Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: 7sFFJRRshJ/ocnGf5XR8C17VS9oqYm5fmUTIYgQvAew=
Subject key identifier: 61:55:99:C8:9B:F3:D4:46:DE:8C:2C:75:81:B8:3E:36:D4:54:10:2E
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 01A17F98AEEA1C00376C429192ACB393325F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 23:01:14 +0000
Manifest this update: Tue 27 Oct 2026 23:01:14 +0000
Manifest next update: Wed 28 Oct 2026 23:01:14 +0000
Files and hashes: 1: YeKyHo-fPzS0PXLTVc_ZhuOAnDE.roa (hash: JasqN/dFTwUl8qybymMvb6Z/5LOD9789U3Jts0vT2yw=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: /6Dfz2WQzjcXkHCJNX+QtZ0IMDJzjPZwwmW0CIBDovY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:ae:ea:1c:00:37:6c:42:91:92:ac:b3:93:32:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Oct 27 23:01:14 2026 GMT
Not After : Oct 28 23:01:14 2026 GMT
Subject: CN=615599c89bf3d446de8c2c7581b83e36d454102e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:c2:e1:49:2a:a3:72:0e:7f:fb:88:cd:73:
76:a1:6b:66:f1:46:07:9c:be:e5:e7:60:f8:5f:ee:
cc:f5:98:fd:4d:d9:89:b2:e0:02:fa:77:1e:de:42:
32:69:f3:52:42:57:ac:b2:cd:98:6f:dd:16:24:bb:
17:8c:11:69:be:b0:4c:e0:3d:fa:97:3b:d7:5b:e6:
e9:f8:89:bd:3e:8b:9f:b4:c1:21:83:c4:f3:63:e1:
b7:43:24:7b:f9:5d:33:d6:5e:bd:94:38:ea:0b:56:
87:c1:76:5d:01:5c:2b:d8:6b:38:0c:f0:f6:05:4f:
ac:d1:a9:34:f1:d0:08:db:63:d2:28:97:96:1f:f3:
c5:a5:2f:8f:3f:9c:57:2b:8d:44:dd:fd:61:0b:f4:
2b:77:52:49:7a:0f:bc:3f:db:ce:69:d0:ac:0a:3a:
58:53:a3:d3:92:62:bc:ff:37:7a:16:8e:eb:90:d6:
a3:33:d8:6a:f5:ff:4c:3d:0e:78:04:68:97:46:71:
1a:49:e0:a8:5a:12:7f:84:7e:9b:96:0e:20:a0:62:
52:e5:ba:f0:bd:0e:53:70:5b:dd:80:ca:f1:5b:1a:
54:00:9a:5c:92:da:a9:8a:f3:1d:6c:f5:80:1f:4b:
89:0d:27:16:c8:3f:78:9e:02:88:0f:cc:29:4d:3e:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:55:99:C8:9B:F3:D4:46:DE:8C:2C:75:81:B8:3E:36:D4:54:10:2E
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4b:8d:70:ba:fc:75:5c:e4:6c:95:3f:83:df:6e:c9:40:32:
d8:90:ae:f9:da:6f:46:a8:20:56:7b:d6:61:62:e4:3b:cb:c9:
7d:57:18:31:17:44:62:e6:fe:20:76:16:e8:4e:76:5d:de:4b:
a4:cd:9d:30:68:86:55:45:d1:5c:70:67:e5:43:b8:34:0d:41:
91:6e:f2:98:5e:12:1e:8f:86:e8:a9:e8:26:53:9a:ee:ca:d1:
f8:4f:ed:e4:f9:46:e2:93:38:3c:fd:4b:6b:69:9f:7a:be:60:
36:73:21:19:95:9a:39:ce:6c:6e:e1:42:6b:e5:3e:ce:7d:74:
99:aa:26:78:35:3b:8d:b5:3c:ff:80:88:fc:26:4a:93:5f:1f:
9f:28:4e:6f:e8:ab:0e:61:d5:d8:65:85:3e:0d:29:6b:67:b0:
1e:6a:36:ee:e8:39:59:77:a0:65:20:5c:80:cb:ea:c6:28:73:
14:d2:60:5e:23:e3:46:b0:07:93:c9:8e:a0:4a:f2:01:35:ee:
cc:85:26:32:1a:1d:34:26:6e:17:c0:28:49:bd:70:02:4b:62:
2e:ee:7a:e9:79:0f:86:99:be:4a:be:ff:22:d5:9b:2a:8b:be:
f8:b4:75:6b:e0:4d:f8:51:28:91:8b:64:6f:5c:ad:76:49:bf:
e2:a4:24:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:19:12 2026 by rpki-client