Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File: mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier: whTOZgvWhxpnlicQz7vEShLSemQbfAOLVMq2XuoShZU=
Subject key identifier: A1:A8:90:24:C1:24:F9:D0:FC:E8:4D:1D:7A:57:E6:D3:49:42:76:41
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 01A0C9D94A90DDFBAE60FB57260827F8D19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number: 1A8B
Signing time: Tue 22 Sep 2026 16:00:55 +0000
Manifest this update: Tue 22 Sep 2026 16:00:55 +0000
Manifest next update: Wed 23 Sep 2026 16:00:55 +0000
Files and hashes: 1: VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa (hash: nZT5dviNLBhgGj5zg6mzO60GRglFXHbvUdAHc/xzhdo=)
2: VGE1McKV1fObE1-qcqalIcbniqM.roa (hash: eZC03RfnlRHK+KPGMyItH5RKFEP6Dc/vQtXvyRoCh6I=)
3: m72BlK4pK3nz4quwny73cERWUUU.roa (hash: 3sQVvJAEO+cZVJVe28TC5M0aUTp2A0mSxPgJfwLQboM=)
4: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: mpKREh8N9Qvw5qBTPXAOkiPunOV7VKZlWXTNmHLDC1E=)
5: nbN6QTJFxRMXWB7BZSEIH-SMH3g.roa (hash: pyiyGBs40xwh8+LBH6NUqQq8ar9YtwxRrDXfuF15LbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:4a:90:dd:fb:ae:60:fb:57:26:08:27:f8:d1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Sep 22 16:00:55 2026 GMT
Not After : Sep 23 16:00:55 2026 GMT
Subject: CN=a1a89024c124f9d0fce84d1d7a57e6d349427641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d3:fa:4a:8b:ff:69:45:6e:ff:8c:55:bd:00:
bd:9d:d2:20:e2:73:93:b3:11:56:c4:e1:65:e0:1b:
14:2f:49:28:16:06:0d:14:1a:49:b2:f4:8d:fc:ab:
df:3d:18:a4:18:69:e4:c0:00:9e:e4:40:1c:20:62:
3d:e5:e0:39:46:2a:83:12:cb:82:94:de:4f:6e:5c:
5b:b2:ed:93:8f:62:14:70:c5:c9:c0:62:9c:1b:84:
dd:6a:d7:e5:2f:a7:a0:04:2e:4d:75:4d:51:1c:c6:
dc:09:91:3a:ba:69:02:42:be:04:06:59:7f:1a:22:
db:7b:4a:59:a3:6e:6a:43:f0:80:d9:d4:fe:10:dd:
e8:ff:18:f1:ff:a3:5d:c3:04:4e:a6:46:07:b8:95:
80:6d:55:bd:43:35:50:2b:a4:17:75:e9:68:ed:7e:
e9:de:e1:96:f9:d2:06:c7:42:02:c1:8f:6b:c4:38:
9a:c3:88:95:c2:f2:4c:fc:9d:a2:f8:80:5b:7c:3c:
3c:dc:03:a5:71:97:be:47:ec:a3:cc:93:ff:d0:9f:
c4:bf:1d:6d:a6:ac:25:4d:07:73:61:8c:6a:70:c5:
0a:e3:78:f7:f2:6c:e7:46:85:33:06:6d:16:34:a8:
75:a6:a5:55:2f:67:27:32:41:bf:0c:1c:02:3a:30:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A8:90:24:C1:24:F9:D0:FC:E8:4D:1D:7A:57:E6:D3:49:42:76:41
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ae:ee:f1:30:5e:21:ec:61:cf:51:ab:87:bc:ce:ce:21:65:
73:df:32:00:72:d4:c1:fc:63:e0:c2:51:ea:c6:dd:53:8b:4e:
40:4d:c4:da:8c:a2:04:23:44:12:11:02:02:d8:be:e8:2c:58:
90:d8:70:3e:f1:d8:cd:88:82:8d:35:9f:c1:bc:fe:a8:2d:0a:
2c:ac:a6:d2:af:8e:78:ec:72:26:01:8c:96:9b:e2:3b:a1:a4:
ec:1f:dc:e7:65:be:79:e7:7d:13:4d:d8:f3:50:57:c2:34:56:
b3:d1:43:4f:a2:05:ff:9e:77:c1:ec:6b:4d:fe:c2:87:e9:26:
9d:6b:49:29:bf:83:f8:35:3d:69:52:3d:5f:56:ea:26:9f:09:
5a:8e:60:c0:cc:81:51:47:9b:75:44:09:d8:0a:e1:a1:8c:3f:
26:53:ab:40:c7:b2:7d:0c:b7:80:d4:f6:b3:e1:67:9a:11:2a:
3f:32:7d:04:f6:2f:c4:e9:a9:33:cc:37:06:4a:23:e8:41:41:
81:41:7f:84:ed:da:9e:19:98:72:fc:0d:81:3e:74:a8:be:92:
c4:f6:26:e4:96:c7:7f:91:2c:d7:1e:10:43:2b:6a:5b:31:7a:
7a:3b:a4:19:86:50:78:fc:0e:18:ba:ec:33:e2:6d:f5:c9:a0:
de:36:f2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:27:27 2026 by rpki-client