Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File: M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier: ofmJwBicYIxUmn7fZkvRvyQyUKnbB6ugBaRBfaRLRLM=
Subject key identifier: 8F:AA:17:A1:85:09:14:4A:BE:75:B1:D3:5F:9E:8F:E4:7B:07:A2:3A
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial: 019D26289FFBD35384E4BA1C3ADBD6B205A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 18:01:29 +0000
Manifest this update: Wed 25 Mar 2026 18:01:29 +0000
Manifest next update: Thu 26 Mar 2026 18:01:29 +0000
Files and hashes: 1: FL9A-Wc7z5VMCe364E-fjxzBfRE.roa (hash: ICmFI8eTAGCEVNybXrRIRxi+lptZELNrevDuYYLtLB8=)
2: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: 882IiBqhC3rN8DeVqKfyTUvhr8UbleZztWMPLGFweQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:9f:fb:d3:53:84:e4:ba:1c:3a:db:d6:b2:05:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Validity
Not Before: Mar 25 18:01:29 2026 GMT
Not After : Mar 26 18:01:29 2026 GMT
Subject: CN=8faa17a18509144abe75b1d35f9e8fe47b07a23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:7b:a8:3c:64:57:f2:a9:d4:44:e0:c5:a9:
50:9c:24:1a:c7:3e:7b:98:26:80:f2:e4:64:7d:34:
d9:8f:79:3f:81:02:63:66:c6:b2:59:d0:78:cd:51:
60:ed:85:11:4a:08:88:c4:fc:52:87:79:23:55:fb:
f0:97:6d:4c:2b:2e:7c:e0:8c:f8:44:dd:d6:41:0c:
8a:e8:89:e8:2d:a7:3e:98:8e:bd:2e:e0:c7:ae:38:
92:5e:84:28:75:c3:c3:52:6c:62:c6:7d:e6:3a:d3:
e7:20:a6:d7:f5:6a:6f:5a:02:e5:08:e0:b9:03:0a:
4b:61:47:9d:27:d8:66:60:ef:b5:f7:3d:fb:61:30:
33:e9:9f:91:47:ee:9b:35:bd:87:72:ef:d2:cb:d3:
8d:d5:05:8f:c3:0b:4e:3b:e6:98:5a:cd:05:d6:05:
fb:1a:ec:84:ec:3a:64:e8:37:d0:aa:c1:12:8a:23:
30:37:80:f8:27:97:57:ab:43:98:81:fc:ae:68:56:
0c:0e:6d:de:e3:28:21:34:46:f9:a7:dd:6a:0c:1c:
93:70:c0:2a:f2:a5:44:f7:97:56:07:be:de:0b:30:
f4:85:59:d7:6f:e2:0c:6a:dd:0e:dd:e1:5a:8b:dd:
f7:68:71:1b:99:2f:d5:b0:01:be:94:42:69:c7:ee:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:17:A1:85:09:14:4A:BE:75:B1:D3:5F:9E:8F:E4:7B:07:A2:3A
X509v3 Authority Key Identifier:
keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1f:a7:59:d5:08:11:a1:70:a0:77:97:b1:5a:24:32:28:cd:
47:52:f2:f9:09:57:e1:b5:7e:a2:2b:c9:17:b6:52:81:74:30:
a8:a5:1a:d0:19:46:bd:44:21:72:71:ef:7f:d2:e3:40:7a:b8:
1f:a7:0d:da:c4:d9:7f:3f:4e:95:b5:84:13:93:7e:5a:3c:1b:
5b:85:02:eb:39:6f:5b:8c:f7:62:d0:67:42:7b:6e:90:8c:7a:
74:38:0f:01:5e:a8:a3:de:d7:c0:f6:1d:e4:36:d7:c6:f5:f4:
f5:d7:3d:16:eb:ee:fe:e3:b4:c5:be:a8:bb:43:e1:0d:d4:da:
f6:87:82:53:9c:03:dd:18:75:1c:7c:08:d2:a6:93:0b:60:d7:
37:46:bb:9d:d7:37:78:94:59:48:f7:3d:7a:5c:d4:6c:9e:6e:
4a:ab:8e:64:73:1e:da:2e:15:b8:a8:18:8f:48:75:b4:17:15:
b5:9c:4a:92:5d:4f:a6:0e:0b:38:ef:9d:30:2c:e3:a2:72:f5:
4f:be:28:df:fe:0e:09:93:9d:09:00:f9:8f:68:db:ad:67:90:
dc:18:76:b7:26:14:a2:b8:a8:ca:36:4b:b3:1c:9f:58:f1:28:
0f:05:3b:ef:1e:88:8b:c4:78:a4:7d:97:f4:0c:ce:7f:6f:75:
86:d7:6a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:51:52 2026 by rpki-client