Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: cId0sIOuMR+dl2L85LlijIHgXk+BnYAiLFzm+xqiT3Q=
Subject key identifier: 05:FB:40:54:FB:C2:13:F6:D2:D3:CD:D9:B7:6F:C5:CB:DB:39:80:F6
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 019D26CD8656B8568C5D9D81AE7BBC918C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 18AE
Signing time: Wed 25 Mar 2026 21:01:36 +0000
Manifest this update: Wed 25 Mar 2026 21:01:36 +0000
Manifest next update: Thu 26 Mar 2026 21:01:36 +0000
Files and hashes: 1: 0ihzHauFogznBZ4D95qRfmh5DWY.roa (hash: pm2OFW8n3jM91O28PWSYiZEPtxsO4IG0tuEGJsYy+tw=)
2: aXqn4kbdTiISCg3qjch21kWiAS0.roa (hash: fWTEPBg8GhRwpF6veTh6PUPLm3Q1obhdo3c/16/83Z4=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: oSn01lhjgEz/im13qSNyjcFpvko1LdZlruDmScfdvFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:86:56:b8:56:8c:5d:9d:81:ae:7b:bc:91:8c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Mar 25 21:01:36 2026 GMT
Not After : Mar 26 21:01:36 2026 GMT
Subject: CN=05fb4054fbc213f6d2d3cdd9b76fc5cbdb3980f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:09:4a:aa:33:71:02:bf:72:ae:c5:07:bf:
33:64:a2:8a:9c:c9:c9:7a:dc:7b:12:35:b3:d0:e0:
01:63:47:54:7f:89:79:39:7c:1e:2d:a3:35:5c:9b:
34:86:a9:20:28:59:e9:fc:ad:6b:d8:48:b6:0e:75:
1c:aa:2e:9b:8d:bc:88:90:3e:d2:21:fb:76:ad:36:
b5:56:9d:62:d0:70:eb:03:14:ab:be:c7:61:63:83:
5b:88:15:1c:91:54:3b:08:61:b7:38:55:cc:34:66:
22:5b:77:ea:21:63:88:86:dc:b5:e4:62:ba:3f:7b:
c5:d7:70:0d:1d:5d:c4:94:0e:cd:1f:c9:38:f1:0b:
b7:af:20:ce:e2:1f:d4:51:a2:e2:c1:6c:17:d4:6a:
ce:4e:47:46:30:e6:e5:fb:8a:4a:ed:44:8e:40:e9:
1c:f4:42:6e:87:ec:d5:eb:e0:76:1c:13:c3:2c:10:
a7:ec:22:f2:c6:12:8c:24:87:0e:26:5d:7a:e0:2e:
dd:63:69:f1:b2:5b:6d:79:4a:79:20:48:cb:89:7b:
2e:99:e7:f0:6b:02:b4:d4:2a:69:70:2a:f7:73:04:
ad:35:03:14:2c:a0:1d:12:25:98:e6:f9:63:a3:c1:
64:69:48:7c:04:b8:4c:1d:3e:ad:5a:4f:a7:be:04:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FB:40:54:FB:C2:13:F6:D2:D3:CD:D9:B7:6F:C5:CB:DB:39:80:F6
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:98:c6:d6:1e:90:cf:3b:60:51:a7:47:98:bb:c5:53:78:0b:
02:99:46:22:ed:45:d6:01:d3:88:7c:d5:e8:32:37:be:1f:f1:
16:e8:7d:ea:8e:9c:58:b5:61:81:8e:6a:2b:07:38:6b:fe:7b:
36:4d:b8:fb:39:5e:42:2b:28:30:67:f5:8a:16:2f:43:42:de:
06:4f:21:84:b3:08:2e:fe:3a:70:7a:f8:64:57:1b:ec:01:9c:
0b:b0:70:02:6a:e7:96:a2:b4:40:79:34:b5:07:41:e1:07:d5:
2d:06:45:f6:43:70:57:05:d6:07:99:c4:6b:d2:89:3b:8c:eb:
d9:f3:c4:a7:d5:53:53:fe:31:fd:5c:ff:1c:3a:14:68:9e:4b:
82:d5:01:c1:c8:e3:74:25:b1:a3:a7:aa:de:f1:9e:17:8e:73:
cb:cd:1e:37:ac:29:49:ca:20:b7:91:a1:90:37:de:3d:d6:41:
ba:c4:29:b6:5f:72:d2:28:ba:4e:58:4b:6a:28:46:b4:fc:30:
0f:f1:01:cc:ab:a3:0e:4e:de:d3:fa:95:94:47:d4:11:bc:17:
8e:f8:97:3a:7d:fd:ab:6b:36:89:98:a1:77:86:a2:fd:38:53:
7d:56:5d:85:43:7f:e3:2d:45:29:e0:e7:9a:38:5a:d0:fc:3e:
a5:f4:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:11 2026 by rpki-client