Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier: FOEKVDZyIWvNab2KvEXYjs85JUU7V5MXHEr0kIrtEdE=
Subject key identifier: 7D:2B:91:F1:E6:9B:18:6F:1B:F7:6E:27:0B:8D:98:1D:8C:F4:32:46
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial: 01A1479707CD2153ED73A0C37F3C14F1C9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number: 1004
Signing time: Sat 17 Oct 2026 02:00:42 +0000
Manifest this update: Sat 17 Oct 2026 02:00:42 +0000
Manifest next update: Sun 18 Oct 2026 02:00:42 +0000
Files and hashes: 1: 277UMnCRR7zGdjhVvQlpf_Mrq_c.roa (hash: 9NAkWSbKvGlMuPXkg4z5e3x+bsBrci205y78D304cAA=)
2: E-p4X1qIBG8Spe6P6zk9N3q_I2U.roa (hash: V2KNJduz45ZPpbV/yVWVdNPDTFIpJ9BIkmO53dLe+Sc=)
3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: qOXKTGII9sNj0Fo0aLdZiw6g0JoqPrp0WvYiwVa1Zl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:97:07:cd:21:53:ed:73:a0:c3:7f:3c:14:f1:c9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Validity
Not Before: Oct 17 02:00:42 2026 GMT
Not After : Oct 18 02:00:42 2026 GMT
Subject: CN=7d2b91f1e69b186f1bf76e270b8d981d8cf43246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:3c:4d:9b:ec:01:8e:71:0c:0b:22:94:f7:
f5:b9:7b:80:de:ea:85:d4:28:d8:d4:26:a3:33:d4:
bd:66:a1:f8:7b:8c:21:e8:55:bd:ed:75:b6:5e:4b:
e7:10:3b:69:c9:25:24:bc:60:d6:fb:9f:37:d4:24:
1f:77:8f:a7:af:74:7a:ef:a2:92:ef:d9:cb:dd:ab:
75:f5:e9:bd:61:29:33:12:c9:89:00:0f:02:96:9c:
95:33:c7:7f:bc:e5:0d:e8:58:98:b5:26:ba:36:0b:
2b:fa:9c:10:dd:5d:03:dd:de:ea:74:21:f5:05:75:
fa:7c:06:2a:dc:b5:63:e8:8f:4e:4d:2a:e1:09:93:
ed:36:f5:6b:df:a7:f6:4c:87:c6:41:69:c1:ef:35:
9e:02:4c:c4:79:ac:76:5e:c5:ae:02:ca:f8:a6:45:
18:4f:c9:6b:b5:35:87:07:b6:d4:d4:85:c8:56:e8:
fb:af:06:19:d1:c1:2b:f5:6a:81:3b:c7:d5:32:31:
d9:b4:e7:e9:2f:5e:4a:08:3c:f1:7f:c8:eb:86:d2:
f9:bd:70:d5:c4:d9:51:95:f8:08:c1:1b:f0:3d:e7:
7f:d4:37:5a:0d:c4:22:32:37:54:5f:8f:11:cc:4f:
f5:04:0c:1f:fa:84:71:f8:f0:5a:ff:19:91:fb:62:
c1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2B:91:F1:E6:9B:18:6F:1B:F7:6E:27:0B:8D:98:1D:8C:F4:32:46
X509v3 Authority Key Identifier:
keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:03:9f:4a:76:20:45:b8:ac:3d:88:a8:cd:bd:9b:b1:88:7d:
2b:e4:f0:8c:a7:6c:c4:cb:68:9d:50:98:42:9d:a3:1b:d1:c7:
cf:48:5e:cf:ed:36:65:fe:a3:7f:1a:f9:25:e6:e8:7c:03:1b:
2b:81:b3:c6:6e:89:3b:59:06:63:fc:99:09:d8:29:99:b7:bb:
b9:51:c9:5b:15:bc:9a:eb:c9:35:06:fb:3d:b9:d1:97:cb:fb:
f3:55:17:ec:04:3f:70:28:ab:34:19:7e:43:8b:84:53:aa:2c:
52:a1:ec:98:e2:d7:f2:4b:d0:c3:d2:f6:17:f2:52:de:d1:5c:
e1:db:18:7a:14:79:aa:d7:d8:f5:38:bb:20:a2:b4:0e:15:a9:
a2:88:97:e9:7d:4f:02:f4:3f:4f:f4:78:55:1b:c3:b9:d9:e5:
6e:cb:0e:78:9c:ed:98:bc:ef:62:f4:ae:05:72:f9:dc:93:da:
70:21:2f:f4:82:7d:5b:00:5f:48:2d:ce:9f:18:20:a2:f7:2e:
d0:fb:15:3e:64:f4:6b:13:4f:27:f2:41:d4:db:29:fa:50:85:
6c:ef:47:ce:20:7f:01:c1:d4:05:31:ae:2e:ca:34:60:db:62:
08:dd:be:88:c8:30:8c:75:4d:ff:b8:f9:88:be:54:8d:fa:5b:
25:5e:b4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:42:31 2026 by rpki-client