Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: +Ca/SCpXOlCmpNI/eTLWJgUCtkgP5Wpcgc7JhvintXg=
Subject key identifier: 49:8D:2F:46:5B:1E:A6:8A:C8:C7:C5:F8:5D:E2:48:C9:AD:0E:F7:62
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 01A0C3D73BB8F55BD65ADEDB4AEBAE3A6360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 12:00:57 +0000
Manifest this update: Mon 21 Sep 2026 12:00:57 +0000
Manifest next update: Tue 22 Sep 2026 12:00:57 +0000
Files and hashes: 1: 13v4LR-kEjAIRzbDQkbfPRC2xqA.roa (hash: I9za9QTYUmGMdQFI8DmW9yvA4iSaksBWoeOdAw7Bnjc=)
2: Xwng2aOLLOOXGJWWCrEGpFiiseE.roa (hash: 6yqVFWixLzqYnXIf35RXEXUfb95qxNvK5438TeN6PcA=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: 4fjtoUC2yoQhZvbbyuFq0OSKZMWlowwnKJAYRLv2QXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:3b:b8:f5:5b:d6:5a:de:db:4a:eb:ae:3a:63:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Sep 21 12:00:57 2026 GMT
Not After : Sep 22 12:00:57 2026 GMT
Subject: CN=498d2f465b1ea68ac8c7c5f85de248c9ad0ef762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:35:6b:ef:c7:0b:ef:63:fb:e7:c3:5d:c3:
9c:9e:e0:c7:91:44:f2:de:74:37:62:06:f0:fe:5b:
5d:51:4c:a3:e0:81:a5:d9:64:17:39:06:4a:de:4c:
1c:96:d5:16:08:82:2d:26:b4:9d:48:09:4e:09:14:
29:32:a6:8b:11:4c:80:8f:c8:94:6d:61:6e:dd:bc:
34:26:ff:7e:4a:4f:01:10:46:14:71:b7:20:17:f8:
2e:e1:b3:0d:43:02:c0:0a:5d:73:7b:fd:d1:50:51:
cb:21:40:a9:bc:a6:51:54:19:cf:46:f6:96:4b:a7:
66:e4:6f:67:53:51:f2:6d:09:0f:d5:b3:f0:d5:9f:
87:ce:be:6b:1a:e7:06:09:61:2d:07:53:4b:04:61:
7b:9d:cd:7d:c0:fd:e3:f7:2d:f2:1d:f1:d3:f1:63:
57:18:b5:b2:dd:78:fc:01:55:ec:55:f6:60:6a:22:
29:03:c7:b2:b4:24:ea:69:fd:5e:41:f3:25:4e:a2:
cc:58:20:31:02:14:dd:1b:ec:b8:e3:fa:c4:e2:2a:
90:db:9f:bb:aa:c5:09:88:78:5b:a0:b7:42:29:6a:
d0:20:02:35:9d:e1:72:6d:48:9f:18:1c:63:c1:06:
e6:08:96:30:62:b9:86:af:84:02:c1:86:51:5a:37:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8D:2F:46:5B:1E:A6:8A:C8:C7:C5:F8:5D:E2:48:C9:AD:0E:F7:62
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8b:61:c0:89:ed:57:cd:54:ad:65:9b:e3:97:1f:e3:10:97:
85:ea:98:ce:06:90:07:db:6e:f1:c9:78:1e:09:3d:1c:8f:a8:
e4:99:d0:e8:7d:89:bc:c8:0a:e0:d0:6d:24:4e:53:5f:95:8d:
9f:78:da:97:34:3f:fd:2f:7f:ac:3c:99:d4:96:13:a5:68:93:
6a:12:a0:91:25:1b:9f:76:22:2c:c1:b6:64:52:be:aa:09:93:
47:11:56:fa:8f:d2:7e:ec:60:9b:f7:1c:c6:00:07:25:b6:4c:
51:e5:1a:c6:6c:3b:d1:40:f2:75:58:b2:a1:b4:e7:95:57:45:
a1:1b:88:ed:54:67:80:84:8f:bd:fb:f5:d8:8d:59:19:06:b9:
d4:03:6e:14:0b:5e:d5:26:70:7c:8f:79:d2:a2:04:b5:43:dc:
87:b8:16:19:7d:54:45:cf:ee:d1:1c:ef:ae:22:0d:c6:a5:d4:
79:d5:94:1c:4a:14:21:21:97:3f:7d:e2:ad:c0:36:7c:92:cc:
ba:f3:7d:32:70:24:8b:34:2d:7a:50:8a:86:26:62:f9:0a:b3:
b7:54:cd:36:96:2d:51:2d:66:8a:17:b9:3b:44:a4:a2:f0:83:
98:1a:5b:bd:ca:ab:58:32:cd:9e:52:bc:c2:be:fc:4a:75:bc:
2b:12:cd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:52:10 2026 by rpki-client