Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft
File: mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft (raw, json)
Hash identifier: NcCeTZs0x5fMyRgtdBwwDRwlWNRuKHd4k7uQEUpkphs=
Subject key identifier: F4:1E:42:A7:C9:42:DD:7A:99:5E:A6:5C:4B:31:B5:05:BF:83:2D:55
Authority key identifier: 98:64:3C:05:7D:17:32:7F:A5:0E:AE:84:3C:B1:E5:15:B3:45:F9:5B
Certificate issuer: /CN=98643c057d17327fa50eae843cb1e515b345f95b
Certificate serial: 01A08A8C2262ED00FC68775296D1325B4BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft
Manifest number: 95
Signing time: Thu 10 Sep 2026 09:00:34 +0000
Manifest this update: Thu 10 Sep 2026 09:00:34 +0000
Manifest next update: Fri 11 Sep 2026 09:00:34 +0000
Files and hashes: 1: 1-kM5KqcC9VyVZ5Ukf_g6-Xm-gJk.roa (hash: /SUjSByO6AN75w/G3XvsE4eAt4OoOvQyQ6z6+Bw5tsM=)
2: ZHOt8zTvXZ9SCoIfe5yDvNXaa-0.roa (hash: Jxj7H6OLf2tiyA5sXzfKtVGYC3MNNjaeFtZ9C9y9BKQ=)
3: mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.crl (hash: ogXonqv0epjmSaLiKPeKvGMKssYLx+R+wFViyU9bWWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:22:62:ed:00:fc:68:77:52:96:d1:32:5b:4b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98643c057d17327fa50eae843cb1e515b345f95b
Validity
Not Before: Sep 10 09:00:34 2026 GMT
Not After : Sep 11 09:00:34 2026 GMT
Subject: CN=f41e42a7c942dd7a995ea65c4b31b505bf832d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:bd:4c:85:e0:67:c3:12:65:97:9b:b9:9f:
9f:c1:ad:02:01:0d:30:2c:ec:81:62:3b:95:75:9d:
9a:f3:e8:66:eb:b9:2b:2a:2f:63:7d:c2:4f:f4:57:
c2:32:1c:e0:13:41:5b:d9:ab:0d:0c:4f:b2:8e:5c:
d5:7c:00:d3:17:cd:c0:08:58:21:0a:b9:fc:54:a4:
15:06:35:4c:92:f9:8c:01:06:49:24:13:7c:80:1c:
27:50:f2:8a:b2:ab:74:81:5c:01:07:35:14:ae:e7:
65:a8:f0:69:8e:54:4d:d9:32:e7:a2:c0:2d:89:ef:
88:0f:77:35:d6:aa:49:5f:2e:b3:71:9d:86:45:e7:
ed:ce:85:02:96:66:75:70:ea:61:e2:74:cb:07:9c:
94:3a:1c:23:5c:5f:4a:6d:10:fd:1b:78:05:51:f5:
d9:9c:40:35:78:2c:e6:94:66:07:c8:79:b5:8a:b8:
93:87:c2:7b:db:e8:f6:7f:78:9e:e8:f2:77:8e:23:
83:44:6c:7c:d5:45:1f:66:e0:e6:c7:a3:55:6f:81:
a6:81:ed:9a:0b:7c:d9:08:6c:83:67:d0:a2:2a:fc:
44:ee:f3:32:74:4d:c9:0c:40:86:0a:45:55:7f:94:
c1:cf:97:de:0b:60:98:3e:12:67:02:cd:dd:1b:a3:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1E:42:A7:C9:42:DD:7A:99:5E:A6:5C:4B:31:B5:05:BF:83:2D:55
X509v3 Authority Key Identifier:
keyid:98:64:3C:05:7D:17:32:7F:A5:0E:AE:84:3C:B1:E5:15:B3:45:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dc3098-648f-4ae7-a3a9-d5cc1de75aac/1/mGQ8BX0XMn-lDq6EPLHlFbNF-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c1:70:d0:34:db:9b:ff:fd:a3:89:80:68:51:4d:fc:d8:4b:
6a:c6:ce:84:69:2b:c3:9a:f9:bd:4e:69:71:74:63:ac:de:d3:
0a:f2:98:fa:d7:0b:f6:c1:0c:70:e6:9e:13:c1:d7:65:3d:f3:
4d:0a:25:1f:a0:5a:d3:bf:7e:02:07:06:ac:c5:e7:77:eb:10:
63:2e:88:7f:bb:6c:4e:72:c9:d5:cf:59:74:ba:36:2a:90:f5:
6b:21:55:3d:fb:53:88:11:ad:4c:fb:4b:34:32:29:33:58:cb:
98:2e:2c:d9:b5:f1:22:9d:38:48:6c:7f:71:51:d6:67:2a:3b:
80:67:38:5f:8a:52:f1:ec:e3:a0:07:3f:c6:0f:9d:6c:26:68:
16:29:78:b2:54:e5:d1:c5:fe:c5:f1:61:90:5b:8c:db:bf:1f:
91:a1:2f:9b:4b:3b:b1:40:73:fc:e5:c8:83:1e:e9:9b:38:e3:
56:a7:46:1a:3d:88:10:79:5b:fb:d9:d3:96:11:fc:73:57:a5:
c5:ce:f1:80:db:e2:ca:0b:a4:0b:02:19:c5:35:62:74:db:5f:
eb:a3:e2:6d:29:0b:96:02:ff:f5:1f:6a:ba:9f:01:23:61:28:
2a:09:a8:21:9c:43:0e:b7:ab:b6:ee:34:e9:ea:be:ab:4c:9b:
2b:73:42:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:02:27 2026 by rpki-client