Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: tI2c9xDALKpA/qtYFZ4v3e9Vbmb2ThR4zGKYa6s22uo=
Subject key identifier: C4:9D:94:A6:6D:E4:9B:55:9F:D0:63:89:72:64:1F:50:82:83:CB:5D
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 019FA0A8C2B15EB3D80E5AB7B0397D6144D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 23:00:42 +0000
Manifest this update: Sun 26 Jul 2026 23:00:42 +0000
Manifest next update: Mon 27 Jul 2026 23:00:42 +0000
Files and hashes: 1: YeKyHo-fPzS0PXLTVc_ZhuOAnDE.roa (hash: JasqN/dFTwUl8qybymMvb6Z/5LOD9789U3Jts0vT2yw=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: A/ggspI7flZLCnm21m68qY/iyyIcYrltvOAl45ZglsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:c2:b1:5e:b3:d8:0e:5a:b7:b0:39:7d:61:44:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Jul 26 23:00:42 2026 GMT
Not After : Jul 27 23:00:42 2026 GMT
Subject: CN=c49d94a66de49b559fd0638972641f508283cb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:73:1b:9e:be:10:de:7d:59:b9:5f:f0:93:
f5:79:62:5e:a2:6a:e5:ed:f6:78:62:af:48:0c:8a:
48:a6:03:2d:d4:81:81:ec:9f:bd:0d:d3:42:98:f7:
ca:26:f1:d9:49:c0:87:95:5a:c0:6b:74:a4:27:90:
c4:f3:96:1b:51:59:2d:8e:a3:1d:77:01:3a:db:98:
13:c8:52:42:c1:f7:b3:53:3f:9c:c6:c5:b1:4c:52:
2e:30:09:f4:06:e0:13:a5:72:a3:7e:5a:d9:63:72:
fa:37:fc:eb:c6:b0:b4:d8:e9:be:fd:97:a7:5c:37:
5d:a3:dc:b2:d6:7a:16:34:00:29:ed:7b:de:4e:cd:
4b:de:0f:bb:8a:d8:44:51:d6:6b:5b:cf:82:dd:7a:
51:65:06:22:fa:76:a5:0c:72:96:e6:5a:ae:60:8d:
ba:ae:79:b3:b6:c2:15:eb:09:01:d5:70:fd:4e:0c:
f0:48:26:09:24:c4:a3:59:36:82:fa:96:e4:bb:3b:
89:4f:74:b0:1b:97:ad:2e:2c:5d:9d:ad:79:92:c4:
d7:e9:cb:0c:ab:53:70:8c:6f:82:60:1a:df:34:9b:
c3:5e:7b:be:e2:0a:4b:c5:dc:1f:90:b3:7f:32:78:
94:72:d6:09:b3:f9:d4:e9:63:06:cf:b9:a5:3c:d5:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9D:94:A6:6D:E4:9B:55:9F:D0:63:89:72:64:1F:50:82:83:CB:5D
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:98:fa:10:02:59:56:85:11:75:a5:ce:7e:f6:92:c3:2b:41:
d6:95:af:95:59:41:d1:04:b4:34:11:19:25:21:86:51:de:fc:
71:f7:f3:d4:84:ea:d5:19:e5:73:d4:df:07:5b:de:5a:bc:8e:
5c:96:e4:50:f2:73:35:85:35:f5:4c:e1:c5:44:19:a4:75:d4:
2f:49:09:53:af:d8:54:5a:4d:29:90:92:48:cc:be:b1:bb:b3:
6f:66:74:1b:9d:0d:0b:e7:06:dc:63:62:13:40:55:27:b3:3b:
d4:4c:6b:f8:e4:3d:7f:52:35:51:95:cf:7f:c6:e7:f1:e8:7b:
d6:91:fb:27:ac:72:7e:16:0e:70:15:75:2a:90:69:e8:77:19:
6a:80:ac:91:b4:37:61:5a:bd:b2:fa:f5:de:5f:eb:40:3a:4b:
90:a3:52:dc:cd:c7:a0:9b:9b:cf:df:e8:ca:a3:5a:3e:df:2a:
68:d7:15:62:c5:17:f4:c8:77:34:58:65:74:fc:a2:bd:1a:4b:
ef:9b:18:d7:86:dd:61:6c:79:6c:b7:e0:d9:ef:23:e7:31:8d:
a1:68:56:de:e7:49:8f:d8:62:4a:b3:27:b0:70:da:c0:5b:e5:
ce:41:c5:9c:7e:08:46:64:1c:78:65:01:ed:92:31:88:40:34:
40:91:da:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:05:32 2026 by rpki-client