Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier: MHnLVQ029ZNhgkhYE7sjUbIQKtNe5M5QurA9VtSZuRM=
Subject key identifier: FA:65:D5:FE:ED:AD:BD:E5:FB:D5:36:EC:92:89:41:66:3C:9A:C2:DD
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 019D273B3F2CA75EE3C577636E6388DD5E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number: 097E
Signing time: Wed 25 Mar 2026 23:01:27 +0000
Manifest this update: Wed 25 Mar 2026 23:01:27 +0000
Manifest next update: Thu 26 Mar 2026 23:01:27 +0000
Files and hashes: 1: 3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa (hash: AzZG+4D5GxDUpzfM6ZHMgxfiWGvCIzXIyJrcYsz9Als=)
2: _WqApLTSHnn-QALIm4js6GY_w-E.roa (hash: vRro0DgNa75sk/Unt/zDQwG9CVSw25Sr8T6Yt4LIK54=)
3: e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa (hash: 2MJbHB4+HtGJ4wxkgZ0Dl95e/tJehFc1YChaP86nwFM=)
4: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: 0fhyuD3ue0OTTriAdwvcvvgFyO0CouxiW9RzycEMlX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3f:2c:a7:5e:e3:c5:77:63:6e:63:88:dd:5e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Mar 25 23:01:27 2026 GMT
Not After : Mar 26 23:01:27 2026 GMT
Subject: CN=fa65d5feedadbde5fbd536ec928941663c9ac2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:61:00:96:0b:51:71:5b:1b:0a:59:e4:32:28:
d7:a6:e6:e8:3f:67:cc:1a:a5:7b:b6:40:cf:ca:fb:
a7:7b:0f:09:89:93:c1:3b:f8:19:c3:e3:c1:90:03:
93:94:70:f0:89:d9:c6:c0:1f:01:e1:27:b9:48:62:
f8:01:0d:0a:46:68:c8:01:60:54:05:c6:06:65:ca:
83:aa:e5:ae:f2:aa:b9:2a:47:76:81:0c:02:20:53:
ab:4d:8b:9f:b4:55:29:79:e2:f8:ff:df:94:4e:bc:
c8:58:3a:8b:fe:4f:1f:1f:d4:bf:13:b2:2c:f6:2d:
8e:76:1e:a7:15:72:e4:97:bc:68:75:23:c6:e3:fb:
e3:94:8f:88:8f:fa:a8:87:71:90:ad:d5:a7:3c:6d:
3c:5d:99:f3:3a:8c:b2:ca:82:7f:5a:72:f9:06:8e:
2b:3b:dc:53:6e:5e:70:49:34:8f:8a:7c:2e:c4:dd:
1d:b8:91:e7:ca:19:9e:58:ad:0d:5a:5b:f7:f1:83:
96:08:86:f5:c9:7b:da:84:a9:39:18:71:91:ca:5c:
8d:01:01:92:38:e6:6f:05:99:03:f5:b9:59:cb:27:
44:a8:36:f6:e8:0a:ea:5b:86:c0:2a:19:4c:c4:cf:
1a:9b:a9:5b:ea:56:1d:e9:24:b3:b7:65:b4:c0:c4:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:65:D5:FE:ED:AD:BD:E5:FB:D5:36:EC:92:89:41:66:3C:9A:C2:DD
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e5:a0:ec:f7:98:e0:fd:b3:6d:26:65:8a:1a:88:24:25:6e:
83:04:42:33:0c:e9:c8:09:59:20:63:f8:1e:73:c9:19:47:a1:
a0:62:f3:c6:df:cb:d4:c0:86:37:7e:f3:75:c0:e7:c6:b2:74:
9a:8d:f7:3f:ff:c8:b6:93:8b:82:cf:04:6b:ab:f6:3f:c4:fd:
35:9b:3e:9a:e7:90:7b:7f:21:c7:d1:cd:2a:1d:44:ed:dc:b6:
df:3d:f5:a6:a5:89:a4:fc:ca:e4:0a:01:9c:32:7d:8b:33:a0:
b2:43:ee:6b:1c:1b:28:60:44:d9:23:2c:9c:a7:b0:e9:b0:1b:
6f:f9:9f:9f:70:26:d2:5d:a6:44:ab:aa:95:2d:6a:94:6e:cf:
b2:3e:5a:25:c7:4f:ad:ae:15:87:db:08:d7:d0:92:5a:ce:ac:
6e:47:b5:fa:2b:34:04:99:a7:8b:85:8f:92:31:73:63:10:e8:
54:10:88:46:64:62:b9:56:41:65:8c:ee:e0:4e:ea:41:84:d3:
2c:fa:4b:1f:4b:3f:a2:91:1d:5b:d2:9b:08:3a:a7:f7:de:20:
24:d2:6a:a2:66:77:54:fa:f2:7f:a2:ec:c5:47:74:54:17:14:
ee:27:20:75:8e:56:70:04:ec:37:c5:31:99:80:14:b2:50:35:
35:a7:d6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:33:30 2026 by rpki-client