Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: Qj2Tnflv26q6DnGhOV+Zdhyf5E/2uHmr7DISR+9YZNM=
Subject key identifier: 4F:9B:02:F5:06:7C:5B:1B:80:87:B3:E8:4F:ED:B8:39:9B:98:75:0F
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 019D2772650B8136BD224C54C2E95BD432CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 00:01:41 +0000
Manifest this update: Thu 26 Mar 2026 00:01:41 +0000
Manifest next update: Fri 27 Mar 2026 00:01:41 +0000
Files and hashes: 1: N4MtS_rO7hT8RpY21Yy7Mk8WK6A.roa (hash: a7GxJ/DHXtzeo/5dQNp0athcwGWDpOFXNyta+KLkn5s=)
2: j0djN2P0pP4FekmDXul4LqL8vFc.roa (hash: Imh4k/3T8J0ucRVeJognqvvIOllYc40mbdeDTMcQJto=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: CqGiBjcgpBpQ1Cu2ahMgLnsgN7KKM+plTrHSEykQ1cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:65:0b:81:36:bd:22:4c:54:c2:e9:5b:d4:32:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Mar 26 00:01:41 2026 GMT
Not After : Mar 27 00:01:41 2026 GMT
Subject: CN=4f9b02f5067c5b1b8087b3e84fedb8399b98750f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:27:d7:08:c7:3e:7c:a9:c6:b0:40:e9:05:
07:56:6c:11:0c:79:3c:ab:ee:0f:97:8d:81:01:54:
35:c7:97:e8:07:91:db:07:bf:9c:64:ea:d2:31:76:
79:49:90:9d:b0:d6:22:03:e6:d9:22:a5:e5:67:d3:
6f:2d:28:87:01:1d:0c:bd:74:35:26:c7:71:f7:63:
fa:ad:fe:bd:4d:33:f3:71:0c:cf:29:a9:b8:e7:df:
0f:f6:db:7c:0c:d9:79:9c:2b:15:0b:76:1b:f3:eb:
55:67:82:4b:6d:c9:42:7d:e7:53:66:ab:b5:d3:c3:
2e:09:f2:05:79:bc:bd:47:16:39:78:ac:bc:19:77:
3a:18:02:f6:6e:f5:47:7d:81:06:ef:dd:91:db:b2:
33:7e:84:33:c5:ec:c1:53:dc:4d:49:21:60:1d:c8:
5a:6f:ce:42:2f:e2:53:21:aa:28:c9:c6:c8:d5:c8:
c9:f4:3a:39:16:24:1c:cd:39:ac:a1:a1:fd:1b:1b:
35:3d:9f:52:94:d9:c8:a5:6c:19:42:4d:38:91:6b:
51:ee:38:46:52:ab:0d:9b:e2:8e:74:28:d2:e3:91:
38:1b:2b:07:e2:1b:72:52:8e:38:f8:30:fc:2c:9a:
c7:32:b7:79:e5:07:55:8d:54:41:cc:5e:65:22:67:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9B:02:F5:06:7C:5B:1B:80:87:B3:E8:4F:ED:B8:39:9B:98:75:0F
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f9:02:45:c1:f0:28:bf:59:7a:c1:82:5e:ca:0c:eb:fb:bf:
65:e4:fd:c6:ba:36:5e:8c:8b:cb:dd:50:4c:3b:aa:46:90:a8:
64:64:56:5e:45:38:c5:8e:1c:52:84:a7:9b:5d:c3:0d:8d:ac:
ba:d9:d8:5c:9f:05:c3:98:f9:eb:d5:25:7a:2c:8b:0e:75:5f:
a4:9c:66:24:4f:ad:74:1d:61:6e:2c:18:fb:02:ef:d3:d5:90:
d1:25:62:af:70:9e:0d:a7:cf:f4:c0:ff:35:f2:ef:5a:e7:27:
68:31:ea:31:72:c7:dc:e5:f2:7a:4a:76:c5:cf:36:af:f2:b3:
82:d9:23:17:c6:02:47:ba:b0:fa:29:3d:8a:87:36:be:49:68:
28:4e:ac:eb:9c:0a:07:54:4d:68:60:5e:15:a2:33:e5:c9:89:
9b:6a:33:70:92:f2:36:b0:37:79:c1:25:0e:ba:18:44:1c:90:
d2:f6:b2:f3:94:c5:ed:3d:75:f0:c6:d3:26:2f:58:56:fe:76:
f8:3b:14:31:9d:e4:9c:55:bd:69:49:31:53:a4:76:80:4d:42:
44:5a:bd:08:4f:27:3f:3f:07:a8:18:d2:13:0f:0b:0e:3f:41:
93:08:00:f9:a8:bf:02:8a:b6:93:dd:58:b7:39:71:82:0b:21:
f5:93:ff:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:48 2026 by rpki-client