Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
File: m2CmodoPEXgE8H_hJTh6KtyZiWU.mft (raw, json)
Hash identifier: ZTnw7x5EgKPVOMqGzscHh3vcZtkkN014Kt2l2cesovA=
Subject key identifier: 28:2E:28:57:0D:82:A6:83:5D:9F:50:F1:00:81:52:77:7D:05:E6:6B
Authority key identifier: 9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
Certificate issuer: /CN=9b60a6a1da0f117804f07fe125387a2adc998965
Certificate serial: 019D26CCAAC5180B0A723DE1D178318E0888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
Manifest number: 0C78
Signing time: Wed 25 Mar 2026 21:00:40 +0000
Manifest this update: Wed 25 Mar 2026 21:00:40 +0000
Manifest next update: Thu 26 Mar 2026 21:00:40 +0000
Files and hashes: 1: m2CmodoPEXgE8H_hJTh6KtyZiWU.crl (hash: YockhACo9fTAgWoScSjcjxCbFqUJavWx5TNEAPJV/ZY=)
2: xL6i2okIA7E9ZhMsKSID_sgUCVc.roa (hash: Ln2YKmCSYKPNy9YX53PAB4mSncMVxGb9NZGTbUGweTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:aa:c5:18:0b:0a:72:3d:e1:d1:78:31:8e:08:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b60a6a1da0f117804f07fe125387a2adc998965
Validity
Not Before: Mar 25 21:00:40 2026 GMT
Not After : Mar 26 21:00:40 2026 GMT
Subject: CN=282e28570d82a6835d9f50f1008152777d05e66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:17:16:e6:11:77:4e:66:5f:63:91:81:68:
9c:8f:04:98:4c:de:d9:9b:aa:34:89:79:02:55:4d:
48:09:8e:f8:a7:c5:18:ff:a3:66:21:3e:55:19:56:
5c:7c:c9:cb:a3:e5:c4:28:93:3a:f6:e6:7a:5e:1f:
2d:ff:e0:a0:71:4c:9b:63:d7:00:19:b1:92:8b:7b:
48:89:a8:a0:f6:5c:65:cd:39:fe:24:9e:06:a7:1d:
4b:24:bd:23:f9:f3:4c:22:67:dd:b4:ca:48:3e:98:
93:21:a2:48:fb:d5:64:8b:27:8c:76:26:58:b1:fc:
ad:21:ce:4f:5c:ae:7d:52:b3:0a:32:66:4a:0a:4a:
e0:51:8e:c5:8d:42:8b:20:a9:9b:f7:9f:0c:28:e7:
cd:f7:fb:d7:71:42:b5:45:80:85:6e:56:42:49:02:
35:26:79:26:74:eb:be:b4:da:a8:ce:d1:58:e6:5d:
92:10:27:75:23:1f:1c:05:79:87:57:28:ae:05:2a:
ac:99:89:9a:ce:d5:c7:fc:5c:8e:48:5e:49:54:10:
2d:b7:70:e7:89:34:c8:9c:3c:f6:e4:c8:a3:4c:bd:
44:a7:3b:f0:9c:c2:23:08:77:94:4e:20:09:9d:72:
8d:aa:2e:4d:a0:5f:44:7c:90:5c:31:38:d0:0d:88:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:28:57:0D:82:A6:83:5D:9F:50:F1:00:81:52:77:7D:05:E6:6B
X509v3 Authority Key Identifier:
keyid:9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:bf:04:e2:4e:ce:da:c4:68:78:0c:60:fc:09:f4:e4:34:db:
33:6c:62:8a:41:14:19:f4:e4:0c:e6:f0:cd:7b:93:25:27:50:
d7:f7:a2:a7:2c:3d:66:ca:c3:fd:8e:2f:ac:d4:a5:2b:15:22:
1b:ca:29:71:16:01:9c:34:f8:e5:f7:2d:f6:80:c0:0e:db:a1:
c6:94:f9:9f:1a:37:c5:6b:60:de:88:f9:1d:0e:54:e9:23:7e:
ea:0e:e0:37:88:b7:84:54:75:b0:08:b9:7b:6d:7b:7b:5c:0b:
c2:d5:b4:cd:c3:28:02:bc:33:5b:3e:8d:c9:a2:b5:3f:be:b6:
44:0d:0a:80:c0:db:c3:0d:4d:6a:7e:6b:d3:65:37:1c:20:60:
e2:5c:80:46:6a:b5:78:69:24:97:a6:32:1b:59:ea:99:bb:15:
6f:d4:50:58:cf:5e:f3:59:36:cd:3d:74:2a:22:b1:8f:91:c1:
2b:17:09:e3:bf:25:91:22:43:af:a5:c0:38:87:6c:99:e6:f6:
92:58:25:eb:52:03:3e:d4:23:db:c3:d4:0d:07:7b:9c:e5:48:
d3:e4:69:73:07:21:d1:a6:38:32:a8:73:70:04:d3:93:d1:00:
a0:d2:ca:43:4d:cf:42:51:ab:92:31:62:23:5a:e8:23:1e:01:
d0:95:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:19 2026 by rpki-client