Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
File: mZKB6H1em4dY8kDnju9xAsQBIYk.mft (raw, json)
Hash identifier: Gmx7rxoy8abC7OAfExRPlxglySGHv5nOOvtADuCYIIE=
Subject key identifier: 9C:3A:05:E7:3D:53:54:56:5D:FF:CE:29:BF:48:14:2B:83:3C:C2:83
Authority key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Certificate issuer: /CN=999281e87d5e9b8758f240e78eef7102c4012189
Certificate serial: 01A179CD2F96DC32C74A266D0D0D54ACBC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
Manifest number: 1A55
Signing time: Mon 26 Oct 2026 20:00:52 +0000
Manifest this update: Mon 26 Oct 2026 20:00:52 +0000
Manifest next update: Tue 27 Oct 2026 20:00:52 +0000
Files and hashes: 1: 84a_5dunO5tT13Gn8_j3cCElA5U.roa (hash: myvurQJ8o/9M7JEPK/Rdbm3h4MrG2xioG91InHNEhRU=)
2: mZKB6H1em4dY8kDnju9xAsQBIYk.crl (hash: oVhbxvld+7eoUAkOeBr2FBpyDJ7XjbBl/laXUs32H4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cd:2f:96:dc:32:c7:4a:26:6d:0d:0d:54:ac:bc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999281e87d5e9b8758f240e78eef7102c4012189
Validity
Not Before: Oct 26 20:00:52 2026 GMT
Not After : Oct 27 20:00:52 2026 GMT
Subject: CN=9c3a05e73d5354565dffce29bf48142b833cc283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:70:6c:8f:83:f0:b6:12:83:59:df:51:05:
3a:86:df:68:90:5e:d3:7b:62:4d:71:f9:85:95:b6:
64:cc:2a:73:4c:35:59:4e:9f:d6:df:b9:f2:72:cc:
ac:62:4c:f6:e0:26:e1:4c:62:57:5e:b3:2d:ac:dc:
a0:c4:f8:8c:9f:ec:a8:36:19:e9:79:62:a0:67:ca:
04:0c:ba:e1:dc:7e:69:35:45:7c:15:1b:5d:69:49:
39:32:ac:6f:e6:af:cd:0f:34:0c:4e:2f:e2:92:f0:
0e:73:e3:1d:d9:fa:94:ec:1b:31:92:19:b6:0f:b3:
7a:25:55:11:dc:4b:ab:2e:62:8f:bc:51:74:e5:d5:
82:7c:2b:e4:c1:a5:3b:b2:27:d5:cd:0b:a7:cf:48:
ea:3a:7e:9d:03:ca:84:bc:73:c3:ad:6b:0a:a0:55:
51:83:b9:31:a9:7d:21:93:2f:d3:15:80:6f:e5:da:
5c:a0:95:ad:9d:2b:24:ef:66:8e:56:08:a8:85:0b:
0c:5e:e3:9c:db:34:24:ff:dd:49:18:05:32:d7:15:
19:c6:de:75:1c:eb:da:7e:39:8f:16:45:41:09:be:
be:70:59:d2:74:87:76:9f:e3:5d:ad:34:6f:2e:14:
dc:26:12:35:a9:64:d5:ad:ff:e6:eb:74:3a:13:eb:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3A:05:E7:3D:53:54:56:5D:FF:CE:29:BF:48:14:2B:83:3C:C2:83
X509v3 Authority Key Identifier:
keyid:99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fd:4d:67:e6:20:87:da:d6:ce:99:18:20:67:51:3b:37:71:
4f:92:9a:34:7f:2d:d8:bb:32:6d:fa:5c:a3:6f:ac:04:20:e0:
5e:8a:17:dd:11:31:f5:65:d8:97:dc:56:d9:87:c6:41:bf:ae:
1d:c4:d2:aa:a1:34:0f:cc:3b:14:78:d3:fa:c0:18:b5:58:f7:
9a:c3:4d:00:9e:12:06:0d:c1:ca:13:b9:36:7e:ba:01:2f:ee:
20:ff:bd:76:9c:22:8b:38:ce:3d:95:a4:b8:b4:2b:f0:f9:b4:
0f:20:d6:bb:ff:97:70:6e:4d:1a:56:7b:39:b8:2a:87:eb:e5:
6f:ca:dc:af:b8:c5:4d:74:f5:4e:d0:42:8c:41:ff:36:cf:db:
9b:67:16:3d:90:a3:d4:19:ae:6c:6a:1a:a1:80:70:3e:d7:91:
b2:dc:1c:01:0f:2b:2b:45:5a:15:de:6e:62:79:5e:6e:f5:97:
7e:a4:c9:35:61:36:e1:5b:18:bb:bc:25:9d:a0:e6:43:c9:c3:
a3:48:b3:95:00:5c:50:6f:86:01:62:ea:50:c1:b9:80:8f:18:
cc:6c:11:30:bd:4f:fb:d2:a9:5a:68:05:1b:ec:8c:81:21:e7:
70:a2:c0:8c:43:1f:52:f7:07:9d:1e:1d:17:fa:8b:a1:be:1c:
ef:95:d1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:37:41 2026 by rpki-client