Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
File: rgMnvx57e_vdLyFMjvYpqink1m8.mft (raw, json)
Hash identifier: jmM/2ULgntxOfiAJIuS0evtbh+25FzEndtDefSfUUR0=
Subject key identifier: EA:03:77:01:4D:55:24:A9:6F:5C:98:04:9C:59:71:69:A7:B7:62:F5
Authority key identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
Certificate issuer: /CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Certificate serial: 019D2772D0B44BECF569607073FEA782EFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: 43XYcf5-XFEmoBb-JGay0mPibOQ.roa (hash: FgO/4nn5vJOam5rskKh+YaRMW3mrGa5JCylvjIZYN3s=)
2: rgMnvx57e_vdLyFMjvYpqink1m8.crl (hash: 2x3GDnedxuCBDXd/W9nQyKcp3L5Ot0Iub92zzE/Kg6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d0:b4:4b:ec:f5:69:60:70:73:fe:a7:82:ef:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=ea0377014d5524a96f5c98049c597169a7b762f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:97:c4:11:55:00:4c:03:d4:fc:57:2f:0f:
50:c4:99:72:da:88:91:fb:74:ca:00:d6:78:17:f6:
8d:dd:6f:85:b8:b3:6c:03:65:0d:3c:3d:3e:96:6a:
91:e4:82:1d:70:f6:fc:f7:64:ad:01:64:12:4c:6f:
8c:f4:8f:83:4f:cf:a1:61:76:92:ef:b6:ee:f8:e6:
64:4e:04:cb:a6:d3:bf:18:57:05:5c:5c:d2:3b:96:
7c:7c:76:17:bd:46:d8:bd:24:76:65:10:98:47:94:
81:f9:dd:e1:97:27:36:f8:84:08:81:27:a5:46:46:
bf:4e:64:61:3e:d9:72:24:3c:bc:5b:2d:22:b6:c2:
9e:21:bb:21:82:0a:26:20:d1:5d:02:4a:44:d9:c5:
78:0f:fd:11:6e:0b:ae:39:f1:c7:25:64:56:5b:e3:
7f:26:16:25:a6:cc:fd:05:96:5b:ce:22:60:5e:d6:
98:39:7e:00:be:9e:7c:46:c8:54:4c:cc:d4:27:94:
df:d7:4b:b5:00:35:9c:70:ec:c3:ae:8c:ac:32:4d:
9d:62:e8:7a:f9:4e:33:9d:e0:77:87:5d:82:ef:71:
16:e2:da:28:15:3b:5f:a8:75:1d:00:37:a2:c5:cf:
e8:12:cd:56:f3:38:ba:b4:65:96:7b:53:9d:2b:2c:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:03:77:01:4D:55:24:A9:6F:5C:98:04:9C:59:71:69:A7:B7:62:F5
X509v3 Authority Key Identifier:
keyid:AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bf:41:5f:f1:14:d6:99:fd:c4:db:7a:05:74:c6:37:46:71:
47:d7:94:64:96:86:dd:b8:8f:48:70:28:70:62:13:bc:07:1d:
70:ec:8a:c9:f8:47:0f:8d:57:8c:84:cf:c8:a6:18:16:a4:94:
27:23:f3:a8:f0:75:ff:82:02:0c:44:a4:07:e1:25:23:03:1f:
53:13:3f:31:c1:43:08:c7:e2:a5:3a:d8:7d:bf:2f:93:00:51:
ff:3c:6e:0e:ba:77:68:d0:0a:51:c0:8e:34:85:ec:e7:38:74:
36:a4:90:28:e7:0e:82:ed:f1:91:a4:79:30:fb:91:a8:51:ce:
5b:0e:dc:d5:2e:d1:a0:79:12:23:fb:a2:e3:f1:34:2c:65:2c:
06:7b:c6:fb:80:05:43:a5:26:a8:10:6b:b1:85:0a:ff:79:ec:
3b:d4:3d:b1:47:4e:db:ce:16:1d:8c:3f:60:ff:ab:59:86:e9:
ef:44:8a:3a:17:92:42:8e:68:1e:0e:35:48:7b:1a:03:f0:de:
48:09:0c:d1:8a:c5:b9:8b:71:08:0c:d0:ae:1e:ec:11:e3:b8:
6e:01:a0:6c:b4:6d:e3:f0:ff:73:13:80:71:c0:7b:96:2b:17:
30:0b:8a:16:5f:1e:60:69:5b:69:e8:b7:ba:d5:55:d5:6b:45:
a7:aa:28:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:53 2026 by rpki-client