Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File: mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier: PVtZQPprpzLy8bab1TTF70N0GV1nTasYYliKeaTSFHI=
Subject key identifier: 91:F2:3B:B0:5E:A0:47:7A:F4:CE:82:69:FF:76:CC:F0:D7:AD:E9:8F
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial: 019D26282AC1F0FEC32465F56250119E404A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 18:00:59 +0000
Manifest this update: Wed 25 Mar 2026 18:00:59 +0000
Manifest next update: Thu 26 Mar 2026 18:00:59 +0000
Files and hashes: 1: G9j4sjTeWzLExGQLke1RPswI0EU.roa (hash: Hiz7NVerTeUMvhHieLj4YdPxQvNl9jDBd3ik+M6E8jI=)
2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: uLMMtfqK3TYpSy74MwBTCVb+V6/Gjf6FccIV15ZsViA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2a:c1:f0:fe:c3:24:65:f5:62:50:11:9e:40:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Validity
Not Before: Mar 25 18:00:59 2026 GMT
Not After : Mar 26 18:00:59 2026 GMT
Subject: CN=91f23bb05ea0477af4ce8269ff76ccf0d7ade98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:0f:71:df:d4:ed:41:51:06:7b:41:a7:08:
14:98:ce:85:a2:ae:ca:26:9b:2a:d7:5d:d4:32:b8:
d3:ea:c1:49:97:92:65:23:84:26:be:98:3f:71:5a:
f2:a5:95:ba:2d:09:97:a7:b0:4b:ba:c8:ed:ce:96:
ca:91:c1:1b:83:78:47:9e:ca:28:49:33:a8:6c:59:
15:21:64:67:0d:4e:44:0a:19:4b:44:d3:10:73:19:
45:d5:24:6e:60:fe:10:4e:65:b6:41:1a:7e:c9:54:
a5:07:5e:f8:9b:20:31:03:57:64:d2:31:5a:82:23:
37:87:db:f8:fc:58:a8:9c:d6:51:e3:3d:18:19:d8:
dd:8c:3a:53:fc:94:15:b1:9d:3c:f0:8b:4f:c7:c3:
04:2d:1f:18:ef:1a:e7:9f:f6:5c:91:59:31:a5:82:
4d:58:44:f5:00:ca:2f:3e:8f:c4:a6:ca:6c:4d:92:
7b:f6:00:a6:13:75:b6:c5:52:32:c4:ce:de:d2:45:
0e:e7:6d:36:9f:24:11:f8:1e:55:c0:9f:20:cd:a8:
6c:e3:54:21:72:2c:5d:ab:0c:2a:52:67:56:38:81:
cd:ac:3c:44:4c:f3:05:0c:d1:49:f0:f4:c9:81:75:
87:b2:06:33:3b:89:88:70:73:76:c3:12:87:3d:88:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F2:3B:B0:5E:A0:47:7A:F4:CE:82:69:FF:76:CC:F0:D7:AD:E9:8F
X509v3 Authority Key Identifier:
keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a7:91:ea:7d:36:af:ae:a7:0a:ab:e0:89:dd:0b:9b:04:fd:
5d:dd:1e:1d:17:7f:d1:0b:e7:c2:69:b3:f6:6e:d9:81:01:8b:
6a:93:12:80:15:26:00:91:fa:aa:16:2e:00:af:d6:28:97:fe:
68:24:e8:fd:4d:e6:83:ec:87:43:9f:7f:b7:63:14:a5:81:b8:
be:d9:a1:58:11:f1:95:46:fc:74:de:d9:b9:46:d0:88:7c:54:
7f:6a:54:94:bd:ff:75:2a:62:40:5a:05:84:e6:41:10:e0:00:
2a:3b:2f:35:14:6a:a2:08:b1:4f:1a:da:5f:67:53:c3:ac:33:
36:cc:e9:d4:04:27:bd:e9:03:69:9e:86:92:b9:c9:02:02:0a:
e6:2e:83:75:65:94:de:ab:73:85:c8:95:05:c3:bf:27:df:11:
d3:9c:2d:30:2a:d2:1f:c4:7d:78:73:73:da:91:6b:9b:65:e0:
30:d0:3c:39:00:77:27:65:8d:34:62:ad:c5:c7:2a:17:7c:a5:
76:8b:80:35:36:4c:4a:59:73:15:f3:ef:e8:40:66:8f:ed:47:
93:40:40:f3:13:e0:3e:bc:9a:89:ed:b6:93:ae:4e:dc:1d:7a:
d9:00:a9:91:7a:ba:50:33:b4:ad:0c:2c:6d:71:9d:1d:cd:3b:
5b:78:d6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:15 2026 by rpki-client