Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier: ETLOC48Se6W0DfZQMXiYF4O71QiY52TzUKb/7vblEvE=
Subject key identifier: 3C:CD:13:78:12:16:52:9F:FA:67:F0:AA:0B:69:6D:DF:A5:D5:EE:AE
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial: 019D25F11A54209D27F703D7FFB71D5F74CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number: 0256
Signing time: Wed 25 Mar 2026 17:00:50 +0000
Manifest this update: Wed 25 Mar 2026 17:00:50 +0000
Manifest next update: Thu 26 Mar 2026 17:00:50 +0000
Files and hashes: 1: cAKVqYBd9IcAL6r2ZvxM_Qj1ndI.roa (hash: XqFaKsdiSRNsnwScS0QPlL53huZcp/xfhEBOIjWXbkk=)
2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: ZicxYXc6B2cv+URArr0Nh2krzq1e6vQqtvMX+dOfbPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:1a:54:20:9d:27:f7:03:d7:ff:b7:1d:5f:74:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Validity
Not Before: Mar 25 17:00:50 2026 GMT
Not After : Mar 26 17:00:50 2026 GMT
Subject: CN=3ccd13781216529ffa67f0aa0b696ddfa5d5eeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:40:c6:ec:1f:67:d4:77:4c:7d:0a:01:be:
13:02:94:23:c6:eb:bc:7a:6d:db:28:a8:d9:31:71:
aa:2b:ed:91:95:0d:84:e6:24:b0:b2:2a:3e:4a:08:
46:a6:83:f3:ec:14:66:a7:f0:35:df:55:0a:1a:e2:
bf:21:e6:06:00:11:80:73:30:85:e9:2e:65:89:55:
92:81:dc:06:b3:8a:2d:92:7c:05:af:bd:c6:4d:1c:
5c:7b:42:ec:68:02:5d:15:65:86:f2:ec:03:22:15:
0f:53:d6:d4:00:67:eb:e7:e6:9b:23:73:1a:45:eb:
46:76:d0:91:c4:d5:55:72:c3:48:24:ca:f4:55:ab:
f3:a4:da:20:71:17:c7:ed:5a:fa:b1:56:c3:e9:61:
30:fa:b6:86:85:6b:ea:49:01:54:00:01:e1:6d:88:
68:e2:8b:34:6e:bb:22:27:ee:53:bd:8c:77:ed:a4:
99:4f:84:41:58:19:61:73:f2:78:11:45:31:88:58:
20:ee:a9:5f:2d:d7:12:52:4f:bc:36:2b:9c:4e:33:
01:6f:9e:c4:18:65:ce:a4:ba:ac:9f:38:55:da:11:
39:9f:8a:f9:56:4b:eb:3f:29:ae:92:cc:b5:01:d5:
c4:bf:62:2b:85:90:9f:14:4c:8e:59:02:44:99:19:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CD:13:78:12:16:52:9F:FA:67:F0:AA:0B:69:6D:DF:A5:D5:EE:AE
X509v3 Authority Key Identifier:
keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e4:93:e7:32:78:85:41:f1:6b:eb:c2:38:c9:43:d4:ae:ed:
f4:09:0f:23:57:af:9a:ff:e0:ba:ec:cc:35:15:50:d9:c3:0c:
3a:62:78:b7:ae:d7:57:d6:ab:0c:c5:71:76:8b:b4:57:32:a1:
77:75:40:20:0c:0e:a1:2d:fa:b2:e8:83:66:2e:f4:11:1d:30:
89:5d:0c:06:4a:75:a0:f7:3c:c7:5a:16:c7:46:cd:be:17:05:
5a:bb:6f:cd:65:b4:8c:98:ff:f8:50:71:c8:d3:ce:a5:67:c1:
6a:12:60:0e:09:41:d4:35:9e:d9:e2:e2:40:0c:e2:9d:a9:29:
cb:aa:19:26:65:74:0a:15:c9:8e:cd:fa:64:46:2a:52:fa:ca:
be:1e:7f:e0:99:64:1c:b7:19:5c:9e:bf:c2:81:08:53:d9:ff:
3d:fc:11:28:26:16:54:f9:ab:f0:f1:ff:ae:96:45:78:26:cf:
69:84:19:84:18:06:48:df:31:02:5e:73:f6:39:d3:d9:c7:82:
d7:aa:f6:25:14:60:89:3c:39:ba:5f:26:41:8b:7e:39:74:06:
38:f7:a8:de:4b:aa:59:93:58:19:17:9e:54:47:d5:d2:e8:46:
78:3b:5a:e2:e8:9c:1a:0d:00:9b:c7:4c:1d:d3:78:32:83:6c:
1d:eb:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:55 2026 by rpki-client