Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft
File: mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft (raw, json)
Hash identifier: Q5jcECfy9SqeZyqAsl/6y9FuVNmFv4X7py8QAIdBSzc=
Subject key identifier: C9:73:A9:C1:EA:3B:3D:CD:6D:A8:B0:2B:54:3E:21:63:8D:44:6F:D8
Authority key identifier: 98:64:3C:05:7D:17:32:7F:A5:0E:AE:84:3C:B1:E5:15:B3:45:F9:5B
Certificate issuer: /CN=98643c057d17327fa50eae843cb1e515b345f95b
Certificate serial: 01A0C47C8CED6663B25943B3B7010538A502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft
Manifest number: B3
Signing time: Mon 21 Sep 2026 15:01:31 +0000
Manifest this update: Mon 21 Sep 2026 15:01:31 +0000
Manifest next update: Tue 22 Sep 2026 15:01:31 +0000
Files and hashes: 1: 1-kM5KqcC9VyVZ5Ukf_g6-Xm-gJk.roa (hash: /SUjSByO6AN75w/G3XvsE4eAt4OoOvQyQ6z6+Bw5tsM=)
2: ZHOt8zTvXZ9SCoIfe5yDvNXaa-0.roa (hash: Jxj7H6OLf2tiyA5sXzfKtVGYC3MNNjaeFtZ9C9y9BKQ=)
3: mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.crl (hash: nPDyKu7QPzNplFXDrTnF7UrCCDJDGLOujLsBhtzwifw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:8c:ed:66:63:b2:59:43:b3:b7:01:05:38:a5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98643c057d17327fa50eae843cb1e515b345f95b
Validity
Not Before: Sep 21 15:01:31 2026 GMT
Not After : Sep 22 15:01:31 2026 GMT
Subject: CN=c973a9c1ea3b3dcd6da8b02b543e21638d446fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:59:a1:a5:69:8f:b2:29:8f:c5:42:09:b9:6d:
ec:16:45:2b:4a:0d:45:a0:98:47:cb:ac:87:85:9a:
c9:03:f5:05:7c:70:71:f2:35:03:77:11:b4:63:6c:
ec:8d:04:c1:9a:09:9b:a3:8b:83:e6:50:e3:55:9d:
70:76:e6:38:b0:fb:bf:ee:dd:e8:dd:6e:ff:ab:1b:
1b:df:ca:c1:c8:ac:fa:7b:31:e2:d5:29:9e:10:a7:
43:fe:97:cd:5e:c7:59:40:17:50:e3:3a:28:52:09:
20:27:6e:16:7c:43:74:41:48:7e:ee:02:a7:39:03:
c1:52:38:d6:00:3b:da:2f:7e:58:b2:35:ab:d2:a1:
c0:3c:9f:bc:c9:6e:e1:3e:d5:96:0d:98:24:5f:9d:
2b:41:78:f9:f4:2e:d6:bb:6e:b8:1e:1d:b3:53:8e:
88:65:ad:76:76:bb:05:33:67:dd:4e:31:46:9a:4f:
89:65:5e:c5:b3:e8:bf:c0:f4:db:b9:15:d7:c5:0a:
72:a1:90:a6:cb:67:bf:b9:30:0e:06:10:de:51:60:
1c:a6:cc:c1:e9:a5:f5:0d:c6:62:4a:c7:65:b9:4c:
e2:c5:82:88:ce:f0:bb:e6:b7:4f:d5:53:7b:9d:73:
e2:a4:c2:27:b1:a7:55:50:e7:97:50:2b:56:9e:b4:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:73:A9:C1:EA:3B:3D:CD:6D:A8:B0:2B:54:3E:21:63:8D:44:6F:D8
X509v3 Authority Key Identifier:
keyid:98:64:3C:05:7D:17:32:7F:A5:0E:AE:84:3C:B1:E5:15:B3:45:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e3:8d:a6:59:10:2f:b5:09:2b:23:1c:ab:63:ba:5a:d7:e2:
32:f2:62:43:8d:c1:81:f2:b8:6c:08:bc:a9:c4:85:78:16:a1:
b4:19:fb:53:7a:11:23:db:50:80:0b:4f:b1:8e:db:71:5a:19:
7c:31:50:91:99:9d:3c:57:ef:be:46:32:ca:75:07:05:12:be:
7e:31:15:78:0b:14:4b:6c:33:c8:3c:48:d0:98:7d:11:84:1a:
23:ce:50:a7:cd:30:19:fb:be:fb:75:b7:3a:5b:28:0e:30:e7:
4a:40:09:fa:c7:33:8c:5a:95:43:22:b3:cc:3e:3a:c5:8a:c4:
69:2b:4c:3c:e7:4f:67:c9:f2:86:e1:b6:fd:d4:13:7a:3f:cb:
10:9d:0c:71:18:58:5c:ec:48:24:80:07:01:55:36:6c:99:b0:
97:cc:c8:35:9c:ed:3a:b3:27:65:68:60:df:6d:8f:b9:f6:5a:
6f:9c:ff:fb:0c:19:5b:a0:27:c9:a2:f3:67:19:7d:5b:13:5a:
43:39:22:dc:1c:08:4f:5d:02:14:f6:52:48:66:93:bc:32:42:
21:9c:9d:f0:1e:07:84:16:22:d9:02:0b:0a:58:12:69:d1:d6:
e5:5d:0e:a7:98:b3:34:06:9e:fe:c0:68:97:fa:8e:13:2b:72:
5a:5b:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:30 2026 by rpki-client