Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
File: mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json)
Hash identifier: hW9NdVA2ted/nQrwHzoY4xghH+AFOlYxRzf68brBrPg=
Subject key identifier: 8D:88:F8:FC:68:B7:70:F8:66:6E:6A:ED:AD:C4:E6:ED:94:9F:D4:F5
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 019D2A3B421DD46E67B619570E7947601A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 13:00:19 +0000
Manifest this update: Thu 26 Mar 2026 13:00:19 +0000
Manifest next update: Fri 27 Mar 2026 13:00:19 +0000
Files and hashes: 1: 07lXNimrQBF3__ddGT3TZzLhskg.roa (hash: eoEGjhgMY6OcoxgLUe7rr3k+ew/IBEiDnKUPvz0TNYw=)
2: T3vBUADVziYVCPfMjFB5sh1dYd0.roa (hash: K9dDJUVzUK8TiZfC61uyK9tw2jY/KL9Z0G2brWNRTIY=)
3: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: EhsfliJg19hOxWUGKUSZpTOke+GJOZZVX/uNSLT+C0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:42:1d:d4:6e:67:b6:19:57:0e:79:47:60:1a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Mar 26 13:00:19 2026 GMT
Not After : Mar 27 13:00:19 2026 GMT
Subject: CN=8d88f8fc68b770f8666e6aedadc4e6ed949fd4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:86:60:7f:95:75:f3:0e:96:a8:01:db:4e:
ef:85:cc:f7:30:b1:9b:6c:11:eb:74:87:a7:7b:a7:
d9:e1:c1:0a:34:fb:45:7a:a2:e8:50:a5:81:b7:0f:
b5:1e:ba:81:3d:a6:06:ad:1b:37:cd:a2:14:93:ae:
c0:07:bd:8b:83:47:ce:e2:42:0b:e8:d0:7f:fe:e6:
f5:61:66:81:0d:36:15:ba:cf:d7:83:62:ae:56:9f:
d5:bc:03:5e:f5:96:f9:ab:53:e1:07:7f:a3:d1:c3:
3f:45:98:4c:0e:f8:32:36:79:e8:7c:65:b1:8c:a8:
17:a0:11:e0:44:63:59:c7:74:e7:de:17:96:c4:b4:
c0:db:72:b2:8c:fb:5e:06:d3:54:c5:26:74:34:db:
af:9f:9d:10:15:1a:a0:58:c9:be:5f:04:43:18:9e:
65:6a:54:e7:15:a1:77:43:06:4b:4b:03:2c:66:27:
12:54:71:15:a8:cc:81:0d:be:a3:99:db:0c:fb:b5:
b5:db:95:bf:a5:55:0e:78:90:84:47:1c:7d:87:ba:
13:c5:a9:e8:2b:37:2d:86:a9:b2:b1:af:59:5c:ee:
da:7b:c0:ac:25:90:9f:d6:03:a5:fd:ec:32:24:bd:
71:49:01:1a:79:be:37:03:3b:93:57:fe:53:00:7d:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:88:F8:FC:68:B7:70:F8:66:6E:6A:ED:AD:C4:E6:ED:94:9F:D4:F5
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:55:44:15:24:86:cc:9b:c5:f7:cc:f5:f6:45:45:11:dd:c2:
a0:40:52:e0:65:2b:a5:ab:6f:67:f9:b9:ff:3e:ed:94:17:a1:
28:ea:81:e1:83:3b:fe:da:5b:18:37:7b:a5:6c:72:e6:37:c8:
8c:36:4a:03:ee:32:c0:21:82:08:d3:11:bb:20:ea:7b:fa:e3:
54:48:a3:95:82:a3:dd:20:75:66:dc:92:13:d1:4c:95:11:5f:
e1:d3:ae:cd:22:b3:07:12:66:9e:db:72:74:07:3c:ae:b8:3e:
b4:89:c7:65:d0:e0:8e:92:18:f6:61:f3:b4:24:0d:3b:50:96:
33:fb:5c:c5:6c:ff:73:60:89:1e:89:46:ef:7c:64:dd:17:cf:
08:0a:9d:f9:bf:5f:70:b6:da:14:fc:54:58:4f:fe:d6:b2:11:
66:03:5e:db:f4:5b:2f:ed:dd:91:3c:21:ad:4a:e5:19:cd:64:
0d:db:00:44:6e:38:99:a2:c2:f9:e4:83:9c:66:cf:92:f5:fe:
bf:bb:fe:73:8e:ce:3b:c6:ba:f6:06:95:6a:06:da:69:68:f7:
4c:7b:8a:6e:fa:af:0d:7a:33:c8:b3:c3:b6:be:7a:8a:00:7b:
55:75:5d:2a:f4:6b:dc:66:40:79:dd:82:30:1a:a1:5c:c4:ee:
9a:31:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:00:12 2026 by rpki-client