0:45:0e:fd:6e:97:88:8c:
14:eb:7d:40:00:f6:b4:de:5d:e8:33:84:e0:45:ab:
b3:a2:e0:ae:bd:f3:95:6b:c8:a5:cc:3c:c9:99:f1:
62:56:f0:1e:87:1f:ca:be:5e:6e:45:87:91:c6:33:
e8:0e:4e:01:b8:24:b4:03:e0:56:22:0d:ba:9a:25:
65:8f:99:a1:6d:0f:dd:1c:8f:90:c5:76:ad:b6:88:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:17:FA:5E:3A:19:69:94:B0:DE:FB:E7:11:A4:33:63:A8:CB:34:50
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9d:aa:c5:dd:b5:ef:bb:1e:8f:7d:0f:0d:6a:78:91:c4:de:
58:fb:43:da:d8:98:bf:fd:89:02:64:67:00:dc:5c:4e:96:1b:
b5:86:b7:6e:0a:e4:a9:f5:7b:c4:4f:0c:3f:c8:2d:ab:95:98:
20:59:21:60:ed:bc:e7:80:6f:f0:c4:30:18:c4:5f:a6:06:6a:
cf:80:9f:5c:3c:a0:ec:fd:fd:09:ae:26:a8:7a:d6:24:bd:ac:
96:52:2d:38:8d:2a:6a:25:31:c2:60:6b:d9:20:d5:68:dd:6c:
10:7e:f5:26:c2:dd:5f:a9:b5:34:89:ac:04:08:2d:63:b6:32:
b5:53:e2:1a:07:31:b6:82:13:67:35:ac:7e:14:e7:02:87:63:
65:65:f7:7b:93:9c:2e:24:6d:24:ce:41:e9:a1:57:71:20:df:
94:8c:31:10:d0:b0:a7:2c:d9:b8:30:81:82:f8:da:30:dc:87:
40:9f:54:20:0f:10:24:72:87:9f:c1:0c:01:48:20:74:9e:88:
52:e2:36:a4:d2:65:ea:2a:3e:ff:9d:25:61:b2:21:bf:dc:15:
ae:fb:8f:df:6a:ec:3b:ae:97:5e:62:65:b3:99:85:b9:5b:fb:
7e:b7:eb:55:7e:15:0f:bf:00:c0:f6:8a:19:29:c8:df:4a:45:
90:bc:8a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:34 2026 by rpki-client