Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: i6FqCZ8pEtMHyAe7ZiVV8JwlTPm1wol4fzSMtTGf3sE=
Subject key identifier: 98:DC:4E:2F:42:EA:9A:A8:91:69:A9:0B:06:DF:9C:EA:AB:E0:11:AA
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 01A176280595D993A4F8189D2B203A5D1541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 10D6
Signing time: Mon 26 Oct 2026 03:01:36 +0000
Manifest this update: Mon 26 Oct 2026 03:01:36 +0000
Manifest next update: Tue 27 Oct 2026 03:01:36 +0000
Files and hashes: 1: Hi85wc6uJWXTGae11EDMD2GIBrI.roa (hash: F5Lq64IGd6DB3AuiERrPRgP1NYUhYidZ19qyklKfzQk=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: YwyvwuRS3hCJOvp+3v4KP5ia4fUC30/2ORQl/ZD5Kzg=)
3: wSkm2DS0COZLH_6lYON3OI8O84s.roa (hash: qk1hRiw34z/5pPQQaOhoxeWqj5Uy++y3lT/FiUcWPfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:28:05:95:d9:93:a4:f8:18:9d:2b:20:3a:5d:15:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Oct 26 03:01:36 2026 GMT
Not After : Oct 27 03:01:36 2026 GMT
Subject: CN=98dc4e2f42ea9aa89169a90b06df9ceaabe011aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:2e:ba:d8:bc:8e:48:be:a9:d5:7a:b9:2c:
61:b8:1f:a1:2b:8d:6e:e1:85:b4:21:6e:99:23:e5:
11:cb:15:2d:8f:a4:a8:d6:4c:88:e7:35:2e:98:2e:
4b:66:50:d2:e7:01:95:08:e7:cf:cc:d4:da:08:b4:
94:b6:cb:ea:ec:b6:a4:a8:f4:fc:5d:27:d3:07:6f:
f1:00:2a:fc:1d:56:18:fa:19:73:53:ea:a2:f2:e3:
a5:6d:b2:ce:3d:aa:b6:5f:06:d5:30:ff:b7:2e:11:
e5:fc:71:72:20:6b:ac:33:e4:55:ed:d1:cc:26:68:
b6:64:43:07:be:71:ee:92:ae:4b:d7:65:e6:1d:e8:
e5:e5:18:e4:c7:ff:50:e4:7c:fa:7e:29:4a:99:23:
c8:78:09:65:77:66:4e:6b:9e:12:4e:06:26:2a:67:
70:27:a9:33:cc:01:ef:1b:79:b5:5e:bd:b0:15:60:
89:9e:6d:ee:a6:a9:70:be:dd:3a:af:63:f1:dc:ae:
29:18:61:c8:ba:90:8a:9a:f9:4a:5f:51:97:68:a5:
3e:3b:19:71:b0:57:10:23:08:2b:53:c3:75:45:12:
25:64:68:cd:94:66:6d:2a:26:96:54:c2:35:5a:12:
47:b8:25:2a:50:75:1f:90:e7:9c:04:df:c4:41:19:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DC:4E:2F:42:EA:9A:A8:91:69:A9:0B:06:DF:9C:EA:AB:E0:11:AA
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ce:b0:7f:79:e9:00:47:32:7d:4c:3b:ac:fe:42:be:7c:6c:
c7:ac:63:45:cb:6a:34:65:ae:97:b6:5d:6e:8b:61:bb:02:17:
7c:33:23:e3:37:a2:43:bf:e9:60:05:35:58:c2:2c:ef:ea:70:
c0:77:c5:4e:af:5b:08:3b:7e:f0:27:03:91:3a:ca:3a:9f:d2:
ba:ac:19:7e:0f:d8:f1:2e:fa:21:1f:7f:f7:5b:37:ec:60:8e:
0e:4a:69:47:66:28:27:e9:73:b2:ac:e6:7d:6c:d3:8d:16:77:
27:49:49:2d:1e:b3:a6:5d:a6:3d:e2:03:38:ae:48:b0:28:7e:
86:b4:09:8e:47:4b:34:22:f1:2b:c2:54:a4:07:ac:18:f9:5e:
3f:86:25:d0:98:2d:91:6e:c2:83:d2:e3:e1:9b:bb:b6:8a:c5:
e4:32:10:55:df:90:82:6e:cd:ce:bd:c2:74:4a:28:98:68:ed:
36:f9:42:0f:6f:71:86:46:e8:d9:c4:b6:9d:2e:42:f6:dc:72:
53:29:21:19:d7:62:51:df:86:69:e7:c0:49:39:3f:65:fa:a2:
6c:42:ff:0a:6c:38:25:c2:57:d1:a7:0f:de:8b:02:56:05:22:
f9:ce:be:49:65:53:ec:d2:28:f6:1d:a8:cd:17:e2:c6:93:84:
0c:df:93:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:34:10 2026 by rpki-client