Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
File: MmHv5idxJgTzW5rZzL8DaGlfUBM.mft (raw, json)
Hash identifier: IyGKtoulDRZEGKnlsXGU+4lEM2tQjT43bEjGoxQe5EA=
Subject key identifier: 70:3C:CA:37:A4:64:98:AE:A0:01:9C:28:9A:E7:09:AF:FD:5A:9A:31
Authority key identifier: 32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13
Certificate issuer: /CN=3261efe627712604f35b9ad9ccbf0368695f5013
Certificate serial: 019D2816A65C133B20422D1754F7D35A38F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
Manifest number: 02D0
Signing time: Thu 26 Mar 2026 03:01:06 +0000
Manifest this update: Thu 26 Mar 2026 03:01:06 +0000
Manifest next update: Fri 27 Mar 2026 03:01:06 +0000
Files and hashes: 1: 8UOImPECS7Tb8bv1qOFKL-C2oI4.roa (hash: 1X/4/xyAeuRwfLo60MnDR1gYBOVEUFBCMmt3e2Crits=)
2: MmHv5idxJgTzW5rZzL8DaGlfUBM.crl (hash: JgrQe5J50XZH8lBLwjAFipNaLN3gZxViDDhRQwMLVsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a6:5c:13:3b:20:42:2d:17:54:f7:d3:5a:38:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3261efe627712604f35b9ad9ccbf0368695f5013
Validity
Not Before: Mar 26 03:01:06 2026 GMT
Not After : Mar 27 03:01:06 2026 GMT
Subject: CN=703cca37a46498aea0019c289ae709affd5a9a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1d:11:da:5c:cf:3a:9a:e7:3e:87:e1:08:f4:
e8:7c:3f:48:54:bb:d0:e2:9a:71:5a:87:0a:24:fa:
3d:e7:94:4d:7e:67:98:be:ac:cf:c5:67:34:1b:50:
ab:73:11:13:e1:e4:c8:48:28:fc:5c:2a:eb:4f:55:
c5:2d:71:b1:2f:7f:d8:15:3d:bd:66:08:eb:34:d1:
b0:3d:3d:29:8e:a0:77:79:ec:fe:56:63:ff:d3:5b:
c5:1f:06:e8:c4:46:fe:75:16:da:49:bb:e9:8c:61:
66:b0:56:04:02:ff:fc:15:04:73:0b:68:b6:14:31:
56:3d:20:fa:bc:47:05:ee:d4:2e:55:29:96:bd:a4:
d2:52:63:52:2c:da:67:f0:2f:bd:54:28:30:25:ec:
0b:b8:d1:c7:bf:07:da:45:81:46:6c:25:22:91:3e:
53:b9:af:5f:c6:94:87:db:68:97:94:70:47:09:6e:
03:ff:cf:fe:5e:34:6a:ea:fa:b7:a3:8b:c3:28:3f:
a8:2f:10:49:b7:e3:10:d7:ad:65:d7:7d:22:5e:ab:
4a:ae:7a:b7:26:27:be:24:0a:3a:df:b2:53:df:90:
e2:24:2c:04:f1:cc:e9:48:b4:a0:68:87:b1:90:0e:
13:16:e0:fa:80:35:f3:3e:9d:3a:35:9c:9d:d4:2a:
18:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3C:CA:37:A4:64:98:AE:A0:01:9C:28:9A:E7:09:AF:FD:5A:9A:31
X509v3 Authority Key Identifier:
keyid:32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:76:e2:fb:20:c5:0d:f9:af:ab:80:47:fe:2a:f4:c6:2a:ca:
43:92:c4:70:4f:b2:00:71:77:03:63:47:df:09:90:b3:d0:fa:
4d:0a:ee:fe:38:11:7a:ce:fa:e7:f9:bd:3a:15:a0:a2:dd:38:
d7:9f:72:ba:f3:48:8d:fa:85:31:c0:a8:40:98:55:08:e5:14:
b8:96:da:4b:1a:93:3f:f1:b7:b4:1d:29:ec:1d:63:11:4e:38:
0f:28:3d:0c:45:15:39:ed:17:71:0b:e7:96:fc:a5:0b:8d:21:
ea:c6:7a:78:8d:c1:a3:54:74:a5:56:10:bb:ba:fe:9a:6c:27:
2a:87:6c:ce:5c:2a:54:2e:67:91:2c:63:67:8f:a0:13:f7:aa:
13:3d:9b:42:29:3d:b5:e9:6c:9f:0b:da:2d:e8:36:6d:d4:7a:
ba:d5:03:3f:55:44:d9:37:1d:cd:8b:59:bb:b1:e1:37:db:38:
85:c9:0a:6f:5a:54:71:ce:df:da:c6:6d:a2:8f:b3:9c:95:8a:
ed:66:bc:d3:30:2a:6a:71:f7:f5:ff:a1:2e:76:83:27:f6:bf:
ef:7f:4a:a9:1b:91:e9:c1:b8:6f:00:e0:0b:e8:0a:45:8a:3e:
2d:2f:82:6e:6b:55:36:1b:a4:1b:6f:47:df:f0:96:5e:f6:e8:
f6:0d:97:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:49 2026 by rpki-client