Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File: mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier: z1hSCaBsRV2RII6KxNHJ4ncXHoIkWUs5f3GTkt8Ityc=
Subject key identifier: 59:0E:34:EC:57:CB:20:74:1C:E3:AB:E1:DB:1A:82:B1:22:4D:90:CA
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer: /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial: 01A1871ADF4543F69C192B1C23F7DDFC393E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number: 0874
Signing time: Thu 29 Oct 2026 10:00:47 +0000
Manifest this update: Thu 29 Oct 2026 10:00:47 +0000
Manifest next update: Fri 30 Oct 2026 10:00:47 +0000
Files and hashes: 1: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: FIt9XRK1mVOSKXWADznhZhrNXTh3giEEOdzXggiGN6M=)
2: z_44jtrGJfD6zh9PidW-GJCCXns.roa (hash: wkQhSLVYP9oo4jjQ5UZW99eD0rUSG+lto+V5IH7d35w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1a:df:45:43:f6:9c:19:2b:1c:23:f7:dd:fc:39:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
Validity
Not Before: Oct 29 10:00:47 2026 GMT
Not After : Oct 30 10:00:47 2026 GMT
Subject: CN=590e34ec57cb20741ce3abe1db1a82b1224d90ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:9d:dc:62:81:f4:43:f9:8e:d7:7f:34:a7:
83:cf:03:fd:87:44:8e:d3:21:f5:dc:82:a5:f3:6d:
9d:f1:ff:88:92:b2:b5:30:a2:4e:f2:d3:44:92:a0:
97:22:f0:65:40:d9:f3:e2:e8:28:05:4e:fb:f2:76:
bd:94:57:96:07:e9:0b:62:5a:b3:f8:50:0d:05:f4:
8c:9f:8d:04:aa:aa:5e:17:94:02:4e:d2:91:5d:16:
d9:27:42:84:7f:20:9d:a7:35:05:65:2d:3a:11:0c:
3d:15:6f:f5:d3:bb:12:67:7d:31:ab:aa:a0:71:7e:
ce:e2:51:87:6c:56:06:a1:f6:1d:8a:ca:c2:9e:e8:
d2:92:17:d4:43:45:59:9a:d3:02:e7:16:97:f0:4d:
9d:d4:96:69:68:2e:49:7c:82:4a:2e:a3:7f:6f:18:
36:aa:04:b2:ab:56:d7:11:b7:62:d4:4e:24:59:36:
50:fc:bd:ff:a0:18:bc:01:c1:24:41:da:05:13:79:
33:a2:37:75:11:cf:79:22:bd:f8:bc:7e:97:e0:97:
0e:02:12:65:90:1b:03:40:26:f2:59:6d:d8:25:7e:
44:a7:13:7f:b8:2e:cd:f1:f9:4b:6a:a7:85:e6:9d:
92:99:90:50:26:35:53:5d:ba:8b:8d:35:79:78:6e:
65:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0E:34:EC:57:CB:20:74:1C:E3:AB:E1:DB:1A:82:B1:22:4D:90:CA
X509v3 Authority Key Identifier:
keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e2:ed:3f:0c:9e:63:2d:77:78:bc:55:81:21:4d:67:2b:ff:
f5:8f:56:c5:4d:c4:fe:95:04:c3:6a:c2:2b:49:e3:13:2c:c4:
44:02:a4:5d:76:2d:9b:b6:bc:be:ab:f3:63:87:22:91:d6:dd:
a9:23:22:9c:ac:b8:19:c5:0c:7d:a5:9d:95:dc:88:1a:8f:6b:
24:86:7b:d1:5d:a9:d0:4e:16:ae:16:36:c3:e5:65:fd:f2:5a:
ed:b0:63:7b:46:02:02:51:7f:bc:b5:3a:20:ae:da:c5:d9:63:
05:f3:f5:db:66:60:ce:6e:36:77:55:f6:c0:5f:ae:a1:72:a8:
a3:4d:83:77:4b:0f:03:b2:51:ec:df:bb:a7:ee:8e:67:ab:44:
47:fb:2d:77:45:c0:a7:d9:8f:29:3c:f6:c6:6d:83:df:de:97:
9c:8e:25:f3:37:cb:02:93:09:0b:1e:a7:81:a5:2c:63:6c:f9:
3f:4e:e0:ab:ed:e9:2f:99:cf:e3:07:8b:c3:99:70:e3:c4:22:
66:76:c6:bb:a6:6a:62:ca:c0:4c:d2:23:20:55:ac:04:e6:c4:
78:51:80:7e:e9:0c:25:3e:c5:57:3b:98:0b:dc:f3:9f:2a:fc:
8a:e3:7a:34:a6:98:77:89:b0:19:4a:dc:47:6a:24:a4:b0:15:
f1:b1:67:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:43 2026 by rpki-client