Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: Byv3vJV7TyT0ndhYFi6FWYQfz2qlm8a8uOQPdaOAYaU=
Subject key identifier: 0B:1F:41:01:C6:2F:E3:55:3D:93:C8:FE:8D:20:FD:B6:21:9E:D9:C4
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 01A0E69A6A6D9FE8728BB8044B7380F77265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 1A9F
Signing time: Mon 28 Sep 2026 06:01:14 +0000
Manifest this update: Mon 28 Sep 2026 06:01:14 +0000
Manifest next update: Tue 29 Sep 2026 06:01:14 +0000
Files and hashes: 1: 0ihzHauFogznBZ4D95qRfmh5DWY.roa (hash: pm2OFW8n3jM91O28PWSYiZEPtxsO4IG0tuEGJsYy+tw=)
2: aXqn4kbdTiISCg3qjch21kWiAS0.roa (hash: fWTEPBg8GhRwpF6veTh6PUPLm3Q1obhdo3c/16/83Z4=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: qwDVLx7kxJYp4RsP9x7tzWWDOgOHpVFMel1hrBdGUJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:9a:6a:6d:9f:e8:72:8b:b8:04:4b:73:80:f7:72:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Sep 28 06:01:14 2026 GMT
Not After : Sep 29 06:01:14 2026 GMT
Subject: CN=0b1f4101c62fe3553d93c8fe8d20fdb6219ed9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:68:0f:f0:74:c2:8f:60:9b:84:eb:ad:cb:
52:4e:1e:14:67:ec:ec:0a:eb:86:b1:1f:de:ae:45:
7f:30:2f:1d:ae:eb:9e:82:56:bb:6d:ce:19:a9:f0:
2f:f3:06:95:34:e9:21:de:07:15:c7:d5:56:27:41:
b1:47:fa:f0:01:53:fa:65:d3:42:1d:8c:40:ee:e3:
be:b9:a3:a0:d3:72:06:bc:7a:1b:dd:dc:ff:ab:64:
05:70:c4:4c:1e:f2:3b:39:56:d5:87:8d:13:ea:85:
5f:1e:e9:31:6a:c8:3a:47:83:7f:ad:56:f1:f3:45:
16:f6:ad:99:b4:09:19:31:71:c2:ce:fa:4a:ed:d6:
3d:b8:69:79:e2:4c:44:3d:be:e7:9e:b2:8f:5e:03:
89:3e:8a:db:f8:22:e2:07:12:9f:e7:ea:03:72:fc:
32:fa:c6:ca:cf:df:db:dd:1d:2b:c6:e3:0b:7a:94:
0b:bc:09:bb:53:02:a6:64:41:6e:49:d8:dd:bb:d8:
00:09:51:98:d2:a0:ed:4b:40:98:0e:c8:ae:a9:56:
fb:25:0a:f1:08:89:e7:23:be:02:9b:ca:88:52:41:
58:d9:db:e0:3c:65:a7:a4:50:6f:2a:03:25:8f:78:
f0:ff:4f:b5:2d:3c:95:12:2a:8e:7a:1b:3f:d6:ea:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1F:41:01:C6:2F:E3:55:3D:93:C8:FE:8D:20:FD:B6:21:9E:D9:C4
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1a:c5:bd:ee:76:36:0d:81:bf:3b:e5:05:dc:cb:e0:0f:3e:
c0:54:b3:d6:7b:47:58:a6:d8:c1:33:44:d9:c2:8b:f3:cf:9f:
83:f2:94:a7:97:aa:6f:f7:8d:ca:8b:a5:24:ef:f0:63:f0:fa:
fe:8c:da:bc:cb:72:a2:49:da:18:2d:c2:e8:87:3f:ee:2b:da:
ed:48:70:ef:13:5d:cd:ce:0e:64:30:e0:d1:e7:a0:8b:e4:bd:
bc:21:14:7d:91:fa:a8:07:fb:fc:27:90:33:80:d3:7d:a7:a1:
bd:98:f2:ab:f6:21:54:f5:ce:9f:21:7d:86:c7:db:44:20:1c:
bd:f5:c7:62:d5:69:76:e1:e5:19:1c:67:5c:78:1b:61:be:e6:
6a:f6:e8:69:eb:cb:78:a4:ff:90:6b:d3:05:74:08:a9:06:0a:
c1:e4:e0:22:45:bc:2f:51:60:f0:d3:b9:53:33:51:a3:3b:06:
ee:fb:49:96:a2:cd:32:f7:1c:fa:aa:a5:b4:3b:ad:d8:ea:a8:
4a:8a:a4:63:d2:a6:86:55:3b:42:5b:ed:ac:26:ef:2f:7b:ab:
d4:a7:0b:34:99:49:22:b6:ba:a4:02:c8:f9:a5:e3:2b:f8:ab:
2b:2d:85:93:9e:56:d9:9d:f1:dd:19:b5:cc:3e:3c:b8:3a:3c:
3a:9e:1f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:10:49 2026 by rpki-client