Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
File: MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft (raw, json)
Hash identifier: 0QY7Vjz30dgEZYI9e/Da7s+zxi8wjy6OIcP6x38oVzo=
Subject key identifier: 46:7B:43:F8:79:E7:66:06:9F:73:3F:76:65:73:C7:0D:C5:A5:65:15
Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Certificate serial: 01A113E13B70A64F0615972A7FE37FC15F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
Manifest number: 1A8F
Signing time: Wed 07 Oct 2026 01:01:30 +0000
Manifest this update: Wed 07 Oct 2026 01:01:30 +0000
Manifest next update: Thu 08 Oct 2026 01:01:30 +0000
Files and hashes: 1: MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl (hash: w/qIhRnBUVVO8YYzb9hbLRzEJmjZd4cg3fImx00x6Jo=)
2: fnxekr8hjBPYztHEpriyNTg-w1c.roa (hash: Yw6ebR/XuI9yJ6QrRRVgWW8yPZGg+etxygR5z7m4D2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:e1:3b:70:a6:4f:06:15:97:2a:7f:e3:7f:c1:5f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Validity
Not Before: Oct 7 01:01:30 2026 GMT
Not After : Oct 8 01:01:30 2026 GMT
Subject: CN=467b43f879e766069f733f766573c70dc5a56515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:73:71:05:6d:90:a1:96:06:61:5a:d0:5c:
5a:7e:7a:bf:9d:3e:d2:ac:55:d2:e5:6a:65:60:05:
9a:ae:a7:1d:0b:f6:2d:43:de:48:e6:85:ca:40:17:
8c:f4:68:c7:a4:7a:e8:cb:dc:fd:f6:a0:a9:17:72:
b5:c6:b5:bb:40:61:2d:db:3c:96:c7:56:f4:43:11:
0e:96:31:4e:f3:d1:84:51:7e:9d:34:95:bb:5f:f4:
37:4c:b2:a0:80:ca:63:98:b0:b9:99:5a:13:86:2f:
09:84:cc:0d:53:06:d9:6b:5f:13:4a:ec:d3:26:31:
7f:bf:b6:9d:f6:5c:62:4d:e9:f1:08:8b:bd:ac:07:
9a:56:b2:77:d8:74:ea:d4:8e:fc:2d:bd:8a:c7:ba:
bf:dc:0f:ab:ed:15:8d:86:77:a8:eb:49:a2:31:ec:
a8:a2:c6:95:4d:d1:a4:83:2d:6a:18:b0:bf:14:f3:
b2:13:4c:6b:de:a5:05:74:a6:3d:9f:e7:5c:2a:c1:
20:e3:cf:ee:15:cf:7a:61:6b:4b:8b:e5:66:c2:57:
02:d2:bf:b2:b0:15:ce:f8:3f:46:05:15:5d:7e:63:
1a:1b:78:3b:13:2b:46:bb:c1:49:25:20:d5:3e:9a:
f1:0d:6f:64:29:b4:8a:f6:f9:53:92:5e:12:6d:72:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7B:43:F8:79:E7:66:06:9F:73:3F:76:65:73:C7:0D:C5:A5:65:15
X509v3 Authority Key Identifier:
keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7c:b1:8a:b0:89:50:90:3d:91:15:1b:7e:1c:da:95:e9:f7:
7e:56:ed:5c:91:80:e0:b2:0d:4c:8f:33:00:da:35:64:da:9d:
20:c2:e3:d3:03:40:33:2d:d9:a3:12:db:93:96:c1:27:1d:15:
b8:86:f3:df:ee:cc:12:34:92:29:23:7e:4b:09:b1:d6:f0:a0:
aa:8e:ad:12:30:b3:fc:a2:69:d5:a5:3d:3c:fd:ae:a7:46:18:
cf:84:f6:ed:13:56:8e:ba:b7:8a:e2:34:70:e1:70:8a:3d:e2:
9d:cb:08:36:2e:8e:9e:2c:5d:a6:88:32:84:2d:6f:c3:bb:f0:
28:49:f3:2c:87:71:e5:08:ff:25:48:9f:44:d7:9c:64:1b:07:
e5:56:89:3a:eb:e4:11:4d:b6:3e:b5:4a:ba:6b:de:93:97:18:
b8:3e:74:c6:6b:82:a1:94:05:32:c3:46:22:06:85:d9:46:3a:
57:f1:2f:4a:55:0f:83:61:db:30:e6:68:9c:c8:16:37:06:27:
0e:44:2b:76:5c:12:8a:de:be:72:97:cf:a6:fe:ee:30:13:eb:
8c:66:1b:8a:ba:8e:d5:27:60:55:77:6d:ca:e3:ed:b0:54:44:
27:88:de:54:d0:21:8a:39:81:f8:26:bb:fb:9e:e8:e4:e9:15:
b0:90:95:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:56:06 2026 by rpki-client