Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: EsM7hQIT2b+ToCTLeBRIR/rMmuEPDr6EwV5OWsOuh7c=
Subject key identifier: 35:C0:36:2E:56:C1:4A:12:8E:79:FF:60:11:BE:A9:13:0B:7B:91:6C
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 019D27A884C2BB242CAEC49F2F30482ED290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:00:48 +0000
Manifest this update: Thu 26 Mar 2026 01:00:48 +0000
Manifest next update: Fri 27 Mar 2026 01:00:48 +0000
Files and hashes: 1: UlgMubvL0b05NPo0OYBZNNMYbpc.roa (hash: 5BRGLDe+CLca7bIM6Jp7/JjKHJiwcAuqklCH8T20ndI=)
2: WaF459Cc2uKlfeZQW71nNqM2m1o.roa (hash: INQ6UPfyYeMJRdxCsd5oJRH61VvqzRfFQEhDkUi1R2A=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: 0FtmeVyR+PscoqWJYk9tO3e26xPlbqHiVtbpkx3KDVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:84:c2:bb:24:2c:ae:c4:9f:2f:30:48:2e:d2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Mar 26 01:00:48 2026 GMT
Not After : Mar 27 01:00:48 2026 GMT
Subject: CN=35c0362e56c14a128e79ff6011bea9130b7b916c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:49:ac:0c:88:40:99:ec:cd:82:ba:2c:4e:
2f:22:aa:2e:af:40:4b:42:43:46:84:64:df:1a:fe:
c8:57:9b:5b:5f:25:86:cc:c2:8c:90:16:db:9f:e3:
b7:a8:dd:cc:ba:11:ea:ec:af:b0:95:9e:d8:9c:30:
6d:d5:02:42:62:ed:2e:22:86:26:12:21:bf:d1:db:
2f:fe:f3:8a:ca:bb:b8:47:71:49:65:f9:95:91:6b:
6e:63:7b:c1:2b:7f:50:9c:de:57:11:65:0f:fc:10:
16:76:f5:9f:f6:e3:fa:0c:f1:a7:4a:60:ad:8a:bc:
a0:2b:ca:1f:eb:08:c8:7e:5e:b3:74:6d:5a:29:e2:
f7:89:99:2b:99:13:c6:7d:08:94:f4:9f:34:cc:39:
e0:02:a0:45:95:0e:90:08:45:99:50:01:2a:34:c0:
92:be:ae:35:4e:89:e6:64:48:4d:09:a5:2e:7c:9f:
a4:56:1a:e6:e2:65:60:20:63:6a:48:80:34:11:bc:
f5:59:85:a8:4c:30:62:76:52:d0:7d:6d:f4:a8:d6:
5f:e5:94:fa:a9:41:39:9d:85:54:90:4c:57:cc:20:
02:ef:3e:b8:05:06:c5:ed:8d:64:bc:ad:f5:fa:a6:
07:1d:ce:e6:1a:24:07:8d:d5:75:25:b7:fa:21:2c:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C0:36:2E:56:C1:4A:12:8E:79:FF:60:11:BE:A9:13:0B:7B:91:6C
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ea:14:22:90:5e:18:79:46:b5:9f:c8:91:68:d1:c3:15:75:
8e:5c:e1:2f:71:74:f2:59:87:69:96:e5:1a:95:bc:39:ee:86:
a1:5d:55:24:6e:0c:df:cd:27:ed:d9:3e:d9:e5:d9:ec:dc:d5:
68:6f:38:64:72:4a:c8:c6:c2:02:83:25:73:60:65:af:37:e0:
4b:1e:8f:3c:63:34:96:1d:ba:bb:34:44:dd:c2:ec:42:c6:c7:
e9:c7:29:be:9a:d3:05:65:0d:73:7d:c9:30:68:a6:5d:32:33:
b7:a8:27:00:77:08:54:f6:fb:75:cf:67:ce:85:2b:56:84:ca:
bd:8c:5e:0d:1c:9b:98:1f:d3:0c:ef:85:4f:72:5d:f7:4f:d8:
03:e2:86:d1:f4:31:b0:64:5e:6a:2c:e6:35:7d:59:78:ed:cf:
46:05:1b:e6:f6:9e:33:ec:6f:d0:d2:df:85:55:57:df:08:84:
f8:f6:22:17:09:fd:7a:17:93:de:03:62:8b:88:ff:a3:12:23:
f9:92:c0:a3:e0:de:0e:fe:c2:fd:4b:39:ec:4f:40:cd:7c:54:
c8:be:79:2e:1d:cb:6c:6b:d6:ff:24:45:fe:af:e5:00:65:f4:
5c:ba:5a:c0:d0:e0:1c:4d:d3:b2:48:3c:dc:ce:46:50:e0:45:
7c:4c:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:01 2026 by rpki-client