Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: Kk9Q3IAzWx6IGUTGZuFJXuSTmLJ8c76DmjMH6gYkdiA=
Subject key identifier: A5:C0:DA:32:FD:21:EA:7D:F8:A9:0A:20:99:3F:5D:A8:7F:3C:30:30
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 01A1016D473B8DD123B4F8ADA0392329FECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 1A86
Signing time: Sat 03 Oct 2026 11:01:41 +0000
Manifest this update: Sat 03 Oct 2026 11:01:41 +0000
Manifest next update: Sun 04 Oct 2026 11:01:41 +0000
Files and hashes: 1: VDiwRo_Dw3VQnAnWwxslVlwLHTI.roa (hash: eyvaXZ1DgOHbc16lk8yXQEwz4POlL+tLjFw5QFZgFv4=)
2: VhZZqyHl4RcvVrDtF9S5qJYdsrI.roa (hash: 8RcjIqSIrUsAtUqmpBMu/l4viLpz4Dni8fqFOKIrXPc=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: g2K8/nNyOVdzLp+iNk1+aGAxuUPiq+oLRYRoAigA5vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:6d:47:3b:8d:d1:23:b4:f8:ad:a0:39:23:29:fe:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Oct 3 11:01:41 2026 GMT
Not After : Oct 4 11:01:41 2026 GMT
Subject: CN=a5c0da32fd21ea7df8a90a20993f5da87f3c3030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:7c:4e:f8:41:c7:fb:e8:82:42:1a:1a:1d:
66:a9:60:6f:b6:ae:a5:cc:40:ae:7e:ad:d1:ce:80:
2c:b2:bd:30:a0:79:45:22:0e:cb:39:40:a7:fb:56:
19:66:a5:39:f9:76:de:60:8f:e6:95:46:77:7c:f5:
ef:7c:cb:80:9f:07:f2:a9:56:5a:c2:49:6c:cb:da:
fb:a6:57:f8:11:09:e6:1d:84:58:29:32:f5:b0:88:
70:00:50:12:27:ae:eb:a9:3b:8a:7d:f7:57:04:78:
e6:de:0d:52:39:28:f8:de:0a:73:93:6b:89:a4:27:
ec:19:6f:43:ae:61:8c:00:50:41:e6:7c:f6:88:ba:
6b:30:a4:f3:3f:e4:63:63:7e:82:8c:18:34:5f:6b:
97:70:04:90:bd:54:1b:61:16:0c:fa:03:6b:da:21:
c1:59:65:fa:da:f8:27:f6:a7:2f:bf:8d:7e:a8:3c:
bd:ab:5e:ea:69:46:69:89:47:90:b0:85:7e:0d:5a:
ac:1d:96:8f:59:86:b5:81:60:cc:65:09:0d:46:fe:
e1:53:77:91:6d:ea:5f:2b:9d:b0:62:4b:5a:04:3f:
fc:85:b8:e3:a2:d3:7a:8f:ac:c7:88:2c:b5:e5:a6:
24:86:28:55:e1:5e:eb:16:ea:61:27:8c:67:fa:96:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C0:DA:32:FD:21:EA:7D:F8:A9:0A:20:99:3F:5D:A8:7F:3C:30:30
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:84:04:22:ec:cf:5b:a3:d5:ca:d1:01:9c:16:88:22:08:1e:
75:a3:74:fd:23:98:e1:48:bb:a2:bc:ca:ab:6e:ee:e0:eb:3b:
6b:ec:71:e6:8a:06:02:92:61:dc:a5:a8:17:c6:24:bc:8f:7c:
5a:a5:ef:ae:e4:6b:84:3f:a6:32:50:8a:9c:43:77:a2:75:c8:
42:52:28:0b:26:2a:3b:1a:ba:13:2b:20:e7:5b:8b:51:2a:31:
e4:ef:dd:08:39:1b:cb:51:fb:a0:7b:15:3a:ed:58:3a:e4:38:
aa:40:61:3f:29:47:a1:a9:5a:40:28:40:b6:19:65:ed:16:96:
a8:69:ba:be:1c:33:b2:7a:31:78:13:5a:a5:43:34:14:81:2c:
0f:b6:63:e3:a6:2a:7a:ef:3a:f3:57:6d:f3:aa:32:a9:43:b8:
fc:ce:66:51:09:09:77:0e:99:24:dc:22:19:b5:a6:df:82:3e:
1e:6d:c1:f3:0d:9e:a1:be:70:e2:53:5f:7a:79:34:b3:ab:ee:
0a:87:95:0b:7c:cf:c4:1e:3c:95:e6:24:50:20:a9:11:0a:74:
8d:c0:c0:a5:e1:3c:fb:8d:a3:d5:db:12:a7:5d:4e:ed:7d:5b:
74:05:21:08:05:0a:f5:0d:96:14:f8:db:d6:05:2b:0a:00:b7:
af:95:e3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:56:30 2026 by rpki-client