Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File: mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier: DsNSA5W2MKl/Qth3yjJvClsHUhZxPLlSeytmfSPab2M=
Subject key identifier: 70:7C:37:F1:EF:6B:6F:52:E8:9E:37:4D:85:7A:F3:B2:BE:DF:96:CD
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial: 01A0ADF40595CB8ABD3EC1A51F8534F81A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number: 0B8A
Signing time: Thu 17 Sep 2026 06:00:45 +0000
Manifest this update: Thu 17 Sep 2026 06:00:45 +0000
Manifest next update: Fri 18 Sep 2026 06:00:45 +0000
Files and hashes: 1: FcGNPYwz5_J_IpZa2PQ-hVZxs3s.roa (hash: zBwo4xD9J4OLhTz0HKnWTIlad5vyr6fVYYxN7r1dvp8=)
2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: Uyxjb4tmy8VPEYyzyB/1VgNq9pf7Hkrz68AXWMERJMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ad:f4:05:95:cb:8a:bd:3e:c1:a5:1f:85:34:f8:1a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Validity
Not Before: Sep 17 06:00:45 2026 GMT
Not After : Sep 18 06:00:45 2026 GMT
Subject: CN=707c37f1ef6b6f52e89e374d857af3b2bedf96cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:5f:c3:6d:89:d2:61:5a:03:d0:aa:1a:6a:
6a:bf:1c:dc:f9:c4:36:32:88:44:5a:39:1f:4a:00:
22:39:b6:da:46:e7:bb:8c:d1:60:ea:2e:44:30:b6:
3b:86:5d:be:57:20:6f:48:bb:25:a8:ee:1c:47:ee:
16:81:ac:b9:59:08:37:75:f6:84:67:ee:a8:1a:fa:
43:fc:17:e9:d2:87:41:a5:b0:3e:b8:63:7c:85:36:
6f:b8:78:4a:67:4c:44:6b:97:41:dc:da:5d:33:0a:
16:3d:f2:dd:b4:75:9a:e2:67:c9:8c:92:67:24:a6:
2d:ee:ab:d5:e6:7c:00:7a:60:48:33:db:b9:0a:67:
ca:51:88:ec:d6:90:c9:19:57:2e:e0:89:fa:e9:47:
ed:99:00:ab:6d:88:3f:04:88:b8:cb:cc:44:c1:bf:
48:ec:bf:96:f4:ec:f5:f1:d4:0f:40:4b:9e:31:8c:
31:26:2f:ed:ca:e8:0e:c9:2f:7e:f2:33:46:ab:fd:
d3:29:a1:78:87:05:76:8e:04:e9:0c:25:32:9e:9f:
c6:68:7b:37:20:c6:3d:72:58:a4:71:98:d0:5b:ad:
e9:ee:70:97:9c:f9:3e:91:e8:fd:ae:12:0c:b2:08:
4d:2b:96:3a:fc:ac:a9:46:cf:62:e2:1a:da:90:ce:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7C:37:F1:EF:6B:6F:52:E8:9E:37:4D:85:7A:F3:B2:BE:DF:96:CD
X509v3 Authority Key Identifier:
keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:21:6f:9d:1a:ff:5a:3e:a9:40:dd:69:ec:ab:a7:87:17:77:
3a:0a:de:0d:08:96:30:76:40:64:34:8a:46:28:27:97:94:78:
63:d7:c9:81:17:ca:4d:b0:fd:2f:98:81:62:b7:f4:04:61:72:
7e:ab:4f:68:77:0a:01:34:c4:eb:c7:7b:0e:ef:7b:4f:63:73:
1c:22:3c:90:01:1d:99:07:b9:b4:a3:48:41:4e:2d:15:da:98:
d0:5a:f1:bc:83:a7:ad:4b:08:c8:78:16:46:53:f3:97:24:ee:
98:45:30:87:42:a9:77:a6:6a:0c:a8:31:c4:9c:69:20:eb:44:
ca:9b:ca:d9:a6:0c:c2:f4:c7:33:28:ca:af:d7:0e:89:32:09:
d5:aa:df:a9:02:1b:14:61:47:45:42:14:29:e0:ae:7d:0f:da:
9d:6b:e4:75:0f:d8:c1:f3:2a:69:66:02:1f:3c:a7:5d:70:d2:
43:bb:26:90:9f:76:d1:8b:12:7d:9e:b3:03:0b:7a:f4:33:3c:
81:bf:79:82:df:c5:ce:d2:9d:8c:4b:e1:36:73:cd:c5:7d:51:
01:a3:82:f2:3d:af:ba:de:88:4a:b6:ae:a2:c3:4d:3f:7d:bc:
00:03:e7:a6:37:92:79:84:fd:9b:2f:47:be:63:5c:98:86:b4:
83:2d:97:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:25:56 2026 by rpki-client