Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
File: mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json)
Hash identifier: 1uOOREff4vkAcu0+1YVYsX9Ul+xv0bQzedyjX0scW2A=
Subject key identifier: EC:2A:90:5B:49:CA:AC:D8:6E:BD:68:45:10:D9:23:0E:7F:C1:22:E7
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 01A0CD484ECFB32EFAED58033EBF7F8CFFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
Manifest number: 07C1
Signing time: Wed 23 Sep 2026 08:01:03 +0000
Manifest this update: Wed 23 Sep 2026 08:01:03 +0000
Manifest next update: Thu 24 Sep 2026 08:01:03 +0000
Files and hashes: 1: L314PIS9EZuLIllvbYG4hWHPUco.roa (hash: oCRJ7CpfVca9XR76mJtqFGhJ4HnpliA09q5+Ns2Ex/4=)
2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: /aks7e+8OvWgBCI7l7CfWpIGsOp1U4YI/2rHCarmyxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:4e:cf:b3:2e:fa:ed:58:03:3e:bf:7f:8c:ff:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Sep 23 08:01:03 2026 GMT
Not After : Sep 24 08:01:03 2026 GMT
Subject: CN=ec2a905b49caacd86ebd684510d9230e7fc122e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:56:d7:5a:b2:c4:6a:b0:9e:58:c3:cd:63:
db:3f:f6:3c:0a:0a:f2:82:84:ec:8e:c8:ce:1d:8c:
22:24:2e:23:26:b4:a0:68:9b:3f:11:2d:5e:16:e3:
45:44:6a:d5:28:7c:71:55:36:1b:d2:10:6a:3b:31:
a2:ad:21:91:06:8a:5c:e2:e5:a0:08:8f:d5:5f:4c:
37:16:a8:68:c4:b5:37:fe:3c:e4:07:39:db:c8:36:
fd:1e:1a:c8:b2:d7:6d:91:b2:20:91:4d:23:e8:07:
0c:be:60:29:53:7b:ab:df:e2:4b:30:1f:35:83:e6:
dc:90:37:c2:31:18:2b:9b:5e:f7:36:2d:52:67:57:
7e:cc:6a:5d:b0:b3:2f:8d:bc:af:55:97:9d:38:9c:
4b:f7:a7:45:7a:6e:c9:a1:41:3b:29:a4:b8:20:22:
d8:a8:26:24:3c:41:26:3b:2a:1e:ce:64:a5:e2:27:
98:8a:a7:4d:08:03:b6:63:9c:78:2f:32:dd:da:96:
f2:1e:93:36:a8:ee:f8:91:9d:b2:6a:38:38:48:c3:
50:fc:d6:46:c4:71:93:07:ef:0f:26:65:a8:1a:62:
12:4a:26:4d:60:1a:bb:8f:ae:a4:3e:de:8e:09:ee:
98:c2:d6:38:eb:64:2d:be:87:46:b7:ca:1d:e4:73:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2A:90:5B:49:CA:AC:D8:6E:BD:68:45:10:D9:23:0E:7F:C1:22:E7
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4b:69:59:4d:89:21:de:38:03:97:f5:0c:a6:2f:cb:1a:64:
01:31:4f:bc:0b:b9:96:a7:03:cb:26:4c:55:5c:fd:e8:f9:39:
2e:9f:57:2a:22:98:f0:01:9a:6a:3d:58:98:8d:8c:15:24:25:
61:9f:c0:34:df:32:06:0c:21:f9:53:f4:33:f1:3f:5c:5b:35:
d8:7b:ab:ee:3b:15:56:31:be:d4:9f:e5:35:c3:78:2c:51:39:
7d:62:3d:66:97:4d:9a:56:74:30:61:c6:6b:32:90:6e:54:d7:
2f:2f:cf:0a:c7:e6:a9:39:72:66:a3:f8:65:31:04:73:90:cb:
8e:d9:41:48:14:36:fb:25:e6:e5:33:6f:b2:05:72:4c:f9:c6:
3a:b6:ab:d1:d0:48:38:02:5f:10:d3:e7:f8:60:8d:5a:8e:b8:
37:94:cb:a5:73:86:7d:fd:cb:e4:6a:6f:03:27:c2:cc:25:fe:
82:c9:18:4f:0a:8a:ed:18:ac:99:7c:4b:78:67:b8:38:31:7c:
ac:64:89:11:a1:00:f6:d1:59:3e:d7:e4:a7:19:36:b6:da:d8:
65:49:36:89:2c:64:30:c7:cf:04:3e:11:5e:e7:5b:3c:46:c4:
82:6d:f3:7d:ef:08:6c:13:3f:65:d6:c6:c9:4d:1e:a1:ca:e9:
2b:59:de:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:36:18 2026 by rpki-client