Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: Tmlx1xkCOhKFSoDD2vfOhvfu0QiUeNaSOtX+/biLbIo=
Subject key identifier: FA:60:CC:98:09:AD:94:1E:0A:49:01:0D:66:97:52:7F:CF:63:A3:F0
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 01A0C256B4C6FAF180EAAD0954CA3164E952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 1446
Signing time: Mon 21 Sep 2026 05:00:57 +0000
Manifest this update: Mon 21 Sep 2026 05:00:57 +0000
Manifest next update: Tue 22 Sep 2026 05:00:57 +0000
Files and hashes: 1: NrA991AGhswKHoCiVV7wuFGnlL4.asa (hash: U1LKdoZrRBxa/FCyy+LusNc8waRRDWwz6HuAWeQTgYo=)
2: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: i8x23rRuPkomv/ZLHNP2LLT6bnaOAJSbSPxPE8yIEh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:b4:c6:fa:f1:80:ea:ad:09:54:ca:31:64:e9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Sep 21 05:00:57 2026 GMT
Not After : Sep 22 05:00:57 2026 GMT
Subject: CN=fa60cc9809ad941e0a49010d6697527fcf63a3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f6:01:9b:5c:f8:1e:f8:f2:1d:cd:b5:e2:2b:
a9:1e:36:19:15:3c:0b:69:17:ff:a8:d7:22:5f:87:
96:07:70:03:a8:a9:cb:81:95:47:49:59:69:9a:6d:
8a:14:0c:1e:94:40:c9:94:83:b2:46:a5:62:1e:99:
6d:bb:ea:e8:3b:13:6b:54:c9:9d:2a:1a:25:0d:14:
c7:6b:3a:16:fe:9c:a9:50:34:1f:05:74:e4:94:95:
45:5e:aa:28:9f:54:c4:e3:9b:1c:ea:e2:32:8d:ea:
02:bb:a7:67:6e:a4:88:59:93:35:82:92:f5:e7:24:
17:c3:ec:e7:78:e6:1a:cb:a3:29:61:68:a1:cd:11:
93:2b:e0:74:36:6d:43:e7:61:9f:10:65:b5:69:58:
2e:32:0b:7a:87:a9:e2:08:7e:ad:bc:28:ef:06:9b:
99:b5:77:05:a5:2c:9d:b7:4d:cb:ed:0f:f4:d3:66:
c7:95:57:f7:13:68:bb:29:96:4d:e7:10:52:45:3a:
ee:79:8b:2a:bc:4d:9a:f8:a6:e2:da:fe:5b:98:0c:
1c:96:57:8c:83:fb:1a:0e:e3:ae:42:75:84:6d:e5:
a8:d7:d5:89:d7:fc:ec:f7:b1:ca:19:dd:af:d1:47:
0e:bd:d7:08:70:a5:ef:b3:02:8a:b0:a0:4e:83:ec:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:60:CC:98:09:AD:94:1E:0A:49:01:0D:66:97:52:7F:CF:63:A3:F0
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:25:24:2b:94:e3:20:f0:ff:f1:09:2c:4c:ed:63:7e:a7:2b:
9f:3c:2a:a2:b9:82:53:a2:3e:e6:5b:d1:f5:4a:cd:5d:3e:0d:
61:31:59:1a:0f:e0:af:fc:37:bc:cf:43:42:6e:5c:d6:78:8e:
2c:3d:3f:fa:fd:bc:09:30:31:72:d6:bf:1c:c6:ba:7d:4a:1e:
f7:30:0e:04:a4:b0:7b:33:ce:a1:c2:1a:97:b1:9f:20:c7:6f:
ee:c8:09:e6:0d:f0:be:ea:75:f6:f0:3e:34:0e:b4:55:2d:d8:
f7:25:df:8e:95:7c:46:45:1f:a2:4e:29:0c:11:39:70:8f:0f:
a7:39:02:ca:25:0a:e5:d2:e2:bc:68:0f:9e:57:c3:04:97:0e:
9b:46:19:ea:e7:57:7e:b3:87:68:da:40:6d:2b:10:e3:7a:59:
9d:b2:05:8c:08:46:9a:88:83:04:56:59:b7:cf:94:2d:9f:35:
02:6a:65:3d:f8:32:a9:30:05:88:4b:69:68:11:91:51:aa:9c:
b0:da:0c:5e:2a:ed:7a:63:08:7c:cb:29:ee:ca:11:d6:87:86:
d2:d6:9c:87:c4:64:30:28:e0:ff:52:70:38:74:f2:b7:d3:92:
49:cb:f1:22:dd:89:38:83:be:90:48:e5:5e:23:02:ac:09:de:
a2:68:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:33:04 2026 by rpki-client