Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier: mjx3erL20rXdgZqo7PDYvk2stbi+Zx/RethOJrk4jiI=
Subject key identifier: 4C:99:F8:3A:6C:0F:EA:D0:E4:68:4C:6A:80:7C:E3:C2:5A:7E:2D:40
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 01A0C2560E4B48236F1DC11EF6D42378EEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number: 0B5C
Signing time: Mon 21 Sep 2026 05:00:14 +0000
Manifest this update: Mon 21 Sep 2026 05:00:14 +0000
Manifest next update: Tue 22 Sep 2026 05:00:14 +0000
Files and hashes: 1: 3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa (hash: AzZG+4D5GxDUpzfM6ZHMgxfiWGvCIzXIyJrcYsz9Als=)
2: _WqApLTSHnn-QALIm4js6GY_w-E.roa (hash: vRro0DgNa75sk/Unt/zDQwG9CVSw25Sr8T6Yt4LIK54=)
3: e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa (hash: 2MJbHB4+HtGJ4wxkgZ0Dl95e/tJehFc1YChaP86nwFM=)
4: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: AhPlwXb3KZkPlKlRmJ6yQinBl0CGF01RYQfY6IPg6mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:0e:4b:48:23:6f:1d:c1:1e:f6:d4:23:78:ee:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Sep 21 05:00:14 2026 GMT
Not After : Sep 22 05:00:14 2026 GMT
Subject: CN=4c99f83a6c0fead0e4684c6a807ce3c25a7e2d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:ff:f2:dd:6f:70:03:55:d8:f7:70:52:10:
48:99:ae:b1:76:0f:fb:e1:bb:7a:6d:ba:bc:92:db:
f8:a5:2d:99:dd:b2:26:0d:21:76:a1:dc:08:e2:f6:
ef:72:8f:c8:d0:34:7f:7f:b1:ae:20:96:36:6e:c3:
08:2a:49:01:b8:16:28:67:c6:3e:f6:9c:83:83:97:
50:24:7f:fb:4b:90:33:a4:d1:5f:aa:6a:94:16:9e:
08:7e:77:6c:7a:9b:a5:85:9b:de:fa:28:35:e5:2c:
ea:ce:cb:bc:cb:ed:18:98:d2:19:77:4c:e6:9c:99:
be:fe:b7:22:b0:b8:ac:9a:d7:0f:37:3c:87:b6:d2:
71:85:2d:ae:29:f1:2e:ae:04:2f:26:f9:a5:3e:56:
19:53:20:f0:ac:05:04:83:a9:49:e1:0d:5a:dc:e2:
55:77:92:6a:9b:a5:8a:95:e7:3d:f8:e0:b9:92:42:
37:04:5e:55:bf:a1:8a:dd:a8:a5:dc:b4:dc:b8:19:
01:24:7f:10:68:8b:03:c7:3e:c1:58:ec:44:37:0e:
69:ba:8a:55:44:7d:23:62:49:a1:72:74:0e:85:c8:
94:ea:cb:c6:54:65:92:e6:75:58:6c:de:77:f3:0f:
05:94:ae:61:40:4a:b5:d6:0a:20:a5:9e:bd:74:20:
ef:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:99:F8:3A:6C:0F:EA:D0:E4:68:4C:6A:80:7C:E3:C2:5A:7E:2D:40
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fd:47:a4:c6:41:4a:e3:cb:65:c0:03:51:3d:be:4c:77:4a:
1d:22:65:dc:13:c3:9e:27:41:80:41:e7:2e:2f:cf:f7:6a:87:
58:3f:fc:a6:b6:6c:d7:2e:3d:2a:6a:b7:24:2f:e2:4d:9f:d4:
43:e8:86:5c:f6:08:e2:ef:99:ad:89:48:73:f5:18:21:9c:ad:
cc:5e:ff:77:15:97:eb:64:e7:3e:bc:6d:42:31:43:ce:3e:23:
1b:09:2a:5f:6a:24:f5:c0:97:7d:6b:98:19:70:32:64:2b:01:
09:1a:c7:6b:2e:1d:3f:c5:dd:55:74:29:96:4b:52:fe:54:87:
43:21:6e:2a:ca:bc:2a:e6:7f:32:53:58:82:80:d2:e5:c2:e9:
10:d5:a9:a9:e3:b3:b2:c4:c0:6e:60:78:94:ef:69:fe:3a:d2:
f6:cc:83:f9:79:e5:11:4d:db:d6:a6:14:db:da:7a:61:9d:60:
bd:c4:8c:71:d1:01:42:be:55:d2:d7:71:22:02:82:53:7f:85:
13:45:7d:f4:e4:9a:0c:bb:e5:46:75:1a:ea:ac:c8:0c:0f:c4:
fc:a6:13:b6:0f:0a:82:df:92:08:d6:df:8a:48:73:e3:9a:07:
04:03:20:be:08:56:52:22:d7:e1:2d:d8:db:cb:cd:af:ae:85:
69:3c:46:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:58:08 2026 by rpki-client