Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: OrG0m/H+lF1mnl3alfjjZ0Rd9eN0o5j+nn+tWXZgn7o=
Subject key identifier: 79:C1:58:25:D3:1F:BF:45:E9:11:F8:5E:8B:D2:33:73:DB:A8:E9:B9
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 01A113051E368606CFB4CCC90CDC53996118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 1A92
Signing time: Tue 06 Oct 2026 21:01:04 +0000
Manifest this update: Tue 06 Oct 2026 21:01:04 +0000
Manifest next update: Wed 07 Oct 2026 21:01:04 +0000
Files and hashes: 1: 13v4LR-kEjAIRzbDQkbfPRC2xqA.roa (hash: I9za9QTYUmGMdQFI8DmW9yvA4iSaksBWoeOdAw7Bnjc=)
2: Xwng2aOLLOOXGJWWCrEGpFiiseE.roa (hash: 6yqVFWixLzqYnXIf35RXEXUfb95qxNvK5438TeN6PcA=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: w12F4nEoqAI9i59kP7Z6XIN4p0T4/3DQAW6z9rWQA50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:05:1e:36:86:06:cf:b4:cc:c9:0c:dc:53:99:61:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Oct 6 21:01:04 2026 GMT
Not After : Oct 7 21:01:04 2026 GMT
Subject: CN=79c15825d31fbf45e911f85e8bd23373dba8e9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fc:87:6a:df:c3:ec:0a:d3:07:3f:5f:38:02:
51:c7:f4:90:42:07:a2:a1:50:89:49:dd:2c:21:e6:
41:f5:96:7d:08:0f:c2:e9:7b:a3:1e:c0:28:87:e1:
33:ab:92:bc:b6:fa:86:a6:72:bb:95:b8:7d:08:2c:
de:0f:86:66:4b:52:12:82:05:1b:ae:8b:f0:82:4c:
fd:64:af:85:18:36:05:89:09:2f:a8:b1:51:f0:ba:
6d:c5:5a:7c:d9:c0:32:f1:d5:cf:c8:11:7b:fe:be:
5d:36:00:ea:36:f0:63:9e:f3:03:97:6b:4a:e1:46:
aa:2a:45:d3:5e:48:66:4c:f9:98:c1:08:3f:91:af:
07:b0:74:8a:f1:f4:56:0f:39:9e:ad:b4:94:e4:0c:
53:e2:d7:5b:57:34:07:79:e6:71:f0:54:60:aa:73:
f8:e1:09:c5:28:53:63:30:7d:4d:58:02:ba:76:17:
8e:f1:99:57:8d:af:d3:24:e8:89:92:01:de:4f:45:
14:38:38:f9:08:a3:5b:37:3b:f7:11:60:62:31:01:
8d:92:f6:48:9b:c7:dd:eb:f5:11:80:cc:bc:5f:3b:
26:a6:25:8c:56:ad:f6:b5:95:91:d0:a9:80:d1:a9:
eb:f9:36:5b:1a:2d:30:37:d3:f1:7c:d7:46:c1:02:
69:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C1:58:25:D3:1F:BF:45:E9:11:F8:5E:8B:D2:33:73:DB:A8:E9:B9
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a6:fd:5a:99:2a:55:8c:ae:9f:3b:a1:eb:93:53:13:3b:3b:
0d:87:95:75:8b:f1:c0:79:9a:a7:cf:77:aa:81:67:f3:a7:d0:
73:18:d3:b9:97:09:7c:82:11:78:71:34:51:cb:cd:7e:13:15:
c4:b8:0d:5f:24:46:bf:23:83:18:11:ae:94:7c:6e:d6:a2:c0:
5c:11:60:17:f6:1f:c8:f3:07:06:36:20:75:fb:79:71:f9:90:
fe:35:f6:5c:74:b8:1a:c4:44:dd:42:c5:5d:58:1b:8c:07:dd:
19:06:33:06:53:24:20:d1:75:67:e7:77:89:d0:c5:03:9f:4c:
82:ef:13:69:6c:f5:34:90:06:c2:8c:91:df:e0:ef:cf:df:d1:
b1:61:a4:9e:fe:b3:a5:34:9d:13:11:cc:a5:84:9d:79:7c:d4:
e5:01:ca:04:d0:53:ee:18:54:39:39:97:a5:fc:4a:bd:fa:14:
16:2e:8e:5d:8a:7a:60:32:9c:f0:41:d1:53:27:c4:3e:95:fd:
a5:4e:2c:5d:ef:61:09:9f:f5:55:00:3a:ce:a4:fa:f3:70:32:
44:b5:c7:21:fe:5a:d9:bd:43:48:17:e7:59:55:53:e4:aa:60:
24:e2:da:21:df:da:f8:81:2c:85:57:b8:0f:77:dd:74:d3:3e:
c9:51:5e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:20:09 2026 by rpki-client