Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: OxvXsEeKwkZx2LFRcuJBQyDH95qVc1DnATcFee1rqe4=
Subject key identifier: 77:E2:A1:BA:55:E2:54:E0:0F:55:70:43:7D:DD:C0:1C:8E:CA:60:43
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 01A12BE98B03A41630B77A339E2F090B7B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 17:01:27 +0000
Manifest this update: Sun 11 Oct 2026 17:01:27 +0000
Manifest next update: Mon 12 Oct 2026 17:01:27 +0000
Files and hashes: 1: VDiwRo_Dw3VQnAnWwxslVlwLHTI.roa (hash: eyvaXZ1DgOHbc16lk8yXQEwz4POlL+tLjFw5QFZgFv4=)
2: VhZZqyHl4RcvVrDtF9S5qJYdsrI.roa (hash: 8RcjIqSIrUsAtUqmpBMu/l4viLpz4Dni8fqFOKIrXPc=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: tlZcHHc5lY2JMrrvBGTDz3QNqGisoumTBTBliX2L30w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 17:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e9:8b:03:a4:16:30:b7:7a:33:9e:2f:09:0b:7b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Oct 11 17:01:27 2026 GMT
Not After : Oct 12 17:01:27 2026 GMT
Subject: CN=77e2a1ba55e254e00f5570437dddc01c8eca6043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:92:b0:a7:87:36:9d:ef:52:9a:53:1e:9a:
9f:69:84:71:c7:41:c7:af:f4:52:bf:da:d5:95:60:
07:12:ab:7b:28:99:d5:dc:ee:d5:8b:c9:c4:ea:e0:
5b:95:d8:6f:22:99:8b:32:40:95:11:3e:84:51:c9:
5e:11:4d:8f:5c:df:1d:d9:03:57:67:dd:29:3b:26:
13:2b:07:6e:b4:aa:24:f6:f0:5a:a5:f0:57:c8:85:
ca:02:bc:ac:e6:87:b5:52:1d:ba:d1:d2:32:6c:df:
a8:cc:d5:ba:25:36:5a:06:4c:fd:a3:74:b1:19:1c:
74:fe:30:d8:f8:78:93:d1:53:4f:d4:e6:3a:dd:83:
0c:de:9b:c3:b2:98:66:80:f6:85:52:19:f3:1b:08:
6a:e9:ba:46:f0:93:d1:df:28:90:9a:88:e8:5e:0a:
32:fa:87:94:7c:db:18:95:f5:ae:b8:5c:db:91:13:
c4:5d:3f:55:21:e4:c1:51:e5:07:af:eb:b8:4f:87:
5e:3f:dd:e5:d7:28:1b:57:1d:54:5b:3c:b9:e5:bc:
fe:87:1e:d1:3f:eb:ce:1b:e1:73:ec:3a:79:a4:85:
91:8e:5f:29:34:7e:9f:0d:39:33:ec:7d:c2:25:29:
6a:a0:cc:d3:b6:f1:5c:f0:d4:37:a9:d8:18:b6:8a:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E2:A1:BA:55:E2:54:E0:0F:55:70:43:7D:DD:C0:1C:8E:CA:60:43
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d9:27:fe:1c:2a:34:dc:2a:ca:21:43:b7:87:69:7a:14:5e:
4a:07:6d:6b:d2:84:9b:23:d3:d8:2b:73:66:52:3f:24:23:42:
37:94:15:70:8b:ac:cb:cf:be:ec:ee:95:c2:a8:b5:06:8e:74:
df:9a:86:c5:d2:22:94:d6:ad:5a:b0:84:63:b5:f7:61:ba:ff:
e1:e0:84:1b:bc:91:34:7e:6c:7b:98:4f:fc:ec:9f:a0:46:08:
f6:b0:62:81:67:5f:a5:f1:36:f0:d5:cb:3a:f1:c9:91:0e:65:
55:8d:45:96:a4:f0:ac:41:34:39:ae:c9:ea:27:1d:1c:ef:cb:
50:b1:0d:5c:b3:8b:1f:be:58:93:d3:e4:34:d7:79:2b:5a:09:
f2:bc:d1:f6:ed:2b:74:c3:58:d5:a9:9b:ef:3a:88:92:04:d3:
10:c1:0f:f5:ea:66:2b:ac:b5:71:e1:92:d0:60:89:e4:57:86:
cd:64:34:c4:b6:2f:2e:b3:7d:90:a3:13:74:18:c0:72:39:e0:
0d:ba:9f:3e:69:bf:90:d7:bd:eb:42:ee:7c:20:ef:51:4a:ea:
8b:90:f1:b8:b5:1b:17:25:cd:46:3f:42:8f:3d:63:9d:55:4c:
70:51:c7:ff:05:0a:42:49:37:1a:a0:a1:4e:a9:d4:45:cc:29:
71:39:77:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:15:39 2026 by rpki-client