Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier: vATgyKmfwLne4OtViA1jAAai7Div4PGphwnTgMeQvZo=
Subject key identifier: B6:63:12:28:1A:0C:C2:53:25:AD:A3:2F:80:86:F9:AB:85:23:E6:AA
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 019D29299AC7B93272FBC07F349F30F7B61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number: 097F
Signing time: Thu 26 Mar 2026 08:01:25 +0000
Manifest this update: Thu 26 Mar 2026 08:01:25 +0000
Manifest next update: Fri 27 Mar 2026 08:01:25 +0000
Files and hashes: 1: 3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa (hash: AzZG+4D5GxDUpzfM6ZHMgxfiWGvCIzXIyJrcYsz9Als=)
2: _WqApLTSHnn-QALIm4js6GY_w-E.roa (hash: vRro0DgNa75sk/Unt/zDQwG9CVSw25Sr8T6Yt4LIK54=)
3: e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa (hash: 2MJbHB4+HtGJ4wxkgZ0Dl95e/tJehFc1YChaP86nwFM=)
4: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: TBX2kUnp9JrTTJeuYjKA+X56NfkpK4OstR5nLqyiGzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:9a:c7:b9:32:72:fb:c0:7f:34:9f:30:f7:b6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Mar 26 08:01:25 2026 GMT
Not After : Mar 27 08:01:25 2026 GMT
Subject: CN=b66312281a0cc25325ada32f8086f9ab8523e6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:bf:a9:6d:8b:cb:37:15:54:c9:33:e8:49:
b9:4d:5f:47:e0:62:1f:4c:ba:a1:2c:1e:81:f4:d1:
a1:24:7d:67:e5:66:3d:f4:80:6f:3d:99:a6:70:3e:
69:6b:82:69:c3:b9:77:5e:8b:95:88:01:3e:2c:45:
5f:aa:ae:7f:d7:26:04:91:b7:40:6c:24:48:40:bf:
11:2e:9e:ad:97:4d:e6:cd:d9:2c:b7:4b:90:f3:c3:
43:e2:ca:75:4b:bb:d1:b2:21:f9:d9:8d:50:e6:d3:
8c:1a:70:f8:e7:b8:e4:5d:37:cb:32:e5:e9:e7:8f:
77:a2:6b:1a:88:7e:9b:40:c6:55:8f:e1:ec:03:a4:
34:ca:52:6d:54:b8:40:f6:af:20:4f:55:4f:ac:03:
39:49:de:cb:76:32:a5:10:15:a0:b9:61:56:10:15:
88:8b:fc:00:73:15:2c:91:9a:5a:67:5a:7b:85:83:
71:7f:7f:d8:7a:55:01:e6:5f:4d:c3:52:6c:13:ea:
3b:26:d2:b0:8c:30:34:1c:41:d0:49:4b:20:e2:2f:
15:4e:3f:82:a9:87:2b:4d:4f:1d:15:a6:45:33:ef:
49:c8:44:82:81:a8:03:29:51:12:e9:b3:95:4c:67:
a4:2c:44:8f:6d:de:99:e0:3b:2f:e7:8e:e7:c0:cc:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:63:12:28:1A:0C:C2:53:25:AD:A3:2F:80:86:F9:AB:85:23:E6:AA
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:17:14:6b:1e:7d:50:22:03:db:0d:ae:8d:dc:8e:cc:66:9c:
37:de:61:7a:b0:e9:66:03:84:d7:c5:14:35:e2:b6:de:d8:1e:
3f:b9:15:a9:8e:f8:a4:d6:67:23:12:82:48:85:cc:55:e6:1e:
7c:95:51:78:b3:b7:68:8c:08:81:fc:fc:dc:52:55:e1:3b:c3:
38:6a:16:0c:86:63:7d:26:00:f7:1b:ee:3b:83:72:b3:52:61:
12:04:32:b9:b2:15:91:6c:93:79:e1:d9:b5:f6:68:3a:47:c7:
7c:eb:13:03:4f:4d:8e:61:6f:04:2a:f5:07:2f:65:ea:c8:ab:
8f:fd:af:fb:96:66:51:20:7d:92:2f:35:5f:69:f4:52:11:f4:
7a:cb:51:4c:55:c5:64:13:54:e3:7b:37:aa:0e:59:cb:c3:66:
fd:c1:91:91:a6:86:db:cc:0d:02:28:8f:cf:1a:ae:f7:06:35:
8c:f8:ce:44:5c:e7:a3:bc:9e:2b:02:12:1f:67:22:ed:8c:1e:
f5:3e:93:f3:c7:ea:e6:aa:48:9f:0f:b8:b5:08:43:43:37:90:
05:df:a8:2d:e5:9f:d7:a5:d2:f1:7d:fe:1f:1d:4a:30:9a:4f:
6d:3a:10:0b:66:09:3d:d8:cf:fe:84:f7:69:96:49:5b:1c:07:
d4:19:f8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:44:51 2026 by rpki-client