Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
File: mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json)
Hash identifier: mJN9WyFcMOyfA1dkVIGq3LaD6wPRw5LL+uK3NURNImw=
Subject key identifier: 68:E1:C6:9E:51:0C:22:BE:ED:83:2F:1B:21:80:01:C5:ED:38:E6:F2
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial: 019D29298898DBB9985E412E929296300C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
Manifest number: 15BF
Signing time: Thu 26 Mar 2026 08:01:20 +0000
Manifest this update: Thu 26 Mar 2026 08:01:20 +0000
Manifest next update: Fri 27 Mar 2026 08:01:20 +0000
Files and hashes: 1: ALL72x2uiNRr-gJc-rE0B3ud96o.roa (hash: urwIbNmeE1XUBZZdgKv39JnzgCWK6gzsKlpOmoQqnlI=)
2: VJWESkMlWl3gytGlSZWLBLk9iyY.roa (hash: Dxz4YKjZcstFpZU9oV/h8y93NMjQO9M36oI0p+U3Fco=)
3: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: mz+hLljfX7t/N7fCe3O7Hvx+48EyDkajIViNoaNcpXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:88:98:db:b9:98:5e:41:2e:92:92:96:30:0c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Validity
Not Before: Mar 26 08:01:20 2026 GMT
Not After : Mar 27 08:01:20 2026 GMT
Subject: CN=68e1c69e510c22beed832f1b218001c5ed38e6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:54:40:7c:10:a5:10:f6:d5:95:71:f1:2b:
b3:d1:f1:86:a2:e2:a3:08:7b:65:c0:32:b2:f4:63:
dd:cc:03:87:4f:f0:4b:2e:3a:96:7f:dd:b8:d8:ff:
40:7b:22:58:ee:c8:c8:01:88:5b:78:76:e2:bf:44:
c8:d7:51:04:14:b0:28:01:f3:44:1e:a2:e1:ec:8e:
08:bd:b4:0f:58:23:87:d8:a5:bf:5d:64:76:19:d4:
a9:0d:f6:48:83:58:8c:0a:89:11:2a:cd:bf:96:3a:
f4:ae:4c:f8:c9:20:94:df:60:d2:68:9b:e6:a3:53:
fd:85:bb:cf:09:21:71:c5:c1:b7:7c:ff:3e:f6:a0:
30:e1:9b:0e:36:23:01:9f:e6:bc:8a:63:a5:26:fb:
86:bd:a6:b1:78:ea:4c:c1:e6:b1:56:38:52:91:a9:
45:86:48:04:97:f5:3f:cd:dc:48:e0:22:52:63:c6:
b5:a5:64:9c:de:40:a4:c8:b2:ab:d3:d4:98:5c:cc:
5c:23:b0:ff:76:e9:a0:33:04:c6:f4:08:6c:8d:b4:
76:a3:05:60:9c:57:b1:b4:b3:ba:b1:5f:65:4d:2b:
9a:0f:73:83:df:9d:cc:84:17:d9:9e:59:44:be:9c:
13:11:0a:ff:e7:f8:01:32:fc:a9:dc:5c:4d:35:fc:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:C6:9E:51:0C:22:BE:ED:83:2F:1B:21:80:01:C5:ED:38:E6:F2
X509v3 Authority Key Identifier:
keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f6:37:86:1a:b2:16:9d:1a:e3:ee:3e:98:34:97:08:c2:27:
d2:f7:94:e6:22:31:7f:32:44:0a:5f:92:9c:77:ed:22:de:ad:
f0:8e:82:e0:ca:84:de:da:3e:f3:0c:6c:17:b5:1a:c8:9e:e7:
19:ca:9d:ac:34:14:fe:56:99:f7:ae:00:38:b7:ed:e1:51:04:
b1:78:d7:aa:7b:74:c5:90:ab:0e:b0:c0:cb:0a:fc:4d:af:8d:
78:5e:66:b4:72:a9:86:77:33:1a:32:ea:79:bb:57:ce:6c:bf:
d9:05:2c:c9:5d:fe:e6:8b:36:f9:fc:0d:cd:98:d4:f9:e5:09:
e3:51:5c:b9:cf:e3:21:c5:4c:e3:af:d0:54:15:15:7f:f2:1a:
2b:1f:9c:c6:87:48:87:5d:38:eb:df:f4:40:48:dd:d2:32:b3:
b4:97:23:43:77:34:e1:04:58:1f:09:e1:0b:19:48:e2:83:54:
92:28:05:64:24:a2:29:93:0f:36:6a:b6:51:6b:dc:cf:49:4a:
ce:0f:2f:0b:ef:47:d6:f6:db:97:ce:15:9b:05:06:f7:3b:fe:
5c:05:50:2a:a4:4a:4d:0d:18:0e:37:1a:6d:2e:d9:16:31:57:
ed:b6:11:05:79:61:61:7b:93:7b:7e:81:d4:52:04:4f:7a:e2:
16:56:8c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:05 2026 by rpki-client