Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: 07OEBUQCXXP0eGOY7UUn+TpkC+0b82XEL0mMBKxWPuo=
Subject key identifier: EA:B2:A1:91:CD:3F:3C:5E:97:83:23:BF:B0:FE:71:8A:17:A9:7E:E6
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 01A0E55154E8BAC15E890C53531B16A6BA4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 160B
Signing time: Mon 28 Sep 2026 00:01:47 +0000
Manifest this update: Mon 28 Sep 2026 00:01:47 +0000
Manifest next update: Tue 29 Sep 2026 00:01:47 +0000
Files and hashes: 1: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: Dpu7M7Bb0tyfix52o08xuuWz/pE3URB5Psdhe3J+QvM=)
2: ob5sPFaRhRWX8YvpmsOhf_L42qk.roa (hash: F2rzq+6Lw+VZW+xrLLgUfoPJgDVHj07vj+YUG1nzWfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:51:54:e8:ba:c1:5e:89:0c:53:53:1b:16:a6:ba:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Sep 28 00:01:47 2026 GMT
Not After : Sep 29 00:01:47 2026 GMT
Subject: CN=eab2a191cd3f3c5e978323bfb0fe718a17a97ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:88:06:e8:a4:dd:0d:72:b3:6d:f3:d7:81:87:
44:ef:5c:91:02:7d:59:fe:b7:28:cb:5d:08:21:f7:
7f:d6:e3:b3:22:aa:b6:07:6d:22:34:98:69:cf:14:
32:7c:c1:8f:a8:6f:80:8c:09:84:f8:8a:3d:72:64:
a9:ba:e7:99:9d:ff:74:b3:37:9a:4a:9e:e6:89:68:
d4:9e:8f:b3:b7:30:40:50:3b:49:cb:50:83:03:58:
a9:ba:71:21:01:17:2d:af:cc:13:50:ac:b5:87:bd:
c4:5c:3b:ee:51:0e:19:35:37:a0:f9:ef:30:e9:8e:
1f:7f:94:12:dd:14:0a:4e:7f:a7:4b:1a:e0:86:56:
f2:ab:55:d7:1f:db:b8:2c:fc:a0:f9:34:6a:b8:99:
53:72:85:58:42:1e:02:57:47:bb:bd:65:02:ee:05:
3d:36:05:f1:ea:e5:3b:45:9f:0a:7f:9b:62:fd:09:
de:49:ba:3e:2f:dd:3e:aa:04:f1:94:ae:ab:d2:68:
49:7f:c8:98:0e:e6:86:a8:f7:fb:57:a0:68:28:48:
09:d9:9a:31:8e:c6:87:60:cf:41:ff:ce:16:ef:97:
66:8b:0c:ad:ad:ec:31:3d:c4:9f:e6:36:63:30:e0:
94:95:a1:d8:f3:51:85:6a:ce:2c:b4:03:bd:13:6b:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B2:A1:91:CD:3F:3C:5E:97:83:23:BF:B0:FE:71:8A:17:A9:7E:E6
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dd:1b:e0:e8:1c:11:16:f9:db:28:2b:90:62:1d:d9:63:81:
e3:11:22:ae:03:3e:12:56:ad:5f:e9:7b:b3:07:8e:37:56:10:
2a:fb:21:ea:a6:ba:e1:59:3d:46:02:d2:c0:30:6e:1b:88:aa:
e2:a8:e8:e0:04:7e:ba:dd:89:db:b6:4c:f1:94:27:c1:f7:8e:
83:35:d9:0d:64:9d:f9:54:d3:61:a3:7e:7c:00:93:bb:b9:3b:
c8:65:53:00:e7:97:b8:cf:72:8a:19:9c:c3:24:43:c9:01:12:
c3:d5:71:0b:46:c7:69:1f:bb:5e:27:d2:64:49:83:dc:ad:e7:
39:67:04:40:48:65:67:0a:67:a7:b2:16:a2:f7:54:e0:16:51:
28:6c:aa:f1:f0:e4:75:db:6f:f7:61:e5:c2:3d:67:a8:e4:64:
82:bd:2e:f5:34:e6:21:31:2b:0c:41:55:dc:63:6d:ca:fb:77:
82:17:23:75:ae:2b:9d:54:ef:6d:3b:28:b2:10:6d:5e:30:5f:
1f:e7:e8:06:9c:5d:1e:15:72:b4:a5:85:fc:ae:d5:44:94:ed:
7b:e5:af:09:7b:85:11:8a:80:8e:73:b4:77:54:c5:4b:5b:4a:
34:2d:63:76:4c:28:c7:9d:ca:20:db:03:8c:67:1f:18:3f:fa:
b7:fe:a2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:02:42 2026 by rpki-client