
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft
File: mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft (raw, json)
Hash identifier: fUyHZms53kZ9daMg2LvZMFbId3+rPhMsvHJF2Z2tkgk=
Subject key identifier: 5E:A9:3C:91:4C:FC:5A:FD:3F:BD:7D:4D:EC:B6:37:7D:F3:DD:45:C0
Authority key identifier: 98:64:3C:05:7D:17:32:7F:A5:0E:AE:84:3C:B1:E5:15:B3:45:F9:5B
Certificate issuer: /CN=98643c057d17327fa50eae843cb1e515b345f95b
Certificate serial: 01A1DE709F37DAEC4E4FF870373EF7B8433A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft
Manifest number: 0145
Signing time: Sun 15 Nov 2026 09:01:25 +0000
Manifest this update: Sun 15 Nov 2026 09:01:25 +0000
Manifest next update: Mon 16 Nov 2026 09:01:25 +0000
Files and hashes: 1: 1-kM5KqcC9VyVZ5Ukf_g6-Xm-gJk.roa (hash: /SUjSByO6AN75w/G3XvsE4eAt4OoOvQyQ6z6+Bw5tsM=)
2: ZHOt8zTvXZ9SCoIfe5yDvNXaa-0.roa (hash: Jxj7H6OLf2tiyA5sXzfKtVGYC3MNNjaeFtZ9C9y9BKQ=)
3: mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.crl (hash: /iG85EyWwEFgXDF05lHW6MLlcbxvUY3P5Udz9iodZFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:9f:37:da:ec:4e:4f:f8:70:37:3e:f7:b8:43:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98643c057d17327fa50eae843cb1e515b345f95b
Validity
Not Before: Nov 15 09:01:25 2026 GMT
Not After : Nov 16 09:01:25 2026 GMT
Subject: CN=5ea93c914cfc5afd3fbd7d4decb6377df3dd45c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:63:c0:5d:c0:e9:7e:92:df:cc:2c:86:1d:56:
fe:d7:98:83:1b:3c:4f:5e:b4:20:4d:14:3e:a8:da:
a6:ab:f9:91:64:01:49:8a:00:00:98:fc:ab:e7:12:
be:26:87:08:9e:d9:c5:08:7f:cf:22:61:7e:c2:31:
15:db:f4:d2:a6:9b:5d:af:08:8b:19:ca:d0:08:75:
5e:4c:fb:4b:6d:61:9b:38:6b:37:4d:b5:31:1e:2d:
f3:d4:1a:75:7a:14:ce:42:6b:5c:03:d3:f3:7f:a8:
ac:ab:0d:fc:6c:4e:14:9c:36:d8:fa:5e:ed:cb:49:
49:f8:f9:3e:e4:6a:bd:85:77:79:13:3b:d4:17:33:
27:cc:3a:bd:14:04:6e:03:3f:8a:5c:61:4b:81:35:
a4:96:b6:c0:db:c5:70:28:65:1c:18:81:b1:25:5b:
eb:f7:75:ad:8f:c8:15:71:9c:33:db:2a:8d:b8:48:
d6:66:f5:65:5b:c4:17:76:0a:10:93:d8:59:c9:d0:
b8:90:6f:ff:0e:9f:97:bc:0d:6f:89:f3:8c:28:83:
f9:23:b8:99:52:5b:82:d8:e7:a8:c7:f5:cd:10:32:
9b:d3:56:90:90:62:59:a9:34:7e:ff:55:b1:a8:88:
bd:43:61:a1:1c:dc:9c:f2:23:97:b5:9b:37:10:99:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A9:3C:91:4C:FC:5A:FD:3F:BD:7D:4D:EC:B6:37:7D:F3:DD:45:C0
X509v3 Authority Key Identifier:
keyid:98:64:3C:05:7D:17:32:7F:A5:0E:AE:84:3C:B1:E5:15:B3:45:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ef:a3:2c:84:14:3a:6f:0f:93:8f:fb:f3:d6:fa:10:66:8a:
c6:95:2a:b1:b3:bb:f1:25:c9:d8:42:47:cb:20:92:9f:e9:57:
08:1f:79:0e:2d:35:5c:23:92:37:45:c0:2f:1f:93:88:83:3d:
07:82:2f:6d:48:1f:13:6e:cb:06:d2:c7:a9:d9:45:1a:72:4f:
e3:e8:a9:da:59:82:a2:82:0e:0a:06:2f:c2:b6:13:28:d4:de:
6b:92:ab:c9:1f:b3:2a:10:3d:b4:5e:5a:b4:fd:0c:c8:f2:f0:
32:de:10:d5:2b:c9:a4:dd:79:17:02:61:98:dd:d2:8d:b3:09:
63:77:c8:57:cf:4d:82:11:8d:92:94:ed:da:a8:3c:b6:1c:82:
8f:c9:2a:83:fe:e6:ab:29:aa:f9:b3:58:d3:4a:fb:0a:06:9e:
b9:4f:1d:53:4c:fe:5f:8f:8e:49:19:f5:48:c5:1f:8e:e4:51:
59:3a:96:f3:c2:d9:84:ba:b1:18:51:61:76:8c:bc:2c:ef:10:
74:6f:6d:86:32:19:31:1f:db:be:5e:a4:7e:5f:f6:40:2a:bb:
b4:19:30:f4:c9:f8:8b:7e:ec:fa:7e:74:30:51:bd:d5:c1:57:
3c:59:5e:6f:dc:db:a0:8d:a3:07:46:01:57:e9:e7:ea:79:4d:
63:aa:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:52:00 2026 by rpki-client