Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File: c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier: 5m3gJtwBqOu8frSvllqXGxiAIEtRE+rGZ4AGZRqWYH0=
Subject key identifier: EB:42:07:1E:5B:22:95:D7:27:F8:AB:08:B8:FC:70:FB:D0:73:25:14
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer: /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial: 019D265FD14E4766BD57A96CE1273B60397B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number: 0995
Signing time: Wed 25 Mar 2026 19:01:46 +0000
Manifest this update: Wed 25 Mar 2026 19:01:46 +0000
Manifest next update: Thu 26 Mar 2026 19:01:46 +0000
Files and hashes: 1: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: U1fr7FokRcqwyeTJwhUeEFsV3fK+FXD/LMcAqz870Hc=)
2: ibsoqErDKT3266b2vH5vf8KZDA0.roa (hash: UrhNuNL7GgbO0jHlNAEUHP2GLPJjzZnieCjHTk+nkGg=)
3: pZwVWQ0lcHojahu0_rV2N3zpQcw.roa (hash: J+F2E6hLoP7AmyOiwDWr5K7X8LPnv6yqpXFURrTE1yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d1:4e:47:66:bd:57:a9:6c:e1:27:3b:60:39:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
Validity
Not Before: Mar 25 19:01:46 2026 GMT
Not After : Mar 26 19:01:46 2026 GMT
Subject: CN=eb42071e5b2295d727f8ab08b8fc70fbd0732514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:cd:e6:36:61:17:b5:42:a3:74:7e:02:85:
53:f7:7f:09:7f:08:52:dd:15:ad:8c:55:39:ca:57:
c0:3d:a2:90:ca:f9:46:eb:e8:47:02:54:59:e4:25:
0c:fd:e9:40:d5:9b:0d:40:23:61:17:5f:bb:95:85:
1e:e5:8b:15:95:2a:61:0c:f7:e9:bc:a4:f6:62:f3:
9b:63:2e:4a:2a:ca:e1:c2:62:dd:68:4c:50:90:f5:
f9:88:6b:c6:b0:93:d7:e3:27:fc:44:cd:49:00:37:
af:85:79:1d:a9:70:49:3d:95:17:de:62:a3:b9:73:
60:e5:bf:db:a5:66:df:e2:bc:44:b8:e0:32:30:0c:
e8:6c:69:35:19:8b:3a:ff:69:1d:a1:fc:0c:6f:a8:
3f:29:ca:89:f0:c9:57:a7:a7:88:16:3e:54:17:2f:
d9:fd:bd:b7:16:5c:6d:33:d3:c1:65:25:ad:56:c9:
d5:f6:4b:89:f5:aa:17:f4:cf:cb:59:68:0f:ef:68:
cc:50:6a:ca:23:a3:f4:9c:23:e7:92:65:82:3a:09:
2f:6e:a2:57:36:33:35:1e:8e:76:1b:a2:6e:3a:ee:
18:dd:94:bc:48:ad:1b:19:24:71:3d:23:2b:c4:ce:
bb:ef:e0:81:7b:af:30:92:b0:a7:34:11:49:aa:20:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:42:07:1E:5B:22:95:D7:27:F8:AB:08:B8:FC:70:FB:D0:73:25:14
X509v3 Authority Key Identifier:
keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a7:2e:c0:5e:72:ef:ca:aa:de:4b:ba:81:b0:46:2e:62:65:
e1:b2:0f:1e:ff:c3:43:32:a2:80:ff:5e:d1:6f:ae:cf:77:08:
e5:60:e0:86:88:9a:94:47:76:6f:a5:3a:36:14:07:78:eb:81:
9c:ff:67:b2:55:83:88:ee:a2:cc:48:f6:ad:72:f9:d3:b6:43:
e7:10:61:06:eb:26:14:d8:29:bb:51:d3:98:bd:7b:2f:64:aa:
2d:db:29:40:58:c1:3b:31:ed:7e:82:5d:db:0a:c8:50:b3:a0:
76:e9:4b:e1:e8:b8:c1:84:30:17:9d:07:2c:a7:6e:38:a9:fb:
8f:22:b8:e5:c8:05:b8:5d:84:9c:d4:ab:51:6e:b4:34:37:5a:
3e:f3:8b:87:03:fd:e2:d1:92:ec:26:0d:90:39:4f:48:43:3a:
13:84:16:5d:34:cf:69:c5:ba:77:3d:32:c4:4e:f2:8f:a1:89:
7a:62:a4:91:09:90:4d:c3:4c:d7:92:6e:e7:0d:02:cd:6c:2d:
0e:83:13:a8:ec:3f:1d:cf:5f:69:e5:95:dc:75:d9:ba:c1:12:
aa:41:3e:0d:e3:dd:77:cc:06:cd:46:54:2c:d7:dd:bc:c4:48:
39:40:4e:26:e6:c2:45:19:42:44:01:78:91:86:7e:ad:74:4b:
58:44:76:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:03 2026 by rpki-client