Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: hsHj/FXSGi3tpnAqcbWHEJLa6tBLIL2MdcwMfIPo9bs=
Subject key identifier: 59:D1:A9:C5:2E:D1:E3:71:79:F6:1B:3B:EC:29:53:80:D8:01:51:05
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 01A0D20143F09055E6B53C5FC7F615CB2027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 06:01:33 +0000
Manifest this update: Thu 24 Sep 2026 06:01:33 +0000
Manifest next update: Fri 25 Sep 2026 06:01:33 +0000
Files and hashes: 1: iWERPsQjBjOg7P2MlEko3KqBJk4.roa (hash: r2S9jXegLTLDs5TdcDl1C/SzyFIEfCu0kDdQUZgvfsg=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: cR63s9vOEJaI/lKPCadVn8ufa1n02u8zCp5BKJR0ous=)
3: tpWKu4eR85JDF7KBw26Iwlu6TT4.roa (hash: B1xUcL+NqVQqUGxQDr0OwK307/1nuKUDqaxBQpOKHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:43:f0:90:55:e6:b5:3c:5f:c7:f6:15:cb:20:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Sep 24 06:01:33 2026 GMT
Not After : Sep 25 06:01:33 2026 GMT
Subject: CN=59d1a9c52ed1e37179f61b3bec295380d8015105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:9c:0f:2a:f0:b8:af:cc:54:0c:5c:6f:07:
7a:30:93:57:a0:96:be:3e:14:8f:f7:fa:88:b3:a8:
e2:26:e0:f9:ab:52:e9:26:86:73:a9:58:32:15:52:
96:05:55:d2:61:fa:a8:8e:8c:d3:6e:eb:47:75:cc:
1b:47:d2:ed:54:18:0c:f1:06:7c:8c:70:55:0f:36:
89:fc:a0:08:e4:b9:d2:c8:66:e6:ca:0e:e3:46:c2:
5a:24:c3:b6:91:c0:b1:8f:da:97:a9:02:a7:96:34:
88:5a:42:00:9e:52:34:b7:92:54:be:81:c0:68:79:
49:de:aa:2b:eb:28:bd:17:32:27:cb:dc:26:89:56:
d4:84:16:bf:9f:02:d8:72:12:34:ba:69:d4:18:44:
f2:54:d5:83:2f:df:0c:3c:e8:bb:35:e4:fc:5f:19:
26:58:f3:d7:a9:13:29:7d:4b:54:35:cd:58:87:63:
3e:af:40:2d:ea:8a:6f:96:81:ef:f5:f8:f6:c4:f6:
aa:60:8b:ce:03:b5:31:a3:12:6b:26:73:28:ff:bc:
f0:36:44:f5:44:59:d9:fd:1a:84:c4:fc:b2:59:f0:
b6:ac:b5:62:a4:0f:9f:bd:8b:c7:62:9f:4c:eb:a8:
97:8a:b0:05:2a:c0:92:a7:10:18:a4:d6:d5:7c:7a:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D1:A9:C5:2E:D1:E3:71:79:F6:1B:3B:EC:29:53:80:D8:01:51:05
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ed:06:bb:9b:25:6b:4a:66:ab:be:f4:70:31:6f:98:b6:4d:
38:24:59:71:5d:b3:6c:fa:0a:b5:86:7f:a2:0f:27:fb:07:a8:
0e:bc:9b:61:cc:b6:ba:46:c7:31:d8:29:4a:34:6b:51:4f:71:
88:31:28:9e:1c:b7:b8:70:6c:99:df:c2:62:23:3d:56:a6:46:
13:e5:46:7d:3c:92:7c:1e:91:7b:f8:5d:46:38:10:d6:92:ad:
a8:98:86:b9:b5:ee:29:5e:11:8a:42:64:f5:47:84:05:6e:80:
60:4f:af:d2:3f:54:c4:07:ea:6e:72:55:3f:fb:de:46:bc:1e:
9c:8e:ae:2d:22:f4:01:8a:1f:f8:4c:b8:e0:54:08:20:20:cc:
3b:49:9d:8d:79:18:ec:b2:70:71:2d:89:8a:f0:01:89:25:e0:
ef:5b:d7:03:31:f6:8f:de:75:eb:dc:d5:94:fc:ae:38:44:e2:
5a:45:71:85:ad:0d:8c:c3:a7:1f:97:3d:ea:86:7e:0c:82:12:
80:34:11:34:61:78:cf:59:bc:cc:b7:c8:d7:c8:88:cb:df:76:
28:2f:40:ba:4c:4b:11:77:3f:1d:b8:e6:1a:e8:23:1c:65:5a:
18:e5:ad:14:27:08:71:bc:97:7f:b5:13:bb:b8:1d:ad:d0:65:
d6:e6:6e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:43:03 2026 by rpki-client