
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
File: mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft (raw, json)
Hash identifier: 4pbG8jZs71iAZc4Tq0GAGjl6CYnD5HLCW5Z0syQ7Z9I=
Subject key identifier: EB:A7:C8:6B:94:CE:31:A8:43:F0:D9:34:15:77:AC:66:86:9C:5E:87
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Certificate issuer: /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial: 01A1547732B879481DA2CEEFA719865F2425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
Manifest number: 02AA
Signing time: Mon 19 Oct 2026 14:01:00 +0000
Manifest this update: Mon 19 Oct 2026 14:01:00 +0000
Manifest next update: Tue 20 Oct 2026 14:01:00 +0000
Files and hashes: 1: SdgpFGGLNOpyuJ9pUq-ISYnzn4I.roa (hash: Hf8LYx/xiTjwePK0BFELGOeJyS6c95X3LSkrmw3EoHE=)
2: mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl (hash: JGH+kotz6XAs5c77VVac5ZUiAwCcKQGdxP37z8MpevE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:77:32:b8:79:48:1d:a2:ce:ef:a7:19:86:5f:24:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Validity
Not Before: Oct 19 14:01:00 2026 GMT
Not After : Oct 20 14:01:00 2026 GMT
Subject: CN=eba7c86b94ce31a843f0d9341577ac66869c5e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:47:f4:05:f8:83:ab:09:1a:9a:85:56:b1:5e:
2c:48:64:e3:9d:81:09:6c:81:27:fb:97:af:5c:5a:
c0:01:16:a6:30:2e:c2:8a:73:5c:33:bd:ea:16:bd:
7e:0a:06:e7:0a:94:90:7b:0a:7f:31:4d:bf:52:98:
58:0d:0f:57:01:14:14:3c:e8:02:a3:38:1b:7d:1e:
80:5b:15:91:e7:d3:1d:ac:1f:c0:36:37:b9:6c:bb:
68:a1:27:3d:a7:d9:d9:f1:44:1d:c3:b2:4c:80:8f:
47:7f:34:80:63:26:8d:ed:4a:78:c6:f0:99:50:dc:
31:c1:5f:60:50:31:05:e5:1b:a2:d9:8a:ef:7a:39:
3f:f7:eb:18:3c:86:c1:b0:b4:f6:75:06:6b:76:54:
39:31:25:0b:18:3f:eb:d2:8c:27:f1:5d:be:43:79:
c2:19:c6:2b:e8:6e:f3:3e:f9:1f:62:24:c8:cc:0b:
dd:e2:4f:88:4d:ab:d6:d0:d6:90:57:28:7b:b9:f0:
8f:65:93:02:f4:93:88:26:e7:9d:23:23:12:bd:12:
b0:8f:be:eb:ac:fa:07:26:a9:a2:2a:63:70:40:b3:
fc:6d:c9:68:c2:7b:3e:6a:6a:39:5f:ce:c1:7d:37:
2e:75:87:80:fa:1f:63:e4:53:fc:f0:da:25:cf:48:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A7:C8:6B:94:CE:31:A8:43:F0:D9:34:15:77:AC:66:86:9C:5E:87
X509v3 Authority Key Identifier:
keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7f:e4:d0:69:f8:02:00:02:df:1d:79:aa:b4:76:4b:f7:9d:
4c:6c:cd:60:a2:28:75:9e:82:4f:1e:14:d2:e2:09:a1:ff:90:
e0:9e:92:8b:fc:7a:8b:e1:f2:6c:53:fd:d1:94:f0:60:af:ce:
96:ea:99:53:5e:c9:df:58:b8:07:de:4c:d0:0f:ef:07:cf:b2:
80:46:60:48:ea:19:08:15:43:d2:98:b4:79:25:e1:1e:57:12:
dc:11:fd:ef:c7:29:79:59:4a:97:4a:7f:2d:d8:2b:61:65:86:
48:7b:80:d9:8f:f6:ee:75:8e:2d:81:63:1f:46:99:7f:9e:46:
7e:75:69:d2:c0:bc:f2:e1:32:d9:ef:7a:43:dd:67:5f:ae:60:
86:48:2a:4c:f9:3c:51:98:53:34:1c:60:5c:66:16:bb:af:99:
d8:b3:8b:62:4a:88:a0:98:d3:13:8e:d9:8c:97:aa:58:9e:c8:
c1:92:f4:d3:42:83:ef:a0:65:9f:af:21:cf:b4:4e:c2:57:29:
a3:af:be:22:dd:3b:42:c4:3b:56:e3:e4:83:49:cd:c7:b0:d2:
5d:7a:42:0a:21:7d:95:d7:42:53:69:9d:48:c8:eb:c0:96:b1:
65:6b:7e:35:0c:6f:0e:3e:52:5f:ad:5e:b1:9c:0e:f6:72:ac:
85:f2:40:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:03:28 2026 by rpki-client