Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File: mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier: Y/Xpri+nOcq7R4/UKiIjl143wO7tlQM+7OheCeB6m5s=
Subject key identifier: 0C:A4:66:32:90:55:D9:03:B3:E3:E5:34:AF:65:2A:7A:5D:E8:D6:FE
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial: 019D27A90651E638CC80D0D54CEC31176704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number: 1575
Signing time: Thu 26 Mar 2026 01:01:21 +0000
Manifest this update: Thu 26 Mar 2026 01:01:21 +0000
Manifest next update: Fri 27 Mar 2026 01:01:21 +0000
Files and hashes: 1: D1heTXn7CKy5zLZ_HwZK9LTU77c.roa (hash: 8+cYEf9ivILDKmKrQsHq9USPOFeHqeF4AHnuJu39UqI=)
2: SpSWWIAX_co-S7OGVe4xxOaTumQ.roa (hash: eWFs5jFFJQvUBfi8O0eZY0oTE1BIWFbt9F0ZJ8qa89c=)
3: fI9PBxiiMOsKCtnOXwqzP5WZ3iw.roa (hash: y1cXN1mGBdJu2MTeUqDUwC/XHDAJM3lueicXGuEYI3I=)
4: lBg3_ekP2XBYVM3th5LmKxYKUuE.roa (hash: DDkeLmqGCMtQYRPOsdUTG5xK68Edb+Mfg+tAtB+HqA8=)
5: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: d0mqEryePJ3d8Vbvot4Idiv3Ps6bFCUje8eqnoaciio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:06:51:e6:38:cc:80:d0:d5:4c:ec:31:17:67:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Validity
Not Before: Mar 26 01:01:21 2026 GMT
Not After : Mar 27 01:01:21 2026 GMT
Subject: CN=0ca466329055d903b3e3e534af652a7a5de8d6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:71:f5:54:8d:69:c2:c1:2d:f7:3a:a9:ad:f6:
89:da:0a:ea:c9:09:35:29:1d:73:67:db:6d:72:8d:
5a:b9:c4:f3:8e:68:65:1f:12:2b:89:b7:60:75:78:
2b:6a:c6:79:e4:66:85:af:b3:3e:92:09:0a:8b:7b:
0c:78:3a:13:ef:fd:93:30:37:da:0b:ae:d5:cb:8d:
9d:ea:4a:44:08:19:86:19:2d:7d:d9:c3:fc:85:cd:
55:31:92:35:8a:82:a9:3c:f1:46:18:8b:9a:0f:f8:
37:ef:29:72:d4:e4:c8:61:bc:02:08:94:1c:50:13:
a0:1b:88:6a:c8:b6:7d:d5:de:52:1d:f5:06:d3:b5:
d4:5c:ae:9e:2f:de:a1:9a:4f:cf:84:55:63:ff:fa:
dd:57:2f:59:b8:0e:8c:bd:18:cd:dd:91:f0:22:4b:
26:e5:f7:82:0b:2b:2d:19:56:5c:18:2c:60:05:c2:
f5:29:6f:cd:03:9c:95:0f:9b:e7:05:fd:9e:0f:aa:
6a:86:89:58:59:0e:82:c4:97:c0:ea:fd:a3:23:57:
2f:00:c7:37:f5:b5:94:25:e2:82:91:8c:d6:1e:7e:
4d:65:7b:8e:8c:4a:d2:24:df:05:82:cb:66:44:d1:
d7:d2:07:de:19:8d:22:e0:b6:6a:65:f8:b8:35:a0:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A4:66:32:90:55:D9:03:B3:E3:E5:34:AF:65:2A:7A:5D:E8:D6:FE
X509v3 Authority Key Identifier:
keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1e:51:f3:34:e1:15:74:d2:79:a6:45:ee:86:c2:3e:74:eb:
ab:53:d2:49:d2:c7:98:1e:31:f3:ea:7b:f8:db:67:47:7b:d4:
91:92:81:53:5a:d4:8e:5e:b1:5f:ce:d3:20:c9:5e:f6:b2:b7:
0a:f5:67:5a:8c:d0:a1:b2:29:8f:d5:bd:10:7c:d1:84:fb:0d:
25:e8:79:db:8d:13:36:4d:f6:0b:9e:e6:21:e9:08:ee:60:ca:
84:ef:68:4e:4c:72:32:fd:21:35:a1:36:b7:36:1a:68:2e:6f:
a0:84:7c:b0:e4:20:79:7d:c5:2b:0e:e4:3d:7c:7f:44:a3:ae:
4a:a1:b1:cc:58:5c:94:2d:b2:67:f9:07:80:c9:52:f3:0a:ca:
c1:64:8a:bb:58:f9:92:16:5f:2b:a0:b3:92:5d:e0:b0:c5:b6:
f0:59:3c:23:62:a8:98:f2:f1:57:1e:fc:d7:07:69:7a:05:93:
09:c8:30:8f:ee:14:b8:09:c8:b2:14:47:48:44:22:84:38:54:
8e:43:7a:a3:91:0b:c5:4a:a0:8c:01:3c:7a:04:54:cd:22:fb:
a0:ce:72:c8:a2:83:f6:a6:bd:0e:a4:69:11:4f:37:ea:b2:98:
6b:d8:94:77:8e:2c:d4:14:11:d3:86:3e:10:82:51:47:a9:07:
77:dd:4e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:24 2026 by rpki-client