Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier: 2nfbB5CYIhi3F5vAappYwrBFyYW0YCqgPIN/Mldl/zg=
Subject key identifier: 08:B0:48:B9:34:E6:6C:76:F7:E1:59:3E:72:ED:9B:EA:97:C0:D7:70
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 019D26CCD6B6662CB28823D4C0F96DB86FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number: 14CB
Signing time: Wed 25 Mar 2026 21:00:51 +0000
Manifest this update: Wed 25 Mar 2026 21:00:51 +0000
Manifest next update: Thu 26 Mar 2026 21:00:51 +0000
Files and hashes: 1: TnxLiTU4N8IxRzgKudiN6lBfkB0.roa (hash: 84h5erlaI1tFTllY8zVF7aYQ8Di+2iwxgRfjK8j6Kko=)
2: WlLOTRCWvlIYiS-TgTY4hAdHm7Y.roa (hash: bxPUG4RUFxYGi4wK66fAhQIJ42FQsayg/q85b6OoGU8=)
3: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: M4MReEGCJddt18gQMX0g2BQOQ+OHawbDbpNuzDbJFw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d6:b6:66:2c:b2:88:23:d4:c0:f9:6d:b8:6f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Mar 25 21:00:51 2026 GMT
Not After : Mar 26 21:00:51 2026 GMT
Subject: CN=08b048b934e66c76f7e1593e72ed9bea97c0d770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:62:a9:75:3e:59:93:88:b0:52:61:27:cd:
16:65:a9:0d:44:1c:70:ef:ae:94:59:7f:27:a0:35:
9c:58:0e:fb:f5:50:a9:b4:91:ae:b6:e1:e3:e6:c2:
b3:9e:01:28:f8:ff:a7:7c:d8:eb:28:09:b0:da:14:
91:8b:79:2f:58:a6:d9:81:da:0b:14:d4:bf:7e:ed:
59:cc:d0:a7:55:b2:c2:0e:04:25:bf:17:f9:84:90:
11:93:e2:68:01:76:48:e3:72:66:87:c5:d7:8d:db:
b2:c1:b7:de:3b:41:4a:a1:78:16:10:ab:d3:b3:94:
1e:7a:fd:64:84:24:ae:3a:02:4d:a0:e9:e5:c2:6d:
04:1a:83:94:11:54:86:0e:35:71:f0:f3:8b:ff:51:
b4:d7:6b:7e:38:99:7f:73:77:2a:e2:4a:18:47:39:
0d:29:5a:5c:44:3a:4f:66:bd:38:9f:ff:08:1f:69:
4e:5e:aa:8a:3c:5f:28:36:3c:e5:60:6f:1c:b7:af:
28:7a:92:f6:97:9a:81:63:d7:6f:ad:1d:f8:5b:9e:
60:bf:51:70:e8:0d:b0:f0:d4:be:ea:ed:d8:74:95:
25:a8:d6:ee:4f:d8:cc:ed:3b:bc:4c:a4:ee:80:12:
17:47:83:8f:81:53:0f:c2:6d:42:3d:52:ea:c7:7d:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B0:48:B9:34:E6:6C:76:F7:E1:59:3E:72:ED:9B:EA:97:C0:D7:70
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:da:70:00:7d:46:bd:8e:94:d0:b4:2a:f6:f2:b4:19:54:0b:
46:f2:d4:91:b5:ac:69:69:67:5d:fa:9d:83:15:dc:eb:42:46:
9b:86:2c:0e:d7:61:f0:11:93:8e:1b:61:03:80:7d:1e:c1:7c:
34:f5:ff:eb:09:d3:9a:b5:f7:ac:52:da:05:dc:ce:02:f3:cd:
a5:83:9a:7f:d8:05:66:f3:a1:eb:95:ce:39:0a:c2:68:86:9e:
c1:fb:a3:9c:dc:a5:9f:8f:3e:18:72:a9:aa:81:c6:78:e2:ac:
71:b1:cc:f5:fd:38:12:e4:ed:bf:29:1c:52:0c:13:e8:61:12:
15:c4:fc:b6:e0:4d:47:7e:cf:f7:dc:e5:1f:d9:39:78:ee:ce:
20:19:1f:e5:09:6b:cc:8b:c0:54:1b:7f:ee:b5:13:02:07:a1:
2e:1e:8d:f0:b9:ad:69:a8:ab:43:29:b8:33:e1:6b:ad:ac:c5:
21:3a:cc:c1:5e:db:e9:9f:c9:c3:62:7c:31:1d:fd:54:05:3e:
94:8b:5d:34:67:e2:fa:24:d3:70:bf:0e:5b:27:33:23:71:a7:
05:9d:e0:7b:29:6e:16:15:c0:aa:71:24:70:ac:06:27:b5:ca:
5d:1f:eb:e6:cb:e6:93:8c:36:75:3e:16:33:44:0b:4f:ba:9f:
59:2a:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:01 2026 by rpki-client