Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: PrULDt/bqm0s8MZNoxkwUZl4doz3/vSVZSplm4SZ1Yc=
Subject key identifier: 1D:CB:75:F6:24:56:89:90:BC:8D:4A:E8:5E:07:FF:C3:F5:71:7D:0E
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 01A0024A8B5FEC660AEEE4F807008CE9D612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 22:00:34 +0000
Manifest this update: Fri 14 Aug 2026 22:00:34 +0000
Manifest next update: Sat 15 Aug 2026 22:00:34 +0000
Files and hashes: 1: ftwoquu3DFj4eBFEtCkmR8T9CQA.roa (hash: 4rlrRLmH28vbIC123d5cUoLsBf7n1zeaVCkiEqiDVnA=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: BI5u51+CcF3UWqSt23G7ObBT68ArMl/GmvQriVgC0fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:8b:5f:ec:66:0a:ee:e4:f8:07:00:8c:e9:d6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: Aug 14 22:00:34 2026 GMT
Not After : Aug 15 22:00:34 2026 GMT
Subject: CN=1dcb75f624568990bc8d4ae85e07ffc3f5717d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:28:92:d7:6a:85:94:6f:d3:36:55:4c:f9:
85:43:3a:db:e5:46:d4:1a:52:e3:38:e7:c2:80:2b:
89:c1:48:a9:7c:df:44:bb:02:b7:fd:a7:52:96:df:
80:8b:b8:10:37:13:7a:70:13:6e:8d:c2:41:f5:85:
2d:de:db:b2:82:78:6e:35:c4:e3:9b:9f:6d:ff:ba:
ea:d8:d5:af:68:84:ea:a3:b4:80:fa:ae:68:a0:16:
8b:0f:9b:ce:52:67:3e:e0:14:f2:ca:7f:e4:49:50:
11:d5:18:75:5c:6c:d9:96:10:7f:c9:7e:9c:c9:e7:
f4:27:d4:01:40:0d:52:ef:fc:af:99:fc:cc:01:5a:
23:fd:49:48:56:96:f1:17:27:a4:d6:d1:d2:04:7d:
e4:7d:46:a1:98:72:7a:5e:16:de:5d:cf:a5:ff:66:
32:d1:fd:d7:44:12:1e:cf:56:14:7d:79:56:d7:87:
8d:f1:e6:6e:61:20:4f:5f:08:16:40:a9:cf:93:01:
ed:56:80:b6:97:be:89:57:f7:0d:85:dc:a8:ff:7c:
02:5e:cd:5f:df:f5:ac:4b:f4:af:f9:91:b6:92:2f:
79:48:ea:51:59:1b:6c:d9:a0:f8:cb:f0:bd:a7:ae:
52:7d:0a:87:f0:fc:e9:49:7d:12:e3:bf:a2:67:6f:
6c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CB:75:F6:24:56:89:90:BC:8D:4A:E8:5E:07:FF:C3:F5:71:7D:0E
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:89:99:da:37:d8:55:df:d0:80:41:44:cb:71:33:1f:73:7c:
dd:7f:5c:28:36:43:a1:08:e6:e1:cb:0d:39:bb:eb:b6:96:20:
1d:fc:5e:61:ac:65:91:c6:48:32:d6:83:af:5b:d9:ba:2b:54:
b2:c3:2a:51:34:9a:11:8a:dc:2d:5a:70:98:cb:74:24:a9:55:
6d:2b:c5:7a:c8:a0:e0:d7:50:1c:0f:3a:6b:8a:7b:32:93:15:
fb:cd:a0:a7:e6:04:f1:57:5e:61:7d:ba:68:c1:4d:45:7d:4a:
be:b0:62:3b:61:13:51:6a:1c:c2:d2:0c:76:98:58:cc:82:a0:
d4:3b:e2:fe:82:93:d5:10:b5:e3:30:2b:8e:72:7b:0f:fb:be:
be:b0:12:4d:50:13:49:45:b7:68:4e:4b:09:b6:f5:93:d4:92:
41:97:5c:36:04:76:01:7b:e5:af:a7:e1:1f:13:65:44:72:57:
b6:1c:5b:44:65:0a:6b:4e:3e:8e:2b:e3:f5:ad:45:46:e6:c6:
c0:9e:fa:de:56:fe:aa:dd:04:3a:8e:af:ee:07:37:90:ba:65:
b1:69:08:e9:1e:57:0e:44:ab:bf:59:26:d5:f9:62:3d:56:02:
5d:4d:8d:49:06:11:c4:9d:61:a7:3d:61:b0:04:9f:72:7b:6c:
c9:2f:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:38:49 2026 by rpki-client