
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
File: mJre8bGpea83LsZ1WgtUIaBncbs.mft (raw, json)
Hash identifier: IloVzSpF/B1E6+BGsfJrH1G6Ps2/KoMadm3pOgwsgQI=
Subject key identifier: 9D:6B:70:70:9A:7E:5F:68:81:B0:B6:56:19:8C:21:58:03:2A:A5:82
Authority key identifier: 98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB
Certificate issuer: /CN=989adef1b1a979af372ec6755a0b5421a06771bb
Certificate serial: 01A1212F852B09573C2E3BCF4CDEECDA7FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
Manifest number: 02A7
Signing time: Fri 09 Oct 2026 15:02:04 +0000
Manifest this update: Fri 09 Oct 2026 15:02:04 +0000
Manifest next update: Sat 10 Oct 2026 15:02:04 +0000
Files and hashes: 1: mJre8bGpea83LsZ1WgtUIaBncbs.crl (hash: McNOLCfHmR9vmR6f5GzUnDyuEwSaAZj1prCxIrt94l0=)
2: tLe7pLUB1FbsxJodBjiaylvPWqY.roa (hash: iCcIo0MXZAGo4QKL7jZTOf07lWCaTF9D6uBBNDm3oqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:85:2b:09:57:3c:2e:3b:cf:4c:de:ec:da:7f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989adef1b1a979af372ec6755a0b5421a06771bb
Validity
Not Before: Oct 9 15:02:04 2026 GMT
Not After : Oct 10 15:02:04 2026 GMT
Subject: CN=9d6b70709a7e5f6881b0b656198c2158032aa582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a4:58:1f:5b:df:6b:85:58:71:ab:26:3f:13:
9a:f3:86:59:30:60:5f:11:76:0f:b1:0c:ad:b8:99:
03:67:f9:3e:90:26:d7:77:b5:b8:b4:8d:3d:c4:68:
ec:7c:27:6a:e5:a8:3b:6f:e3:01:2c:10:1e:8e:f9:
d1:19:33:6d:75:f0:5e:ae:1e:53:9e:65:17:49:43:
ce:bd:d9:0e:82:e4:d3:c4:ac:ed:e6:96:5d:f3:07:
b9:c0:45:c1:ec:73:ca:f2:23:38:f3:ab:bd:2a:08:
15:d2:06:d1:de:73:01:7f:9b:ac:63:d9:3b:ca:4a:
88:0d:47:0d:4d:52:38:d7:a9:af:33:66:3a:e3:99:
9d:07:52:58:0d:66:d6:9d:73:a6:5d:8e:40:28:f9:
4e:f6:52:45:c4:c8:e9:14:1a:ff:fe:b6:77:cb:23:
61:3d:41:ad:fd:ac:85:00:18:14:bb:00:9e:ec:b0:
52:06:72:03:ec:45:79:41:f8:70:c9:ca:87:42:16:
69:47:d3:ef:4e:8b:e0:77:bd:76:a0:6e:03:9e:4b:
f3:25:75:9b:da:11:f2:fd:e5:1f:a8:37:7d:99:a2:
c8:7c:c5:12:1b:6c:9d:69:7c:be:83:d4:65:8d:c0:
82:83:6c:08:d2:de:d5:10:6b:6d:77:bd:63:03:c1:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6B:70:70:9A:7E:5F:68:81:B0:B6:56:19:8C:21:58:03:2A:A5:82
X509v3 Authority Key Identifier:
keyid:98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2a:e0:97:94:f0:3c:43:a0:6b:10:46:23:d3:ae:59:f0:96:
bf:81:74:29:5a:40:27:17:6f:50:52:3d:26:78:ba:c0:7d:c6:
98:ea:74:5c:0a:c9:59:2d:03:92:c2:41:7c:8b:6e:d4:e8:13:
c0:1b:8c:5b:bf:5f:e9:d8:ea:03:98:61:f1:41:d7:78:12:2d:
5d:80:de:c8:36:77:99:08:48:32:a2:8b:2a:cb:99:b1:c9:b1:
ea:d1:bc:94:7a:d4:db:28:2f:20:54:67:13:05:66:b0:b4:aa:
41:2e:11:6d:38:2f:b6:92:e3:b4:41:eb:2e:a9:b1:7c:0f:42:
0d:98:36:44:b7:8d:8c:94:d0:bc:b9:5b:cc:fe:6d:83:0b:e5:
16:01:3d:14:9b:1a:96:99:3b:99:83:47:d9:7b:c3:d3:fb:c7:
25:9d:6c:6a:7a:ec:db:e3:6d:6a:2f:92:76:e3:0f:70:5a:12:
d1:6f:bf:3c:af:f8:31:8f:f5:8d:a3:3d:dc:57:bf:42:8f:d8:
1a:61:97:95:4d:04:e1:1d:49:1c:1a:e0:72:2b:5a:a4:97:64:
4b:67:aa:e9:71:cb:08:51:af:d4:59:08:d1:30:d8:e1:9c:44:
9f:11:06:31:65:cd:e1:9a:b8:64:d8:1c:dc:98:97:0f:7c:44:
54:89:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 19:32:42 2026 by rpki-client