Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
File: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft (raw, json)
Hash identifier: GQ55/9ObEIEQgjkfYd/pmGSKF8G/qTXb2iPwuQH6Sr8=
Subject key identifier: 5F:91:86:28:1C:18:12:F9:55:D8:29:DA:54:F4:2E:81:7D:63:D8:D4
Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
Certificate issuer: /CN=3238786e9f70e6db74230d72675a483bd24ef256
Certificate serial: 019D2627FEE8E6B87F78570DA1CC115140B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
Manifest number: 173F
Signing time: Wed 25 Mar 2026 18:00:48 +0000
Manifest this update: Wed 25 Mar 2026 18:00:48 +0000
Manifest next update: Thu 26 Mar 2026 18:00:48 +0000
Files and hashes: 1: 6y-m_Tv-2HoY3JwEXM2VnrUnxqw.roa (hash: E8R/wgypDJ4w/RMOeLSWRMfPnr8DkZ+AnD4la/0OefA=)
2: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl (hash: /5TjKrjpR2lZBLlU9AZ6DR4F9Gq8ZdsHDQ28jUgYC2A=)
3: g6_rqmKpsS185RvKdmzQuRpD6EA.roa (hash: 8MQ+OY82cMO0+coHMBrDE3ACEbDQROHmItcidzbIiKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:fe:e8:e6:b8:7f:78:57:0d:a1:cc:11:51:40:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256
Validity
Not Before: Mar 25 18:00:48 2026 GMT
Not After : Mar 26 18:00:48 2026 GMT
Subject: CN=5f9186281c1812f955d829da54f42e817d63d8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:6f:e2:93:99:d9:91:28:07:83:70:af:f8:
ca:39:3c:28:25:0e:31:33:e9:5d:3e:29:75:cf:b7:
fa:c1:6d:53:dc:9a:a7:6e:ad:7c:03:23:94:fe:66:
9c:f7:a5:b4:be:92:14:30:16:c7:8a:55:67:6d:c6:
7b:7d:dd:2e:b7:35:d5:b8:a2:85:ad:93:a7:fb:4b:
24:13:6f:31:7f:6c:ae:8e:6f:bb:4d:57:e4:77:5b:
34:c9:62:49:45:d5:6d:8f:c7:3f:91:99:d6:68:35:
1c:6d:48:3f:d3:92:43:36:c8:5c:67:ae:bc:1c:40:
9f:53:80:8c:46:c6:d8:2b:02:34:af:c0:48:28:3d:
a7:b8:02:ef:f0:9d:5b:37:9a:fa:cd:de:5f:31:02:
53:8c:09:b0:dd:eb:a6:e0:62:49:4a:b2:30:e5:a3:
93:fe:ba:19:4d:d9:e2:03:7c:fd:4a:73:24:04:4d:
db:8a:17:13:3e:90:70:b8:b9:12:64:f7:11:e4:c5:
a8:31:fd:07:23:b1:ae:81:b8:a5:45:1c:19:de:af:
45:2d:20:48:1d:4a:d3:a5:71:41:f0:f0:f0:ef:d0:
53:38:ee:e6:26:25:b1:a9:e1:31:91:15:1a:76:08:
82:49:0f:df:ae:1d:cc:99:57:81:80:51:9b:58:e9:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:91:86:28:1C:18:12:F9:55:D8:29:DA:54:F4:2E:81:7D:63:D8:D4
X509v3 Authority Key Identifier:
keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:29:fe:4a:81:59:16:52:03:46:61:16:c3:8d:e6:f1:48:a0:
c0:1c:14:73:87:3e:1f:33:4e:f8:73:3b:45:58:08:0d:ab:b7:
8d:19:d8:1e:be:35:2d:c6:80:fa:8c:6a:71:09:ab:a1:e7:38:
49:55:7b:48:b6:41:bb:3c:25:92:96:1d:ee:fe:0c:57:d4:7f:
f9:54:de:45:70:2a:8b:4a:1f:1c:b4:e5:72:73:50:ad:d5:f6:
17:12:9d:ee:91:0f:7a:66:0a:f4:61:d6:ea:22:2a:84:68:b9:
71:e9:84:d2:07:d3:2e:89:09:b7:9e:db:0f:d8:2d:0f:04:1d:
4e:52:de:1b:5c:47:f0:a0:61:45:0c:94:7d:6f:ac:e0:12:20:
5a:58:fd:e3:0d:49:2a:da:02:b3:f2:92:75:66:f8:d9:7e:4d:
80:15:f5:4e:c2:2b:b1:69:4c:cd:43:dd:4b:30:f5:0d:a3:fa:
37:06:dd:b2:bc:a4:3b:69:3b:0d:c2:a1:41:e8:72:b8:80:0e:
70:f7:d5:0f:55:da:18:1d:c9:4b:1e:8d:2c:73:06:69:e3:e0:
5b:53:0a:cc:ba:9f:71:c1:e3:b1:ff:cb:01:2f:b8:f3:53:ca:
e8:14:5b:e3:ed:1b:e0:20:c3:38:50:81:48:ee:31:9c:ce:ff:
46:be:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:33 2026 by rpki-client