Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: Q3jhEX1y5t8ZU6aimjlDuMudOt4TlRSVl9VpI8h0Y8o=
Subject key identifier: 5C:BD:29:DA:A6:46:5D:62:5A:39:D4:28:AA:08:F5:BE:19:77:E8:9C
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 01A17BBAE55A1D35B6E7732ADD281F2C03CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 05:00:08 +0000
Manifest this update: Tue 27 Oct 2026 05:00:08 +0000
Manifest next update: Wed 28 Oct 2026 05:00:08 +0000
Files and hashes: 1: YeKyHo-fPzS0PXLTVc_ZhuOAnDE.roa (hash: JasqN/dFTwUl8qybymMvb6Z/5LOD9789U3Jts0vT2yw=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: x7lZ9UxNVZYgzS7WzFSm/LYKGr32KYtdX0qzJkoBfZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:ba:e5:5a:1d:35:b6:e7:73:2a:dd:28:1f:2c:03:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Oct 27 05:00:08 2026 GMT
Not After : Oct 28 05:00:08 2026 GMT
Subject: CN=5cbd29daa6465d625a39d428aa08f5be1977e89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:69:f5:fd:31:14:02:97:31:ee:21:f0:ee:
a2:71:e5:dd:4f:ca:d2:c7:bb:25:8a:4b:cd:4d:8d:
7a:43:50:38:88:1c:cb:1a:94:e6:4f:9e:c4:28:42:
d7:b2:27:c1:f7:d3:87:fc:0b:25:2b:b3:d7:cc:60:
40:00:dd:31:95:fe:59:a6:4c:4a:c1:c8:ca:b5:6a:
e6:ca:dd:96:3a:96:eb:ad:88:ae:17:07:2c:1b:de:
7f:84:ba:63:d2:3d:21:dc:5e:e0:19:c0:bb:c2:e7:
79:a9:ad:2e:49:59:da:a3:d7:cc:32:68:74:31:3b:
79:c0:16:02:7a:d5:6a:e0:53:8a:3b:d9:13:16:ce:
cc:ea:79:09:78:41:2f:74:f4:58:d5:9a:5c:8d:39:
ba:fe:b6:3f:ea:db:bd:bd:13:c2:02:70:26:ee:2c:
ed:98:5e:91:d5:68:7f:65:e4:17:d2:c4:3d:a3:bb:
23:b6:3e:ce:c7:ba:ed:eb:71:21:79:c4:aa:f3:2c:
fc:f2:49:fe:78:2f:71:85:74:a7:6c:c5:29:60:cf:
e3:a6:8f:8d:14:6e:79:d2:85:47:66:85:ae:4a:85:
a6:92:7b:c1:53:9a:e7:e1:db:15:29:d5:7e:e1:c6:
e9:03:f1:55:4b:98:66:44:41:94:c0:d7:d4:65:97:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BD:29:DA:A6:46:5D:62:5A:39:D4:28:AA:08:F5:BE:19:77:E8:9C
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:79:4a:89:00:76:c7:26:d4:78:f2:62:dd:dc:f4:f5:b5:e7:
f8:c6:47:48:77:39:7e:93:9c:30:69:27:a7:23:af:d8:27:62:
f7:2d:66:5f:ad:17:97:6a:d1:f0:77:f1:55:29:72:3a:8f:e4:
14:fa:2a:c4:8e:9f:ae:b9:38:0c:68:05:ac:63:aa:c4:a5:b5:
0f:9c:18:d1:29:17:f6:e1:86:f4:c0:b3:66:23:18:2a:65:56:
28:7a:e2:2e:85:00:ea:12:ec:58:07:0a:85:a0:9d:02:19:dc:
5b:a3:ba:fc:aa:05:8b:4b:40:08:0f:3c:85:2b:d6:13:a9:9a:
48:00:2f:d9:48:b8:c7:af:bf:ba:fd:5e:33:58:32:93:d4:ee:
21:1b:35:54:84:46:e8:81:b3:7b:3a:d1:24:35:2b:00:5b:d0:
4a:e6:73:f8:76:89:02:91:ba:55:d5:c3:45:17:45:03:62:e2:
b2:7e:c1:82:bc:3c:ff:d2:17:ed:b2:f0:ba:39:b2:af:9d:f9:
f8:c4:6c:c4:1a:5f:8a:a8:ca:af:8b:d2:9f:eb:cf:c2:a8:85:
26:a3:32:1a:43:f3:61:50:8d:f2:d2:c1:05:e4:db:16:61:33:
e2:01:90:77:04:27:cb:a9:53:c9:ea:a8:1c:d9:26:74:f3:72:
b3:59:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:39:34 2026 by rpki-client