Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
File: mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json)
Hash identifier: PaJ1IMakG6s83lAmFCtsTAz08vHl6NCoLCw03L0TdJ4=
Subject key identifier: F8:0C:87:66:C8:6A:5B:6C:F2:62:08:AD:39:7A:7B:5A:3F:76:C5:44
Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
Certificate issuer: /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Certificate serial: 01A1540970656D5716E671AE8CA6EB7D37C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
Manifest number: 1A42
Signing time: Mon 19 Oct 2026 12:01:06 +0000
Manifest this update: Mon 19 Oct 2026 12:01:06 +0000
Manifest next update: Tue 20 Oct 2026 12:01:06 +0000
Files and hashes: 1: JOBZiyk3WSexjylGrFqWtpIvVNI.roa (hash: pYC05xXD+D4uXeUnMdxT9uc+YVOaCRlDkwK83r1kNWw=)
2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: 1Ofta5ckJhcSpaUVl7AE03FT0nqMHQd+R1Xw1SoHdUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:09:70:65:6d:57:16:e6:71:ae:8c:a6:eb:7d:37:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Validity
Not Before: Oct 19 12:01:06 2026 GMT
Not After : Oct 20 12:01:06 2026 GMT
Subject: CN=f80c8766c86a5b6cf26208ad397a7b5a3f76c544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:c8:dd:83:9d:06:fb:49:4d:f1:63:8a:7c:
9c:13:ff:ed:7a:b1:e3:a8:67:e4:c4:59:9f:66:b1:
86:35:48:13:9f:92:fe:cc:39:f6:80:74:a7:4f:46:
ff:bb:2e:dd:fb:8b:54:5e:91:aa:c5:d9:1b:41:ce:
13:e6:97:de:34:bc:08:6f:1c:0d:8c:1e:4b:f5:33:
58:61:2d:51:3b:1e:1d:9a:3f:03:33:41:d7:97:74:
83:52:45:b2:26:4a:4f:c9:19:83:05:ae:c9:ae:9d:
61:65:c9:9a:54:3e:3c:2b:a9:39:50:fb:d8:3c:79:
2d:cb:15:94:22:45:52:73:18:a0:4c:31:60:27:44:
60:58:48:fd:d5:01:2e:30:18:ae:33:c6:68:a3:bc:
cb:87:eb:6d:97:27:73:b6:90:f5:2f:dc:a7:ed:ae:
54:3b:bb:b9:17:90:f3:39:87:6c:44:09:bb:1a:57:
ae:cc:73:80:bb:65:79:28:9f:34:c0:29:da:53:09:
0e:ca:bb:9d:13:3f:64:da:bf:f5:c8:ab:a9:66:47:
90:d1:9e:d3:5b:07:a2:d9:21:cf:0e:07:a5:0d:5e:
96:af:f9:c3:2f:11:2a:da:b4:02:81:1e:d3:58:03:
c7:9e:b9:cf:29:30:79:7e:8e:a4:55:e5:e2:b2:69:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0C:87:66:C8:6A:5B:6C:F2:62:08:AD:39:7A:7B:5A:3F:76:C5:44
X509v3 Authority Key Identifier:
keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:e1:ae:b8:e2:d8:41:b9:b3:13:f9:8c:85:82:9a:d8:f1:59:
d3:50:13:1a:71:7d:71:75:aa:66:e9:b7:eb:89:c3:95:17:e7:
f6:dd:be:70:33:09:1f:97:14:95:c9:95:b1:de:00:0c:40:7e:
18:75:89:79:69:e1:cc:0a:cb:cb:9e:10:ed:29:ee:da:71:83:
2a:9a:5e:86:b5:f2:d6:54:d5:a3:14:9a:a5:40:0f:73:ae:63:
b1:9c:88:7e:74:49:c1:3d:b4:d2:f0:a0:62:a3:79:77:5c:12:
9e:a4:2b:c1:9d:a4:14:c2:5e:d8:f9:e5:f1:24:8b:65:cd:d0:
13:c8:3b:3f:24:1c:00:a5:df:09:88:b7:48:76:d0:e4:a4:14:
d3:7c:08:ad:44:bb:74:81:72:12:37:00:80:12:d3:79:ee:b0:
0c:b7:c4:06:b2:ee:f1:cb:59:af:e7:5a:1e:a8:02:d0:30:a2:
ac:a8:f2:07:3b:1c:c1:df:62:2c:a3:fa:ea:3c:54:48:c2:6d:
76:b1:d0:51:7a:fa:11:36:38:2f:82:33:7a:dc:e0:56:94:3c:
8d:64:8c:33:c1:3d:76:08:91:34:cd:67:bd:39:00:f7:45:b1:
e8:3e:5f:49:36:32:e5:63:19:c3:04:e5:f6:fe:03:6c:c0:cb:
91:6c:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:55:46 2026 by rpki-client