Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
File: mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft (raw, json)
Hash identifier: sPMrprXX7gFyAqgiJUaUm3OPtGqm3wkvgkZAjWMBHtY=
Subject key identifier: 18:62:B3:89:2D:58:79:99:F9:61:74:D3:7A:6A:79:5F:6B:E7:76:72
Authority key identifier: 98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
Certificate issuer: /CN=987b6812cf7a074580f5942be762f477f67c9500
Certificate serial: 019D27E05E70871AB80A2ACD7C0C62FED11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:48 +0000
Manifest this update: Thu 26 Mar 2026 02:01:48 +0000
Manifest next update: Fri 27 Mar 2026 02:01:48 +0000
Files and hashes: 1: mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl (hash: sRf7BZwpy8OS1EqLN9FT1OsLspMLLZ3GSL0sK4qbfik=)
2: nm8cLmmA3o4L2xPgTshW5L8vxeM.roa (hash: t+WoYax1GfjrQoojzMAiUt/9BDl447IgGJsQGcGrMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:5e:70:87:1a:b8:0a:2a:cd:7c:0c:62:fe:d1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987b6812cf7a074580f5942be762f477f67c9500
Validity
Not Before: Mar 26 02:01:48 2026 GMT
Not After : Mar 27 02:01:48 2026 GMT
Subject: CN=1862b3892d587999f96174d37a6a795f6be77672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:63:96:1b:0d:01:8e:5f:c1:85:d8:a7:f1:
61:f0:d3:3b:3b:9c:2d:ed:7c:c4:98:84:b6:f2:4b:
5a:c4:6d:f1:26:dc:34:fc:b5:95:33:c4:51:a3:3d:
71:7a:e4:56:be:24:f6:f5:b8:7f:0f:a9:85:6e:cf:
a0:88:43:57:bd:e3:66:1d:6e:af:20:38:84:5b:2c:
f7:a9:76:cb:18:11:52:e0:85:d2:dc:74:80:2f:9f:
d1:b3:80:c0:86:38:02:ef:1d:38:f0:3a:48:7b:ea:
08:36:06:9d:0b:b0:99:95:d0:3e:bd:86:ea:0f:23:
d5:43:70:c7:2e:bd:90:3b:9c:7c:f3:68:50:1e:f0:
ea:75:91:85:0c:65:91:f1:0a:a3:dc:2d:48:41:f4:
66:66:da:3b:d6:17:f3:b6:23:f6:23:5b:33:2e:70:
b1:84:15:ef:cc:f7:ac:22:a2:3a:f2:ce:b1:69:9a:
ab:73:f9:04:ba:d2:f6:a7:60:39:3a:b8:61:20:6e:
25:48:c8:27:a1:6b:23:b6:79:23:5f:df:fc:22:c1:
79:d8:ce:e0:a4:73:4e:0c:32:5f:d7:89:cb:af:7b:
06:89:e6:c6:44:32:1e:ab:f5:1d:0f:ff:75:92:7e:
bd:42:01:6c:5c:35:a4:b1:14:b6:24:f8:55:d0:3d:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:62:B3:89:2D:58:79:99:F9:61:74:D3:7A:6A:79:5F:6B:E7:76:72
X509v3 Authority Key Identifier:
keyid:98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9e:28:52:28:9a:c7:d5:46:be:bb:41:a4:9a:d5:7d:15:0a:
f7:1a:56:a7:ba:e5:05:6b:8a:73:71:03:bd:35:40:86:37:20:
94:ca:ae:c5:e4:fe:aa:81:6b:21:5b:95:0d:46:33:42:3b:ba:
9d:f1:f1:51:c2:88:8f:9a:01:63:76:fe:99:58:2f:d7:f0:34:
93:07:4e:24:6f:c2:fe:b4:91:a1:d2:17:83:ba:bd:ea:a4:ba:
ac:73:74:00:52:ee:05:56:22:46:8b:18:cd:4c:74:5e:e9:55:
83:47:6a:91:3d:ce:fe:35:13:6a:8f:90:0c:03:b5:d8:0d:c0:
55:1d:45:79:ba:4e:28:42:dc:1d:9b:68:39:f0:97:c9:4b:9c:
79:88:1d:89:d8:2b:68:86:5c:bf:80:aa:d5:22:9e:d8:4b:30:
2d:4c:e3:a3:4e:7b:0e:96:84:28:bb:f2:d8:1a:72:7e:ad:4c:
37:ca:e9:27:1c:89:0e:ba:4a:f8:32:a5:ff:24:ec:d0:50:aa:
31:a8:2f:72:87:c6:a3:f1:88:7d:91:93:60:51:c4:ad:66:4d:
f4:c7:1a:6f:5b:c5:80:2c:1f:fd:6c:28:5d:bb:f1:92:cf:11:
00:88:d5:cf:de:d6:56:42:96:b3:92:e7:22:55:2e:d0:23:98:
30:42:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:30:46 2026 by rpki-client