Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.mft
File: mHGsfwIzoQ0sp6oZusS0l23z1rA.mft (raw, json)
Hash identifier: cZmJxBooQLC825Vha95hWUwy0uNv2yQc81ZYV5U+J5w=
Subject key identifier: 8C:12:6A:9B:DE:55:0D:5E:B8:84:E9:18:20:6D:A2:0E:F6:5D:4E:FB
Authority key identifier: 98:71:AC:7F:02:33:A1:0D:2C:A7:AA:19:BA:C4:B4:97:6D:F3:D6:B0
Certificate issuer: /CN=9871ac7f0233a10d2ca7aa19bac4b4976df3d6b0
Certificate serial: 01A12E7C26614F4FC3D6DD07F6E946961D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHGsfwIzoQ0sp6oZusS0l23z1rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.mft
Manifest number: 012D
Signing time: Mon 12 Oct 2026 05:00:50 +0000
Manifest this update: Mon 12 Oct 2026 05:00:50 +0000
Manifest next update: Tue 13 Oct 2026 05:00:50 +0000
Files and hashes: 1: l2qbWr8szwhVQErHvG2xUJuCoTU.roa (hash: qL4VVtUTfCz7xaoto5m+PyInvmU6afGLX5c86QcyCrk=)
2: mHGsfwIzoQ0sp6oZusS0l23z1rA.crl (hash: hwko5MRHzEBNyRJVVKxGjo7Zki/6i0T/p90r/GLo7ko=)
3: omdp9o_gUvR8pHglA_MM3P_2mrI.roa (hash: 5DA44aR9CbMP0OyTi/8bkActkWf4JkxDerCl5VEmEiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHGsfwIzoQ0sp6oZusS0l23z1rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:7c:26:61:4f:4f:c3:d6:dd:07:f6:e9:46:96:1d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9871ac7f0233a10d2ca7aa19bac4b4976df3d6b0
Validity
Not Before: Oct 12 05:00:50 2026 GMT
Not After : Oct 13 05:00:50 2026 GMT
Subject: CN=8c126a9bde550d5eb884e918206da20ef65d4efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:a3:28:09:5a:04:80:a5:d0:09:aa:12:c7:
bd:73:aa:9f:80:5a:1e:50:18:7d:5a:17:ed:b1:b7:
aa:17:41:bf:d1:1d:95:8e:1b:67:81:05:42:57:f1:
28:c3:b3:a7:8c:16:e9:a9:5f:20:d0:e4:c8:6e:84:
c8:89:8e:7a:6a:18:d7:66:f8:3d:ab:95:c8:01:fb:
7a:d6:d4:b9:fb:32:59:23:0a:4e:bc:4e:12:05:03:
d2:b6:ce:df:70:80:55:10:2f:4a:d4:95:6d:f8:ca:
cc:3b:cd:20:bc:77:99:8d:20:f3:f5:82:be:54:bd:
e5:ed:7e:b2:0d:7b:1b:20:b7:18:04:f7:ee:a3:d5:
b0:a4:b1:80:ef:13:3c:cb:cd:c2:b5:e9:4b:a8:64:
2c:3c:7d:6a:24:b0:e2:04:0b:41:5d:ef:21:51:a1:
24:4f:22:7c:b9:fc:2e:66:fc:65:07:0a:62:ac:ce:
26:9d:8c:8c:c2:3f:c4:bf:29:28:60:15:57:22:60:
f4:9f:31:53:17:4b:a6:c0:bd:ce:c0:57:d4:22:78:
f0:ce:b7:e4:7f:9f:58:9d:82:ca:de:2e:e0:4b:f3:
00:89:dd:4e:a1:b9:a1:7d:08:5e:d2:87:82:63:da:
36:de:70:31:04:5f:07:b0:d6:8a:90:64:6c:f6:4a:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:12:6A:9B:DE:55:0D:5E:B8:84:E9:18:20:6D:A2:0E:F6:5D:4E:FB
X509v3 Authority Key Identifier:
keyid:98:71:AC:7F:02:33:A1:0D:2C:A7:AA:19:BA:C4:B4:97:6D:F3:D6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHGsfwIzoQ0sp6oZusS0l23z1rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c4:e8:34:48:76:d8:a3:e4:fd:5a:10:c3:cc:d4:1a:1d:c8:
45:a7:fc:0b:4e:f4:76:b6:15:3a:5d:a7:cc:b8:87:38:1f:b5:
c9:7d:93:8d:73:cd:01:15:4d:3f:fc:e6:df:2f:93:08:f0:59:
03:ec:64:47:94:9f:b5:b5:fc:85:1b:f4:0d:d4:a8:0b:8f:94:
f0:49:82:1e:72:73:c1:f7:36:fd:68:b9:57:42:e7:6c:b0:dc:
74:d0:8f:c4:60:f3:9c:ef:88:d2:6e:67:26:16:18:e2:b6:00:
91:c3:70:3e:34:a0:38:c8:7a:13:78:09:21:e4:7f:f8:91:a5:
bc:21:ce:a8:a4:e5:55:f5:b9:e8:73:17:82:21:42:92:57:19:
a3:96:de:d3:69:36:3a:d1:7d:e9:17:61:fe:1d:09:f7:72:10:
ac:70:6e:6d:d2:e2:71:79:35:16:69:45:d3:0a:77:9e:cd:c3:
b8:50:3a:97:89:40:74:e0:40:c8:e2:30:d3:1b:be:4f:c0:db:
01:28:8e:5e:7b:d6:b0:f9:92:77:a3:58:c8:c2:9a:cf:e5:20:
7b:b5:db:1c:db:22:3a:6b:a7:08:b4:02:89:d2:49:1c:0b:b1:
00:94:b9:67:47:62:2e:f6:0e:f1:12:b7:2d:72:8a:a4:ac:5d:
85:1f:d7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:13:45 2026 by rpki-client