Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File: Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier: NSZahPefDrO40Ap1kEOn4M2U3GQ71ITLMeo32RHG0Os=
Subject key identifier: 29:2A:33:2C:D4:16:77:0A:8C:89:05:3D:CF:35:8B:D1:87:EB:63:22
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer: /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial: 01A131EB3AA0D3380553F0911000DC8AE7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number: 1AA0
Signing time: Mon 12 Oct 2026 21:01:01 +0000
Manifest this update: Mon 12 Oct 2026 21:01:01 +0000
Manifest next update: Tue 13 Oct 2026 21:01:01 +0000
Files and hashes: 1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: JNRJVHIarwamOIHcNQXpDvLAlNAgm3OMoLBUfZtR/XU=)
2: rAsphywSAM45eBEoOtw-q7qBbQw.roa (hash: FZ6A8RzJ7kKd3l/6WGQbggDtZVXr3jcROQOsJNRBJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:eb:3a:a0:d3:38:05:53:f0:91:10:00:dc:8a:e7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Validity
Not Before: Oct 12 21:01:01 2026 GMT
Not After : Oct 13 21:01:01 2026 GMT
Subject: CN=292a332cd416770a8c89053dcf358bd187eb6322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:f0:5f:91:05:57:96:02:8b:12:ad:68:8b:
27:16:84:f8:59:ab:18:8a:4c:fe:3a:97:36:9e:b4:
0a:09:88:4c:f4:28:33:1a:0b:35:5b:fb:19:4a:f4:
fe:a1:44:e6:51:2b:08:06:89:9b:b4:f4:86:91:0a:
59:57:bc:2a:b7:96:60:bc:78:81:84:8a:13:06:62:
f7:ab:03:88:92:66:c3:8f:1b:1c:cb:8c:63:61:7e:
d7:77:80:82:1a:56:a7:4f:62:91:dc:87:55:0c:03:
9d:41:7f:ef:98:eb:bc:e8:2d:26:98:f2:20:ec:52:
05:52:ee:68:0f:12:c9:12:2d:4b:31:70:9c:cf:8a:
e6:6a:ac:18:76:e3:e8:ef:9c:bc:80:ec:0d:cb:ca:
12:87:84:30:a7:5b:b8:d3:cb:cc:7f:64:56:0d:12:
89:fb:a5:7b:7f:28:f1:af:36:4a:e9:2d:17:77:8e:
89:04:d9:3d:c5:4e:bd:13:5b:ed:65:dd:e5:05:dd:
21:cf:97:5c:d2:27:ed:38:af:52:2a:f1:96:ce:b1:
60:ff:9e:86:87:ef:6a:4c:54:ab:c7:6d:b8:79:2e:
5f:d7:a7:09:09:9f:ed:52:4f:1f:dc:58:db:71:52:
f2:81:00:cd:3d:d2:f1:82:ec:64:0d:7f:49:16:f3:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2A:33:2C:D4:16:77:0A:8C:89:05:3D:CF:35:8B:D1:87:EB:63:22
X509v3 Authority Key Identifier:
keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:23:c6:41:a2:03:fe:61:44:c4:66:03:cc:f8:fa:8d:39:60:
fa:c7:96:2a:ba:7c:26:35:05:d7:53:7d:7d:95:f9:3c:d8:1e:
d1:e0:08:8c:2f:82:95:94:86:fe:5b:75:23:bf:da:c0:0b:0f:
7d:ef:15:4e:3e:af:10:0f:fe:da:52:2a:ad:52:d9:ec:b1:76:
33:c3:46:cf:33:c5:c9:40:07:d4:3d:ae:f7:67:e2:df:cb:27:
00:21:17:23:86:fe:62:a4:fe:02:94:34:c5:57:7e:b9:d6:26:
c4:ef:13:53:bb:10:d1:f4:78:a9:f1:6d:74:61:13:ad:2c:40:
bb:23:14:10:b3:c5:d1:78:cd:fc:69:96:9b:22:61:d8:ad:56:
64:a9:9e:7c:37:9c:98:69:04:8b:1d:00:f0:a0:24:45:2d:af:
e3:26:93:43:0e:41:d2:93:6f:0c:05:27:b6:2f:1a:5e:32:b5:
01:5a:1f:0c:a8:ef:3e:4c:d7:c3:4c:cf:a0:cb:2f:25:3b:06:
1d:10:e5:98:86:e5:ba:c1:df:9d:58:8d:d0:67:5f:6b:c9:75:
2b:4b:05:12:ae:83:67:1b:38:5c:24:59:b4:73:8a:3b:b4:e5:
99:66:6e:b3:6a:c9:b3:65:25:a5:82:02:3a:74:75:29:6d:d5:
fa:47:ed:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:16:08 2026 by rpki-client