Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: uIo/+eUdYZaAc25qzI4PkzeP5w/jsywryh8b+DYtGrk=
Subject key identifier: D5:38:FA:1E:8C:A4:63:98:FD:4C:70:1B:ED:7C:FA:BC:66:48:85:6C
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 01A08CB1A0FF7973282A406C67D64E34272F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 19:00:46 +0000
Manifest this update: Thu 10 Sep 2026 19:00:46 +0000
Manifest next update: Fri 11 Sep 2026 19:00:46 +0000
Files and hashes: 1: WHwPKWlS1MbhHwPa_EcSvzO973g.roa (hash: ZJla+7f5axXV/6uT6lJ/b0sWEBJptZZvhKtPIna394I=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: g/Vdz1+Tgklo0vcnWBCGTQQiSvUvnMeNjN7y9b7zKHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:a0:ff:79:73:28:2a:40:6c:67:d6:4e:34:27:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Sep 10 19:00:46 2026 GMT
Not After : Sep 11 19:00:46 2026 GMT
Subject: CN=d538fa1e8ca46398fd4c701bed7cfabc6648856c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:46:40:bc:fb:51:fa:ee:27:86:e8:63:27:
a3:e7:5e:7a:df:c3:7d:b3:14:aa:84:10:ae:04:93:
05:e2:03:a7:1e:f2:4d:9d:e3:11:a1:94:60:b0:d4:
d5:de:24:93:8e:d9:36:fe:3b:56:28:d7:31:b3:16:
72:df:74:8a:87:fe:c6:63:6f:69:47:4c:da:4e:30:
96:67:f8:65:06:58:f4:07:27:da:13:64:61:f6:0b:
b2:e8:29:2e:ee:b9:b3:ab:11:66:63:23:c7:f2:43:
66:84:8a:2a:3c:ec:05:69:1b:9f:09:8d:c4:04:ab:
5d:55:fe:49:63:f7:c1:cb:92:4c:22:27:e2:ea:fd:
fe:e6:42:a1:37:0d:17:33:93:f3:c4:79:cd:08:fd:
e3:30:73:a3:ec:74:e1:7f:43:ed:67:48:ad:d9:c1:
e0:8e:ba:4a:5b:c9:6a:64:b7:3e:da:b9:ab:69:22:
76:0f:35:14:0f:57:b6:65:1e:c0:83:d8:d6:88:2f:
98:3b:b1:80:79:ed:e2:ab:79:e5:0d:5f:b0:93:2f:
75:20:e9:9a:89:66:3b:d9:f3:b7:94:2e:62:a3:b9:
47:0a:34:01:bd:16:ae:30:c4:5b:f4:c0:b2:0d:08:
9f:04:06:47:96:8e:42:74:53:ba:0e:bb:69:07:48:
9c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:38:FA:1E:8C:A4:63:98:FD:4C:70:1B:ED:7C:FA:BC:66:48:85:6C
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5c:63:a7:bf:df:98:d0:ee:57:00:f2:ab:4b:d0:51:bd:65:
04:1c:d2:22:1c:c2:86:d3:ea:f5:5d:17:7b:24:4f:67:45:2b:
a6:cb:b6:82:60:66:fc:a9:4c:a5:48:84:73:eb:9e:b5:24:1c:
9e:f4:aa:a1:21:43:6f:e6:de:b7:e7:a9:37:a4:77:db:98:58:
87:cf:cb:28:86:76:59:a2:60:05:90:36:b1:6a:e0:82:71:60:
03:10:c9:50:57:da:fa:6d:f4:54:25:bd:39:65:15:6a:df:62:
f9:e8:40:46:4a:c6:94:76:a9:10:f3:d8:59:ee:be:b0:44:d4:
6d:b3:79:13:e5:09:0d:17:d9:da:3f:42:2c:0d:bc:9b:54:cb:
0c:8d:67:42:00:c7:f0:36:f3:38:57:2b:19:04:85:e9:f1:72:
db:52:d7:45:c9:64:ce:3c:b1:69:10:49:a1:05:09:ca:dd:b3:
82:b5:87:fb:89:b0:18:52:e3:bd:cc:78:57:f1:cb:21:ff:cc:
a3:fb:da:52:82:24:0d:99:51:08:ab:86:1b:f8:34:6c:04:da:
68:ee:29:0d:f3:a6:d5:46:dc:36:25:03:4c:83:bc:57:c7:a9:
d4:80:1a:eb:67:72:cf:4b:2d:5b:5b:a2:3d:ca:f5:98:d6:4b:
75:7f:fe:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:20:11 2026 by rpki-client