Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: WMIxH5C5xVTEFU8znKYRiRCvx+mu2S4zf3VUW1xJtXs=
Subject key identifier: BA:54:F2:BA:4E:4B:5F:AA:DB:98:D8:2D:F0:8A:CD:19:5A:D4:24:CE
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 01A1555391BDDDE909E331C7CC12EFC35183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 1AB2
Signing time: Mon 19 Oct 2026 18:01:42 +0000
Manifest this update: Mon 19 Oct 2026 18:01:42 +0000
Manifest next update: Tue 20 Oct 2026 18:01:42 +0000
Files and hashes: 1: iWERPsQjBjOg7P2MlEko3KqBJk4.roa (hash: r2S9jXegLTLDs5TdcDl1C/SzyFIEfCu0kDdQUZgvfsg=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: sIH/Mfvnw8D4vT/dtCxIQXducTm1DLMi1zxPg0nyjZs=)
3: tpWKu4eR85JDF7KBw26Iwlu6TT4.roa (hash: B1xUcL+NqVQqUGxQDr0OwK307/1nuKUDqaxBQpOKHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:53:91:bd:dd:e9:09:e3:31:c7:cc:12:ef:c3:51:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Oct 19 18:01:42 2026 GMT
Not After : Oct 20 18:01:42 2026 GMT
Subject: CN=ba54f2ba4e4b5faadb98d82df08acd195ad424ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:1f:18:f5:2a:1c:ca:3a:bc:04:49:23:b3:
f8:14:a5:be:b5:5e:04:39:7d:88:1e:73:cf:ed:e9:
ff:57:4b:cb:95:4d:9d:4d:cb:e0:83:ef:0c:0c:ba:
55:12:53:91:2f:b0:f9:80:01:0e:5e:28:de:ff:17:
25:4a:b6:f0:9f:5e:4e:ae:eb:c1:53:35:24:6e:3c:
e2:04:8d:c3:5e:79:e0:4b:d5:d2:71:0a:7c:e9:36:
28:93:50:5c:05:f9:6a:df:e4:58:96:0b:ce:67:84:
f5:94:80:fc:58:48:ed:4e:79:1e:15:f3:75:99:9c:
3b:bb:f1:f9:c7:44:61:db:93:9c:40:19:be:a5:e8:
52:55:3d:d2:ff:1d:54:47:6f:d1:8c:d9:13:57:5d:
00:1a:6c:d9:a1:82:c3:4c:7b:95:7f:80:58:f5:94:
96:dd:1b:e8:91:38:47:ac:d3:bd:bc:5e:ce:69:b9:
9a:78:2c:81:6f:49:86:4c:f8:21:6e:6c:e8:4d:c2:
ad:b3:a1:f7:32:f2:9d:e2:2d:96:73:58:a0:27:23:
81:fe:b7:41:9d:be:09:59:34:23:b3:9d:4d:d5:d9:
16:74:70:a0:17:50:b6:7c:56:3f:f2:d5:25:7c:43:
5d:eb:38:08:29:5b:c9:89:83:ce:c4:55:be:0e:32:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:54:F2:BA:4E:4B:5F:AA:DB:98:D8:2D:F0:8A:CD:19:5A:D4:24:CE
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7a:b4:b3:d3:b5:8a:1f:25:48:bc:ba:b5:a7:6f:67:d3:fe:
0c:c1:5f:c4:99:f9:84:a5:19:58:c8:f8:c6:b8:1f:eb:a9:6f:
d2:24:d5:8e:51:ae:1a:0e:6d:e4:19:c5:77:92:77:6a:8d:c2:
69:11:2f:a9:38:f6:cc:39:09:db:d8:71:63:e0:d3:a2:ba:50:
d6:d3:13:6f:9b:97:e4:a5:a3:fa:30:51:03:03:d5:ab:52:69:
b6:a0:74:89:be:9e:b2:b8:31:2b:8c:55:57:6b:50:19:16:ca:
3b:3c:d2:2d:2b:88:e8:eb:c9:28:84:06:1d:23:1d:96:11:2c:
9c:69:44:0d:7f:0f:58:bb:64:f2:89:2a:f0:4f:3d:b3:09:47:
b6:ce:6f:9b:6c:2a:4e:a8:eb:ff:fd:8a:ee:19:fb:b0:f5:52:
94:68:cb:03:2a:3d:1b:88:f0:ad:e8:ec:2b:23:a3:f9:bc:2e:
b9:8a:e9:39:a5:4c:a5:96:81:95:13:50:8c:c2:dc:06:24:fc:
9b:aa:dc:c5:7c:96:bd:da:9c:2f:27:68:fc:b8:16:56:40:12:
10:ee:34:18:16:df:e4:a2:20:cd:d0:e0:27:da:24:6e:ff:8d:
f4:6d:1e:1e:5e:27:11:18:94:d8:b7:15:46:43:af:fd:dc:72:
a4:c1:3c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:51:04 2026 by rpki-client