Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: kmiCzM8eqXFN8q1wHKAkAQ8mE+exXef73JFW0DF4sP8=
Subject key identifier: 1D:80:70:35:CF:44:EC:43:73:48:39:D3:12:FC:A3:51:11:6A:EF:04
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 01A08A551CE734E58AA1E7B124541AC060F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 08:00:28 +0000
Manifest this update: Thu 10 Sep 2026 08:00:28 +0000
Manifest next update: Fri 11 Sep 2026 08:00:28 +0000
Files and hashes: 1: YeKyHo-fPzS0PXLTVc_ZhuOAnDE.roa (hash: JasqN/dFTwUl8qybymMvb6Z/5LOD9789U3Jts0vT2yw=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: 1HXxX/JnUU8M3aKMSgcvrnlZQEo+MW4c/au5lsjnCak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:1c:e7:34:e5:8a:a1:e7:b1:24:54:1a:c0:60:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Sep 10 08:00:28 2026 GMT
Not After : Sep 11 08:00:28 2026 GMT
Subject: CN=1d807035cf44ec43734839d312fca351116aef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:3a:64:ee:68:6c:d2:d1:89:2f:86:8c:30:
9d:95:bf:48:65:b7:88:c7:64:cd:20:ae:99:dd:fe:
74:a3:7b:91:f1:3e:1b:3e:72:ce:39:58:b4:1d:ce:
7f:40:ad:49:d5:82:0e:86:a1:13:19:fb:b8:22:a3:
0f:1b:32:69:f6:e9:d5:71:57:6a:a6:12:fb:aa:b7:
cb:43:5b:60:c5:09:e5:8d:28:cf:91:39:24:4a:bd:
1a:36:c0:4a:8b:0e:39:f8:16:17:6b:29:61:a0:f3:
02:73:4c:dc:a2:fc:51:c6:9f:cd:d9:f7:49:97:a1:
a7:72:c4:68:ca:19:fb:68:ea:15:9a:ed:9b:1e:9e:
e6:08:ca:f5:87:db:a2:ef:14:5d:6c:c3:65:38:e6:
fb:4a:ef:52:51:d0:90:8f:e3:5e:cf:de:47:4c:43:
c2:79:e6:b9:22:df:80:15:2b:ef:08:0e:07:cb:80:
ad:0f:c3:69:b2:04:4c:b8:45:89:ee:ac:6c:34:93:
30:18:f6:5c:a4:5d:75:59:58:5a:63:4b:a0:58:5b:
1b:d3:2e:5b:12:f7:5d:9d:37:f0:13:45:5f:cc:10:
e4:4c:7e:50:d8:18:7a:92:92:cf:90:55:62:6e:04:
87:a6:6b:12:df:7c:02:81:92:03:13:60:4b:79:bb:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:80:70:35:CF:44:EC:43:73:48:39:D3:12:FC:A3:51:11:6A:EF:04
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:67:a2:ce:37:50:3b:e5:85:6b:cc:95:b7:f5:43:77:88:a9:
b5:c9:53:38:9e:eb:80:45:41:d6:9c:0e:62:9f:f9:9a:5a:ad:
0d:d4:ae:58:da:32:79:99:df:53:b6:f7:62:2b:68:d4:de:0e:
2e:1b:20:59:e1:17:ff:7f:e2:79:9b:16:49:a6:68:f3:b9:c5:
32:f1:18:b8:38:9e:b3:c0:f7:69:15:2a:64:93:5e:21:c1:6c:
10:72:cc:fb:d6:ac:6d:e0:e9:6c:ad:79:67:d0:58:ed:cc:23:
4c:69:76:a3:48:01:17:2b:45:7f:4a:da:e8:95:5f:86:04:0c:
db:50:5a:3c:74:7b:5b:0c:eb:2d:54:6b:26:88:da:32:97:59:
a4:0b:d9:56:88:f2:ee:59:bb:b1:48:5f:6c:37:07:0c:89:9d:
70:ed:3e:e3:9a:48:02:f7:21:bc:69:11:3a:2c:88:86:f2:b8:
90:91:a6:77:71:59:00:53:70:a6:27:37:56:fa:00:3a:d6:04:
4b:cd:19:a9:57:16:87:8d:32:c9:e1:ac:cc:d6:90:01:d0:67:
3e:b6:d3:de:63:43:4c:14:cb:10:bd:3a:07:d6:67:68:f8:56:
9f:31:09:c4:49:87:f6:cd:7e:89:fa:ec:c5:e5:67:06:83:20:
39:f6:5d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:45:59 2026 by rpki-client