Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File: Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier: RxjFmVPnqPThoJpGW9S1TCRr2Ct3Pje3dbPaWdejU+4=
Subject key identifier: B3:C4:24:82:0F:0B:7F:12:38:7E:81:A2:B5:BB:87:1A:B7:13:48:93
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer: /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial: 01A12E0E3F1D5DE60A6B4D6C04A56F372947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number: 1A9E
Signing time: Mon 12 Oct 2026 03:00:47 +0000
Manifest this update: Mon 12 Oct 2026 03:00:47 +0000
Manifest next update: Tue 13 Oct 2026 03:00:47 +0000
Files and hashes: 1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: 9ZU5kZX58qHi2rNlJ5Mtk/4jf2sjd7ihucUGYqGQV5Q=)
2: rAsphywSAM45eBEoOtw-q7qBbQw.roa (hash: FZ6A8RzJ7kKd3l/6WGQbggDtZVXr3jcROQOsJNRBJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:0e:3f:1d:5d:e6:0a:6b:4d:6c:04:a5:6f:37:29:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Validity
Not Before: Oct 12 03:00:47 2026 GMT
Not After : Oct 13 03:00:47 2026 GMT
Subject: CN=b3c424820f0b7f12387e81a2b5bb871ab7134893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:bc:10:26:7d:28:ff:c4:c2:6c:67:d7:e9:
4f:32:14:25:7b:5a:6b:0f:d6:4c:ef:b3:9a:96:a0:
c5:4f:69:53:5e:52:c0:14:78:dd:68:cf:ac:c7:42:
bc:75:3e:39:30:14:03:01:49:94:4f:ed:f9:37:79:
0c:7e:05:58:8b:14:e6:64:16:a7:fd:68:b1:e9:d1:
16:4c:39:29:4c:61:35:ab:6e:d7:d0:c7:15:64:1d:
e8:0c:6b:51:d8:d7:41:f8:8d:56:9f:0b:ad:18:22:
9a:50:fd:31:fa:e5:ea:f3:37:bd:66:95:a0:e4:39:
13:cf:ea:d1:d6:bf:85:44:4b:f4:84:b0:c8:65:ee:
0e:6e:d9:75:2f:fa:46:63:2f:7c:19:07:a5:48:bd:
9f:43:d8:3b:1c:85:c3:60:5a:30:15:bf:23:c8:f8:
1d:cc:62:26:79:5b:f5:07:e5:4c:60:8c:a4:e3:60:
7e:91:c1:70:3f:eb:6c:79:0b:1f:29:a9:94:14:8d:
cf:88:f7:0a:10:07:3f:ca:c8:25:74:92:b2:e5:fb:
40:b8:3b:17:e8:e4:23:37:9c:1b:97:99:47:f1:93:
4f:40:67:76:09:0d:c7:4d:ae:76:7e:f1:e9:9a:1e:
35:cd:62:90:f7:22:b4:a1:c1:9c:88:1c:64:56:54:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C4:24:82:0F:0B:7F:12:38:7E:81:A2:B5:BB:87:1A:B7:13:48:93
X509v3 Authority Key Identifier:
keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:89:ab:4e:85:f4:fc:5d:7e:7e:2c:8f:40:63:d7:d7:bf:be:
aa:d5:6f:8f:29:c0:04:4e:9a:cf:21:bf:de:d1:82:07:db:71:
dc:b7:47:f0:48:c6:b4:3e:30:c6:b4:d8:35:ff:e7:b4:39:12:
6d:4b:64:ea:50:f0:03:86:1e:49:6b:a4:12:a5:fa:dc:85:dd:
48:b6:6a:ce:6f:60:49:3c:fc:7e:fc:1c:1f:d9:dd:13:6e:8d:
3e:6e:ec:96:49:98:e0:2d:b5:54:f2:38:7c:95:f8:62:de:14:
9d:16:80:79:f9:f9:50:0e:9b:71:5b:6e:02:7e:ea:7f:71:33:
81:64:3c:3b:f6:e8:89:f0:ed:d1:b2:b6:db:35:93:94:92:59:
f5:fc:01:d6:fb:00:4b:11:80:7f:89:82:1e:c4:ea:68:cc:1c:
1a:d4:3c:31:c5:01:29:bc:25:5e:13:b0:56:74:2e:60:00:8d:
4c:1e:14:b1:74:9e:6b:9d:be:6a:78:e6:b5:5e:ec:b3:8c:31:
9e:3d:57:3a:4d:d4:ba:9d:01:66:46:fd:90:f5:0a:e4:6f:4c:
81:f6:a4:84:84:0b:8f:13:8b:82:d0:c8:b0:02:94:fe:70:c4:
22:21:89:e1:53:03:ba:04:44:af:fd:53:9d:80:cf:72:3b:a0:
ee:2e:3e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:44:00 2026 by rpki-client