Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: 51fFd26+QU/X8HkFM8mtdhyS6XCNX6jZCnEO7L4EBac=
Subject key identifier: F9:16:AE:CD:92:A8:2E:E5:BC:82:DF:9B:A5:18:FA:8E:3B:CC:77:A4
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 019D27A8E7FD213C636DB442E1FD5AF955D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 0971
Signing time: Thu 26 Mar 2026 01:01:14 +0000
Manifest this update: Thu 26 Mar 2026 01:01:14 +0000
Manifest next update: Fri 27 Mar 2026 01:01:14 +0000
Files and hashes: 1: aLZv5zfSsWmyyFeeVsMlO2WoEOI.roa (hash: 3bBdTpTJvuXiahizaCJvEqZFOKH3JQrv3q1L3oXewkc=)
2: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: CPeSRv4CRmbpBGAxXorYm9FNoFZ1So6D+mv1e3hFLCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e7:fd:21:3c:63:6d:b4:42:e1:fd:5a:f9:55:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Mar 26 01:01:14 2026 GMT
Not After : Mar 27 01:01:14 2026 GMT
Subject: CN=f916aecd92a82ee5bc82df9ba518fa8e3bcc77a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4b:7b:a2:3b:65:a7:89:ad:53:8c:55:0f:c2:
f7:ab:2b:2e:17:e9:4a:37:89:8a:79:d5:a3:bf:fd:
24:da:32:01:e4:d0:63:42:82:e6:5e:58:ad:a6:65:
c5:08:dc:59:50:02:db:bc:12:12:ca:4d:18:4f:b2:
96:94:2d:2d:a5:8d:72:92:68:f6:d6:52:ef:ed:2d:
d7:82:d8:c5:dc:00:d9:9f:35:14:d9:25:20:02:bf:
dc:47:95:02:eb:cd:80:b1:d2:d5:cc:ab:fb:b4:94:
2f:20:b0:26:f1:10:6b:eb:f0:e8:bf:c1:57:f8:3f:
de:72:a3:23:91:a8:e6:48:b4:e7:fc:5b:2a:62:07:
49:d6:aa:db:40:66:fd:a8:a4:f3:f6:18:c6:46:17:
45:30:ea:37:c1:ea:65:ef:48:78:04:76:78:93:1f:
0c:83:76:45:dd:3a:da:f4:ed:6f:d5:f5:87:50:b7:
9b:46:e1:20:87:8e:9b:f1:eb:ca:0e:1b:da:6a:d4:
8c:81:4c:94:8a:81:16:d5:d1:6f:4c:b3:75:8c:b7:
0f:9b:65:92:ba:ce:95:b8:58:82:6b:ee:46:86:ba:
a6:9f:a1:b5:f4:dc:f8:b2:5b:b9:04:0c:78:2f:7f:
06:95:0b:ba:be:ec:b3:fb:8e:3e:dc:4d:cb:5c:17:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:16:AE:CD:92:A8:2E:E5:BC:82:DF:9B:A5:18:FA:8E:3B:CC:77:A4
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:28:5f:d8:61:be:83:87:8b:21:09:b7:89:2c:60:ec:1f:db:
da:66:ed:08:6d:9c:73:21:b6:7a:0b:4a:14:1d:81:60:55:3a:
d4:a8:17:62:f4:66:06:24:c7:6e:5d:1c:21:89:0d:83:6b:5f:
fb:34:bb:de:23:60:fd:98:e9:d0:52:e7:78:65:3a:38:5a:45:
f2:44:68:90:e0:1b:d8:2e:6d:99:f9:6f:59:bc:97:bb:a9:c1:
ba:a1:64:19:e9:cc:3d:1e:e6:0e:d0:89:d4:bb:10:fd:02:93:
66:a7:d5:a6:a5:c3:24:ce:dd:d8:83:e8:82:df:6f:14:2f:e9:
57:1c:25:4a:1a:b7:99:79:3f:4f:55:c3:b7:dd:8c:83:15:f5:
e8:54:68:57:8f:84:9c:f0:18:df:bc:26:80:f8:ef:d1:7e:1c:
df:ab:51:37:a3:9b:be:0f:86:a5:b1:e6:a4:3f:e0:18:5f:51:
2c:9e:11:d1:60:6e:a4:55:ac:c5:93:95:d1:7c:4f:a3:74:35:
05:b1:73:a0:29:46:ed:6a:38:48:b3:8f:3d:ab:28:03:c7:17:
df:e8:8f:0e:e8:71:49:6a:e1:26:2c:31:58:c4:bd:1d:09:b0:
bf:38:e9:61:db:fc:d9:ba:11:c3:43:d1:0a:b5:ee:0f:7c:46:
64:fd:e8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:43 2026 by rpki-client