Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
File: mRyTTgj1egPvTro2taTaeYolIgc.mft (raw, json)
Hash identifier: QF1qktULm4pH4wdL6/FqMUALUihECL2hKcAzjFMdOLw=
Subject key identifier: 69:F8:67:B6:B2:B0:2C:B6:67:E5:45:4B:C1:2B:A6:6F:0E:15:E6:FD
Authority key identifier: 99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
Certificate issuer: /CN=991c934e08f57a03ef4eba36b5a4da798a252207
Certificate serial: 019D26CD77EBFE3BD4E29D4C56928761646C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 21:01:32 +0000
Manifest this update: Wed 25 Mar 2026 21:01:32 +0000
Manifest next update: Thu 26 Mar 2026 21:01:32 +0000
Files and hashes: 1: lrT-dpG3LRk20hmeOuSNfVtTTUU.roa (hash: JUdomAkf1Kcn8Ijb1exHH29GRd544m6/vPrvf50qtAQ=)
2: mRyTTgj1egPvTro2taTaeYolIgc.crl (hash: 0R9fEfdLi5gJwxRhRYCKcAFhvsYSWc76Ifx8uOGEE4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:77:eb:fe:3b:d4:e2:9d:4c:56:92:87:61:64:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991c934e08f57a03ef4eba36b5a4da798a252207
Validity
Not Before: Mar 25 21:01:32 2026 GMT
Not After : Mar 26 21:01:32 2026 GMT
Subject: CN=69f867b6b2b02cb667e5454bc12ba66f0e15e6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:77:0c:a7:05:88:0d:80:09:58:6e:c0:83:
c5:75:07:3f:ba:35:74:62:e0:4f:95:dd:e8:3c:20:
46:38:45:32:89:e4:fc:de:0b:49:ae:1f:c0:d4:eb:
94:79:e4:9d:47:79:74:40:c6:af:4a:db:7f:f6:02:
95:44:0b:00:e4:0c:06:ba:3a:f1:8a:4d:91:e0:22:
f1:3a:bb:dd:e9:2a:b9:76:5d:2e:fc:9e:b5:7b:e8:
94:8e:9d:c5:3b:38:cf:65:b5:0e:32:d5:39:e8:91:
8a:7e:6e:7b:8b:01:86:2e:38:78:1d:3c:da:bc:ab:
81:e0:e5:63:af:66:2d:93:2f:88:fb:7c:f4:8c:5f:
d0:be:03:b7:8a:e8:2c:12:cd:eb:7c:81:76:83:ce:
25:32:2b:b5:b8:ba:42:b1:5c:50:f0:05:9e:88:77:
da:8e:1a:1e:86:3f:b1:22:ad:ec:04:fb:3b:d0:d6:
dc:7d:ac:b9:3c:73:d9:32:fe:fe:75:07:87:32:53:
41:15:9f:de:1f:9e:0d:3f:df:15:9f:5c:17:32:07:
2d:59:e8:90:db:48:1f:28:aa:e7:65:44:5b:3d:7f:
a3:c2:54:2a:73:d3:13:3b:85:d3:76:b3:6f:62:2e:
c5:35:ac:85:5b:32:99:d4:27:cd:02:d6:84:68:9f:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F8:67:B6:B2:B0:2C:B6:67:E5:45:4B:C1:2B:A6:6F:0E:15:E6:FD
X509v3 Authority Key Identifier:
keyid:99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5a:df:09:a4:29:b8:66:08:0d:4f:27:d5:72:de:91:c0:02:
84:7d:48:84:17:bb:77:53:6b:94:29:85:f9:fa:5c:5b:50:2a:
b6:b4:50:9d:20:44:60:cc:dc:2f:ca:76:8a:58:82:75:81:4f:
14:ea:14:24:39:75:af:48:ce:b1:eb:7d:52:da:bd:4e:dd:c0:
4d:09:e1:78:40:b3:0e:b0:25:f0:b2:2b:c9:d0:bd:f2:a1:86:
3b:49:69:63:f2:2f:4f:3d:55:23:d1:3f:57:5c:df:a3:61:ed:
79:2d:c9:9a:a7:36:66:07:8d:55:b1:93:fd:22:ce:a1:eb:ba:
6d:11:af:51:e3:52:f8:aa:de:c3:06:51:b5:79:d3:96:af:fd:
d6:dc:71:9e:32:d8:13:fe:07:11:40:a8:7e:db:b3:bf:a5:90:
a6:11:e2:2d:a7:4e:0b:a1:4d:da:64:6f:2b:f1:d8:3b:95:40:
2a:dc:63:dc:e1:94:11:30:59:03:87:a3:51:b3:c5:75:91:3d:
2a:d5:95:81:f3:c3:82:00:95:4b:33:e9:58:94:cf:bd:00:2e:
64:02:5d:bc:67:6d:78:f1:de:ec:da:ff:63:40:c7:8e:3c:1d:
0c:92:25:e8:b2:aa:7d:74:d4:c5:78:f9:aa:1f:05:d1:58:02:
c8:7c:1c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:05 2026 by rpki-client