Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.mft
File: mNzlp5yzGxSLLmNpBacEIvtlxmA.mft (raw, json)
Hash identifier: mahUwv1mj9EGsXIUINjEj/91mzPcjZOWyVUjPG40aHY=
Subject key identifier: 95:A4:8D:A8:73:17:9D:5B:FE:86:92:33:A7:3A:5A:95:3A:BE:B3:77
Authority key identifier: 98:DC:E5:A7:9C:B3:1B:14:8B:2E:63:69:05:A7:04:22:FB:65:C6:60
Certificate issuer: /CN=98dce5a79cb31b148b2e636905a70422fb65c660
Certificate serial: 01A0C8FCDC280DB492731E8F3449C605D84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNzlp5yzGxSLLmNpBacEIvtlxmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.mft
Manifest number: 01CE
Signing time: Tue 22 Sep 2026 12:00:09 +0000
Manifest this update: Tue 22 Sep 2026 12:00:09 +0000
Manifest next update: Wed 23 Sep 2026 12:00:09 +0000
Files and hashes: 1: HXp2yl8CcctEYFf-SbEVW8usejY.roa (hash: ICCLYm8ogyONUQBR09bvk3yeGyG9hrCQ2LhYQ/hIOY8=)
2: hYHxC4B0dRHOWGyjfwEVbtTIcWs.roa (hash: 1Ci3i823J9C8tKoo39S7ESNqkRjK60YmjMYLCng8d1g=)
3: iFoLL08Y0RSZXmxN-OjujZRiXWo.roa (hash: OvbS7GRntI/C8IuP2kjijRom3YriGFk8ZqDEFtaH/hE=)
4: mNzlp5yzGxSLLmNpBacEIvtlxmA.crl (hash: NJ7foG9X4xIGc2AdjgMT54SjxdlkrI5ffOtYpIhph30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNzlp5yzGxSLLmNpBacEIvtlxmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fc:dc:28:0d:b4:92:73:1e:8f:34:49:c6:05:d8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98dce5a79cb31b148b2e636905a70422fb65c660
Validity
Not Before: Sep 22 12:00:09 2026 GMT
Not After : Sep 23 12:00:09 2026 GMT
Subject: CN=95a48da873179d5bfe869233a73a5a953abeb377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:d1:4b:12:09:18:6a:0e:a9:d5:65:f4:81:
6a:32:c1:7e:d8:f0:7e:99:b4:c6:b7:09:c5:5b:62:
57:46:76:c9:07:35:a9:87:4d:b3:a9:6a:4e:ba:f8:
48:b7:a6:84:e2:fb:77:db:ea:d1:fb:44:21:b5:57:
40:1f:b0:ff:01:03:04:50:b0:41:ff:4e:59:2f:f4:
06:11:c8:be:02:b9:f9:62:ae:4e:d6:cd:f3:d3:2e:
3e:c0:c7:c9:eb:83:ba:7e:d0:97:aa:1c:8e:58:1f:
06:d2:79:f7:ec:4f:be:e2:cf:fc:ae:9c:1b:64:f7:
8a:03:7d:2e:42:c1:76:b1:c3:88:6d:4e:d2:2e:27:
19:10:33:47:8c:9b:f3:d1:63:33:41:68:0c:e8:0a:
08:1a:b4:23:ac:19:a6:af:8a:c8:49:7f:59:c2:f0:
40:c8:aa:cb:2f:05:2a:0f:ea:3d:2e:b1:88:49:f7:
e4:fd:00:6e:cd:2c:49:1e:b6:41:5e:2d:61:0a:62:
fa:d1:eb:d5:d1:21:24:56:ec:df:de:48:3d:a2:f0:
fa:4b:18:62:17:cf:16:d6:f4:a7:81:9b:3d:fd:e0:
39:f5:23:52:91:bf:30:70:23:93:9e:3e:20:94:72:
8c:c0:41:cd:09:b2:67:84:a7:05:32:4f:90:2d:86:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A4:8D:A8:73:17:9D:5B:FE:86:92:33:A7:3A:5A:95:3A:BE:B3:77
X509v3 Authority Key Identifier:
keyid:98:DC:E5:A7:9C:B3:1B:14:8B:2E:63:69:05:A7:04:22:FB:65:C6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNzlp5yzGxSLLmNpBacEIvtlxmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:50:78:26:69:7c:dd:32:40:1a:ec:c3:12:ab:c4:96:ce:86:
88:43:a6:cc:f8:8a:5d:50:b1:36:73:d8:52:47:ab:f4:71:e7:
6a:47:a5:1d:ca:65:25:0d:8b:bb:65:d2:56:4d:14:31:4d:69:
5c:29:89:e8:b2:02:06:55:b8:d3:dd:c3:a2:11:c3:27:6e:78:
77:81:7e:fb:70:95:00:ad:e6:59:ef:63:53:26:53:9c:27:52:
1e:43:a2:55:97:89:01:e5:db:3d:4f:47:96:3d:42:d2:51:67:
41:23:1d:9e:eb:4a:d5:22:35:a5:65:fb:86:1e:49:27:45:60:
25:a9:58:3e:70:6e:5c:85:34:64:36:6e:c3:f5:6e:c5:a8:56:
4b:06:14:be:df:c0:7b:2a:d0:08:f9:6f:f2:a5:21:12:e4:ed:
88:11:1e:46:b5:02:f3:9c:30:78:20:18:ac:0b:ed:c1:4d:1c:
48:1c:2d:92:50:8a:00:d9:3a:f4:7b:f3:74:8b:0e:33:4c:bb:
e4:c2:e9:05:9c:5e:71:c9:49:33:a1:36:cd:2d:d1:c6:6d:98:
b3:98:f9:b5:d4:9b:72:84:3c:1d:89:53:2e:07:67:19:b3:91:
eb:f8:fc:d3:39:6b:2d:9c:76:d2:3d:77:de:3f:de:35:30:4b:
22:ef:c3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:26:32 2026 by rpki-client