Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
File: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft (raw, json)
Hash identifier: tjoLVyjZNnLQ8/0qc5z1k0ueR4fSFW4uUzhokOUmbxE=
Subject key identifier: 66:42:9D:A8:F3:FC:8C:17:79:1F:11:46:7C:ED:1F:36:E8:F3:09:DA
Authority key identifier: 33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
Certificate issuer: /CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Certificate serial: 019D281679608DD6CCE6271523A912ABDBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: 6ztQxOe_PEgUsDBO6kHXBhIN87Q.roa (hash: vJYdONcCwz7ZRzjkkaza8LT61nND9UkJTOAa0xHd8m4=)
2: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl (hash: L719D/I8/K2GdT6uQXk2TOSAppRsJxUaxlEd2/g/WPE=)
3: vrpkaL0U3jMOO-KVqiy6oc1DpeY.roa (hash: 1otko+I+GMmAYVo9i25VRg3S321FcTSnDSSA4SjQNEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:79:60:8d:d6:cc:e6:27:15:23:a9:12:ab:db:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=66429da8f3fc8c17791f11467ced1f36e8f309da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:66:44:6a:a0:4a:72:e0:51:4a:43:78:b2:
0c:2e:ee:d9:df:24:f6:35:fd:21:62:b0:c7:c6:d9:
d2:be:f9:56:8e:1c:76:f0:3d:62:6e:a5:e4:db:a4:
0c:77:d7:f2:14:bf:c0:57:14:d3:a6:20:b4:ae:df:
ad:a1:07:e6:63:57:cf:bd:a2:4c:f1:cf:d1:1c:3f:
51:5d:36:37:c8:c3:d0:a6:a2:38:66:24:fe:c9:ad:
f7:d9:67:ad:4a:b4:21:43:9e:c3:b7:5f:2e:a1:0f:
33:0d:01:62:67:51:62:1c:00:c9:ce:b2:a4:c6:11:
e0:fb:27:0d:04:58:59:21:fa:95:39:53:35:3f:a0:
79:88:02:ae:27:d3:53:16:0f:de:b4:3d:94:9e:fb:
ea:50:7a:2f:e8:f4:58:d3:c8:e8:1b:35:5b:7b:e9:
c9:ff:9b:83:ec:44:ed:62:cb:9e:1f:70:71:62:3f:
98:22:e1:2c:0f:b0:26:03:ec:c7:3a:9f:ab:11:23:
e2:94:67:32:a7:88:2d:a2:a3:3d:d8:c3:1a:55:9e:
bc:a8:68:0c:ec:b4:cf:ac:cd:73:d4:6c:f5:12:cc:
fb:36:07:a7:3c:a7:b0:a5:7b:d1:9b:3b:e8:97:40:
4f:cf:d6:45:89:e3:3e:c7:9d:5f:3f:f3:bb:9d:89:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:42:9D:A8:F3:FC:8C:17:79:1F:11:46:7C:ED:1F:36:E8:F3:09:DA
X509v3 Authority Key Identifier:
keyid:33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bb:4b:fd:6d:99:de:07:36:63:48:42:dd:16:3c:ec:fa:5a:
21:cc:e3:80:71:42:01:06:61:47:88:e2:44:3e:cc:44:3e:70:
5a:98:be:3a:f5:4c:5a:0d:95:2c:36:84:74:9d:10:ab:e3:ce:
d4:d6:00:ac:0b:28:e0:9f:3d:2c:1d:9c:27:e3:e0:d1:16:b6:
7e:9f:30:1e:4b:39:4c:c3:65:4e:dd:6c:7b:ea:b9:1b:02:f1:
f8:a0:d9:e7:f3:cc:90:71:52:2a:71:92:ee:fb:41:c0:1e:e4:
a4:1d:d8:a4:07:64:de:86:91:eb:0c:02:d8:9f:f5:21:33:25:
0c:91:db:50:1f:45:0f:ea:7a:78:51:94:8e:c9:b8:50:ab:5b:
ae:e7:d9:a3:29:c5:f2:3c:e1:a9:d3:43:27:67:1d:88:3d:99:
20:27:3c:3f:b4:de:a2:30:39:0d:b4:6e:5a:78:5e:0f:32:96:
1c:91:31:5e:1c:81:95:f9:48:e8:78:3e:3c:0d:40:2a:ca:d3:
83:7d:10:f7:7c:71:6c:14:c2:fd:06:98:a9:ea:79:58:d8:3a:
c5:0d:6e:68:52:86:50:1b:b8:b2:98:f5:eb:a4:f4:20:4f:f6:
17:13:9f:b8:22:c1:80:e9:74:14:53:ed:bf:76:bb:50:48:15:
86:9a:9a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:52 2026 by rpki-client