Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
File: M5VDMDSfV1Aqdq5umZh-_D47gQk.mft (raw, json)
Hash identifier: xwBevr6LHtVMDSkV2D2ypi4L+8KoDR6uRG4E9+tIh8s=
Subject key identifier: 6F:A2:8A:C2:83:A7:6D:C6:48:14:0E:7C:91:D6:3D:D4:F3:8A:46:CA
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 019D2A7230E92C23A59B548DB90825B3150A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 14:00:19 +0000
Manifest this update: Thu 26 Mar 2026 14:00:19 +0000
Manifest next update: Fri 27 Mar 2026 14:00:19 +0000
Files and hashes: 1: 4wx0MOu1mZcNgjgLVuHZ5KDPjA8.roa (hash: 0jso45NlBZKrRKZeACFspDxL58QZmOoRo1b0JCMIPZ4=)
2: M5VDMDSfV1Aqdq5umZh-_D47gQk.crl (hash: 6u2jsLeGaorcamG/WPCDausNNBMAvOhcZ7Va/VavIrE=)
3: PEqDu8ivi9UVZhqhCJ7IvyfJdcE.roa (hash: Q7IRGtNWGMxResmk4bDtY/IpB1kb7EOVGytLvz9NzXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:30:e9:2c:23:a5:9b:54:8d:b9:08:25:b3:15:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Mar 26 14:00:19 2026 GMT
Not After : Mar 27 14:00:19 2026 GMT
Subject: CN=6fa28ac283a76dc648140e7c91d63dd4f38a46ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:1d:8f:f3:d2:bf:e3:26:e8:e0:42:c7:b6:
ca:66:f7:23:d4:26:d0:93:55:e6:e7:6b:4b:89:af:
66:24:49:df:f8:3d:11:f0:de:49:8c:1a:93:40:0f:
20:e7:ff:61:2d:ac:a1:7e:6c:55:c6:db:03:7a:b7:
14:64:3f:9c:e4:8e:cb:1c:13:07:c7:14:bd:6f:f6:
c6:0f:b1:dd:9d:1b:23:97:02:d4:a2:7b:cc:59:14:
0d:6a:bb:c9:f8:0e:29:99:dd:c2:40:cf:ba:04:1f:
1d:75:7a:b6:22:f5:41:d7:cf:52:ef:6b:87:04:c5:
76:08:05:01:2a:5e:f5:ea:9f:4c:95:b5:57:d4:6a:
e5:6e:2b:e3:18:23:3c:4c:f1:40:c9:bd:23:a1:4b:
e0:e5:4c:79:cc:5b:d9:34:64:08:43:3d:b9:21:80:
11:4d:91:f3:e5:7d:b6:8a:7e:b4:fe:c0:60:fa:7b:
8e:25:98:80:12:2a:60:ac:9c:e5:f0:34:e9:13:03:
c3:4c:6d:d5:ea:81:62:36:ad:f8:ab:a4:25:91:32:
1f:94:b8:ba:6c:63:81:5b:84:10:16:d9:81:9e:e0:
93:ac:db:39:0e:16:93:32:72:56:07:76:29:6b:ba:
47:d0:48:6e:21:a4:5a:9a:54:96:e0:15:3a:ac:19:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A2:8A:C2:83:A7:6D:C6:48:14:0E:7C:91:D6:3D:D4:F3:8A:46:CA
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a6:b6:99:f5:a2:5a:64:65:bd:1c:1d:39:04:16:c5:3b:08:
6d:79:75:74:2a:f5:ab:96:e9:c6:e3:ec:86:fa:ef:40:24:bd:
1d:ef:6f:b1:c8:c2:f1:75:8a:f8:4e:fa:cf:4a:f0:42:06:0e:
48:53:0a:01:3e:a0:48:05:74:11:e4:8e:63:2c:99:a8:be:a0:
2c:0f:8a:e3:88:46:e7:ca:14:e5:d0:85:02:11:20:a6:7a:a1:
5b:08:f1:09:d0:98:47:fe:0f:3d:da:30:cc:4a:5d:50:53:4b:
74:d5:69:57:ca:42:21:ee:e3:2f:47:55:0b:ab:96:e3:b9:80:
d1:ae:fd:12:6e:29:6c:9b:ab:92:94:ae:a9:bc:1e:5d:ee:91:
b9:91:2e:a8:44:19:78:36:c6:3b:38:d7:75:92:b6:b4:b0:02:
19:96:fe:9d:5e:98:d1:e3:7b:e0:e0:7d:9a:6d:2b:99:60:7d:
96:b6:b0:fd:df:5e:92:fa:34:e3:18:46:83:e9:84:af:04:3d:
3d:88:27:23:77:75:f8:ef:40:d6:8d:cd:0e:04:f7:bc:0a:50:
d5:94:b1:bf:f1:7d:b0:c7:48:fc:18:cc:7e:3c:f7:0c:97:62:
03:21:a3:c7:b3:ec:81:89:66:8b:56:e1:96:9e:f8:2f:cc:96:
f0:0e:6a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:26:26 2026 by rpki-client