Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
File: MFxE6MlhoUUNCqshLw3scX0d77Y.mft (raw, json)
Hash identifier: wMKJ/kA3S4lrKYVRdv01Eqa3IadBakcVoMixmWcSrIU=
Subject key identifier: A8:4E:ED:0E:CC:E1:33:B2:3C:2C:0B:8B:F5:B3:E8:65:EA:D0:C6:1B
Authority key identifier: 30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
Certificate issuer: /CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Certificate serial: 019D2929374A0C0F10F451AC5F7BBA01FC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:01:00 +0000
Manifest this update: Thu 26 Mar 2026 08:01:00 +0000
Manifest next update: Fri 27 Mar 2026 08:01:00 +0000
Files and hashes: 1: 4s2LfJgezExAwyLPh90eBZdMtsA.roa (hash: QROHTNbuhK/OLqAPPL7ZK974ElG4KehFHzzkBDXusl4=)
2: MFxE6MlhoUUNCqshLw3scX0d77Y.crl (hash: /QmZgY50YQginTOsi+Yd8+ODWT0nUebceKsiSS44wTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:37:4a:0c:0f:10:f4:51:ac:5f:7b:ba:01:fc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Validity
Not Before: Mar 26 08:01:00 2026 GMT
Not After : Mar 27 08:01:00 2026 GMT
Subject: CN=a84eed0ecce133b23c2c0b8bf5b3e865ead0c61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6a:58:48:90:81:f9:94:d2:36:db:d5:3c:11:
40:f8:de:2b:3a:44:7b:70:39:07:63:52:60:d6:8e:
37:7f:76:b6:ec:d6:4f:fb:7c:69:24:6d:54:1d:9a:
4b:d1:46:63:40:ac:00:a1:d6:87:d8:0c:db:ac:e9:
95:28:55:3f:7b:d1:54:07:55:19:28:fc:f8:81:94:
e7:cb:3c:75:b6:5a:f1:a7:89:92:91:c2:09:51:08:
25:f6:57:0e:a9:bb:33:96:e8:f2:57:8a:d6:7d:c5:
9f:04:b3:47:b1:e9:4c:87:44:71:1d:fc:ac:96:ed:
fa:c6:64:a1:4c:bc:d5:d2:ea:6e:97:2e:29:fd:09:
09:da:36:cd:ca:0f:72:1d:16:e4:20:53:73:97:bc:
f7:bb:ec:00:54:c4:4b:73:db:1a:d0:84:cd:f9:41:
3d:b1:c8:d9:ee:17:95:9d:3e:dd:23:30:1a:14:f4:
7b:20:8a:bf:87:5f:46:f3:8b:93:e5:ec:15:a0:1e:
21:2d:f5:47:c6:dc:ce:64:28:24:0b:e6:73:a0:3e:
a8:5c:cf:d5:58:e4:f4:26:6d:72:c6:ce:89:33:15:
b3:e4:4a:e0:63:0e:75:b5:ff:3c:ed:c4:ed:78:b1:
64:ae:ce:46:d1:ce:da:88:bc:b7:fb:e8:57:de:8c:
21:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:ED:0E:CC:E1:33:B2:3C:2C:0B:8B:F5:B3:E8:65:EA:D0:C6:1B
X509v3 Authority Key Identifier:
keyid:30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e5:ef:a8:9a:52:b1:53:64:2e:b9:72:0a:7a:e6:b8:cd:4a:
27:07:95:65:c7:08:e6:8e:54:0f:79:09:98:59:39:c7:34:4a:
23:b7:f6:f3:34:4a:aa:45:91:f6:85:a3:ae:58:5e:2e:d1:39:
35:1f:7e:e4:05:69:a2:83:85:c2:0a:2f:d0:d9:78:e2:f0:2d:
75:f2:2c:3a:ac:77:e0:8f:47:da:fc:e0:1c:ac:63:23:7e:fa:
13:7f:fa:b1:fe:45:ed:8b:e2:91:9c:24:b9:8c:97:80:98:a9:
24:99:07:75:86:53:19:af:41:48:6a:45:1f:18:ec:5a:c7:37:
d6:d7:18:a6:9e:28:4e:41:bb:aa:29:b3:d0:e1:51:8e:98:4a:
a7:0d:36:9a:1b:5b:8a:3b:89:c8:1b:6c:dd:43:b6:9c:02:e9:
94:cb:59:ca:20:44:db:8b:a5:ba:ef:f1:76:ef:80:4c:59:f2:
61:62:dc:5f:cf:62:e7:50:53:67:17:bf:fd:b2:ed:a2:b5:20:
fe:b0:c5:6b:40:c1:eb:8d:23:76:98:65:27:55:96:1e:88:d0:
78:d7:a2:fd:35:72:5c:d2:64:90:75:6b:18:77:f1:06:c4:f6:
f4:0d:ad:f1:98:5d:46:38:a9:b6:55:2b:1a:be:80:eb:d1:10:
bd:b7:c0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:20 2026 by rpki-client