Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: FE7Xi3SLw6GdIlHMSxVoJjuWNNda9lIr2Anao0Y2Uug=
Subject key identifier: 64:80:5B:1B:0C:28:92:80:2B:77:C4:FC:62:43:43:57:22:DC:8B:F0
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 01A08AC3A0A817FCA1E7BFE1006892076672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 1976
Signing time: Thu 10 Sep 2026 10:01:11 +0000
Manifest this update: Thu 10 Sep 2026 10:01:11 +0000
Manifest next update: Fri 11 Sep 2026 10:01:11 +0000
Files and hashes: 1: 1-1b9kIdAlblnsi3fi8wMUDdRXmQ.roa (hash: EHBhiVunuwqspkFW8sGSqvBOxHJnouc2J5HPWr1aeGw=)
2: 9aFjflm38MN581vnLtWpsCX-q7Y.roa (hash: yLjtSs5KlibIMz+VoXmAGRKRF617RWal83eBR+rXqCQ=)
3: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: Z4eJiJAZUxhcjCBTQsf8v+VbLslt6RyeiNluML6fIu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:a0:a8:17:fc:a1:e7:bf:e1:00:68:92:07:66:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Sep 10 10:01:11 2026 GMT
Not After : Sep 11 10:01:11 2026 GMT
Subject: CN=64805b1b0c2892802b77c4fc6243435722dc8bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:59:fa:57:61:1e:64:46:17:88:a5:32:92:
a4:90:ca:cd:76:42:2c:4d:49:b8:c8:73:c1:27:62:
29:0b:fc:64:f9:aa:07:c2:1a:76:2a:67:46:ad:8a:
ae:0d:2a:58:38:3f:de:39:0c:70:73:b2:10:08:d9:
32:81:ed:28:08:c3:e6:bf:43:96:85:34:18:44:b1:
23:c9:a0:0a:85:d2:bb:90:18:a6:1a:c0:5e:81:64:
08:c6:b5:1c:8e:f1:92:ad:d6:f9:b6:58:22:cb:a8:
f3:a0:82:f5:01:27:62:70:21:93:a4:cb:3e:a4:43:
f4:e7:cb:42:19:ba:01:29:d8:af:25:6c:2a:2e:2b:
c7:b3:88:fe:fe:43:38:bb:26:d1:f4:b1:77:5b:14:
f3:d0:bf:aa:21:5f:ed:e5:71:a1:c4:11:cf:0e:d9:
93:8d:3e:68:f7:57:1e:0d:f2:a5:8b:62:5e:f5:46:
f4:9c:f1:9f:ca:11:28:34:2f:ae:6a:24:81:e6:97:
fd:8d:34:05:1d:45:d4:19:b3:28:27:28:74:d2:29:
18:43:69:56:f7:1e:7c:96:02:cf:6a:ec:da:06:4e:
59:a6:d3:e7:a0:60:2a:85:bc:06:a1:ef:de:3b:33:
3f:0d:3b:b4:8d:92:0d:94:09:81:31:99:7e:90:f9:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:80:5B:1B:0C:28:92:80:2B:77:C4:FC:62:43:43:57:22:DC:8B:F0
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:20:e7:d5:34:4c:78:14:db:f5:6c:79:db:25:24:c5:82:b1:
70:60:af:13:4c:c7:51:aa:21:86:af:42:e4:0a:9a:d8:c3:4f:
d3:e1:c2:4c:9f:0f:70:a7:99:14:2d:cc:41:ac:d1:a8:86:a1:
0f:0d:b6:62:1f:57:a6:dd:a6:d2:c1:7a:ca:75:56:43:11:11:
ab:e0:f2:5c:cc:a6:26:bb:9e:e9:38:da:e4:65:b0:87:95:ae:
b9:52:f1:57:ec:5d:91:6d:20:1f:a9:57:4c:bc:dc:e9:bf:3b:
ad:fb:36:21:8f:e5:e6:d9:3f:d8:e9:86:c0:40:e4:95:f1:b3:
c9:b9:c3:74:81:46:15:f8:9c:69:b7:0c:92:a3:a7:b1:de:13:
9c:d9:d9:d5:63:f9:46:e6:5b:e7:1c:13:51:06:2c:66:c6:fc:
79:78:a7:48:76:7a:34:04:d0:90:4d:bc:42:e1:c0:98:14:9a:
37:bd:b4:84:8a:e7:f0:b5:42:d5:08:45:13:bb:11:7c:96:03:
e2:64:05:2c:e7:e3:42:2c:4c:37:73:5f:75:76:c9:27:da:2f:
22:18:da:ff:0c:c0:5e:fd:0b:94:3f:59:5e:8d:a4:04:20:3e:
bb:db:08:61:f3:88:7b:a5:f0:f1:b0:28:de:9e:e6:1a:d7:b8:
de:e6:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:39:04 2026 by rpki-client