Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
File: Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft (raw, json)
Hash identifier: B98Jbp2CE7gII5UnBAldtt7rfwLbDr0mtFR4dLjfaIY=
Subject key identifier: 16:86:BB:AA:3A:B5:9F:35:E4:FC:B3:EF:F5:09:30:0D:CC:4F:3B:E3
Authority key identifier: 32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19
Certificate issuer: /CN=323e300a7b63ad4fefbae671f51abc24f1128719
Certificate serial: 019D27DF975876EB0C5855A59DB45B959EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl (hash: JVFjqZp89r2yJ/D+Lvym/yimtTrHZ1ep7e3gUytISkg=)
2: qrNedstwu-9btv-AnuWOd6j8Mns.roa (hash: lwTnb4E9IqtnHkWGkqB1+YJE5eYkARZVgIhD3HGojr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:97:58:76:eb:0c:58:55:a5:9d:b4:5b:95:9e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323e300a7b63ad4fefbae671f51abc24f1128719
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=1686bbaa3ab59f35e4fcb3eff509300dcc4f3be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:27:1c:ef:bd:da:69:52:42:77:b1:89:b6:
53:5a:92:aa:ec:00:75:e0:0d:29:38:b5:66:78:0a:
a0:48:b0:a3:ad:38:68:29:2d:7e:90:57:f1:9c:e3:
5d:0e:14:45:fc:8b:c3:c4:3c:19:b7:07:da:f7:37:
f3:d3:f4:a0:26:1a:2f:33:e0:50:98:ae:2f:02:aa:
c6:69:c9:43:e9:08:97:1e:a4:c0:47:6b:79:f5:b6:
0a:78:0c:8f:94:cf:c6:06:5e:0a:96:cf:45:c8:2b:
c6:92:09:f8:4b:20:2e:5f:7c:c0:31:39:5a:47:61:
12:0e:fd:be:18:e3:bd:fe:8f:29:a7:d8:f3:60:be:
a6:70:33:05:70:8c:58:45:c8:bc:03:9c:10:44:b3:
ed:db:9a:b8:f8:25:28:05:0c:6a:59:5a:69:d8:d2:
d1:78:dd:a5:4f:8f:fc:35:ff:e8:17:10:61:d8:ad:
ab:b8:c7:c3:b2:f2:e2:71:8c:7a:c3:ea:78:35:72:
72:a7:e8:d7:dc:0b:d5:eb:78:58:80:02:91:43:55:
72:29:fc:a1:e6:0e:2a:74:a8:bf:de:60:05:37:f3:
2f:a9:1e:9d:76:b1:3d:19:ec:76:c3:a9:48:fb:02:
08:b3:cb:99:92:69:1f:62:78:b5:22:d2:15:4d:0f:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:86:BB:AA:3A:B5:9F:35:E4:FC:B3:EF:F5:09:30:0D:CC:4F:3B:E3
X509v3 Authority Key Identifier:
keyid:32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:10:ab:7f:0f:6d:48:4f:3b:d5:e7:c5:70:ad:f7:50:74:33:
07:ea:d5:a5:5c:76:57:e9:77:3c:ea:78:02:3d:74:ef:b4:1e:
ee:7b:14:24:65:fa:59:84:b3:6e:55:9a:6d:23:68:15:61:82:
80:57:ce:ac:d8:cd:5d:3e:2f:2e:d4:e3:51:bd:e8:e2:df:1a:
22:4a:e5:36:a0:38:99:e4:f1:7a:75:e6:c4:92:f2:31:bc:ea:
a8:09:9f:53:68:51:76:88:5f:b5:6d:8c:a5:4e:75:39:62:5b:
29:3d:7a:f8:fe:f2:41:e7:64:7a:e9:e7:ae:a0:ea:07:6f:8a:
be:95:13:7e:3a:de:56:f6:9c:44:d1:14:7c:0a:da:14:ab:58:
7a:d1:7f:3f:a5:60:5b:7a:e6:a6:a9:5c:de:07:c1:2e:f0:6b:
7a:92:a8:64:f6:02:0e:30:b1:37:7c:97:85:e8:c2:5c:d1:93:
79:3d:0e:2f:b1:be:66:56:c6:60:38:d9:c9:10:6d:b9:d4:9c:
fc:65:e8:64:a8:a4:d8:7b:5b:4c:6b:63:34:68:15:b2:58:27:
e3:31:d3:5a:60:71:86:62:77:f0:14:cd:24:6b:c5:ec:e2:00:
33:b5:f7:27:bd:f8:67:50:05:5c:1a:aa:5e:66:f8:3d:40:eb:
fd:40:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:43 2026 by rpki-client