Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
File: MF140gdceCCXnXulDSWxQntn1FY.mft (raw, json)
Hash identifier: yMwFANu8vH1jxoX5Z5BnX2/8GuYivPrGmYMbr3LJwZ8=
Subject key identifier: B5:18:B1:B7:CD:C8:DF:5C:A5:A2:09:C6:15:A3:AA:AB:FE:05:C1:03
Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
Certificate issuer: /CN=305d78d2075c7820979d7ba50d25b1427b67d456
Certificate serial: 019D292963919172615D15C3B4C5222BAFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:01:11 +0000
Manifest this update: Thu 26 Mar 2026 08:01:11 +0000
Manifest next update: Fri 27 Mar 2026 08:01:11 +0000
Files and hashes: 1: F4oDS3nVMxBAdNHBTP_jR3L2rbU.roa (hash: o/R8nP2KVmlJ+NXMkDw0CKw0ITlj+/zX+zWZq5sENck=)
2: MF140gdceCCXnXulDSWxQntn1FY.crl (hash: LcX8bly/UqDa7tohShN+LF02ZjKvq54sZI1Cgf06/8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:63:91:91:72:61:5d:15:c3:b4:c5:22:2b:af:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456
Validity
Not Before: Mar 26 08:01:11 2026 GMT
Not After : Mar 27 08:01:11 2026 GMT
Subject: CN=b518b1b7cdc8df5ca5a209c615a3aaabfe05c103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e4:fc:85:27:d5:1b:94:fc:94:ab:d7:bf:95:
79:39:2a:0a:f8:1a:59:a6:13:da:4a:9a:d1:c7:57:
93:73:cc:f5:95:48:a0:22:e8:99:28:bd:6d:40:64:
6e:94:ff:1e:71:06:5a:3d:a5:c8:15:c5:67:01:ce:
83:38:ee:6e:37:ca:45:05:53:af:15:7f:11:39:0d:
7d:05:b3:dd:8e:e1:85:a2:f7:83:74:f6:da:e3:4d:
d1:57:b4:a1:94:1c:c1:8b:46:80:63:23:8f:03:b0:
ff:d6:4f:e6:e9:77:2a:63:79:e4:8c:ba:fa:a9:3a:
4b:95:58:18:d1:24:c9:b9:a0:15:66:b2:ed:ec:2b:
8e:55:6d:a7:98:90:3f:92:b9:d2:7b:b7:3f:85:40:
8e:a5:7c:0d:3f:d2:32:f2:64:b4:76:23:df:6e:90:
55:cd:b6:c5:06:ca:46:98:a0:ad:d6:82:98:d8:27:
1e:ca:69:c3:11:f1:42:e3:b6:ab:ee:05:f1:ab:e8:
32:41:22:5f:95:ad:f8:38:ed:19:24:b3:ab:57:76:
6c:13:48:f2:d5:25:6b:50:0a:cb:94:a8:e2:80:3b:
19:8c:18:c9:3b:90:65:f9:0e:2d:00:d2:c6:31:ea:
2b:5c:07:b7:6a:b0:8c:4a:2e:4f:f9:44:16:a7:f1:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:18:B1:B7:CD:C8:DF:5C:A5:A2:09:C6:15:A3:AA:AB:FE:05:C1:03
X509v3 Authority Key Identifier:
keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a4:50:a2:af:bf:20:24:2f:ea:c0:bc:bd:15:96:06:54:6a:
8e:a3:26:94:4d:4f:56:b7:ed:14:b4:a7:b9:db:ec:49:60:22:
58:75:73:b5:46:97:ab:d6:36:8c:c0:a5:a2:65:ae:2b:cd:10:
26:9e:25:30:28:90:8e:4e:bb:89:f7:57:e7:fb:78:08:e4:18:
dd:e6:d1:bf:60:ba:f7:8c:f3:30:40:ef:94:ce:58:4a:a4:bd:
44:84:94:a0:ff:1f:fb:81:27:40:4b:fe:6d:bc:cc:8b:69:aa:
b6:57:98:cc:7f:82:30:e3:db:5f:3d:d8:85:23:1e:ff:b3:4b:
85:2f:7a:12:e0:ff:40:76:af:3e:64:87:ca:0c:9a:b2:ee:3f:
44:96:03:06:8c:2b:c9:58:dc:42:58:61:2e:0f:d6:cd:63:fc:
52:96:52:5c:fd:d4:ec:c4:78:52:a6:34:f6:8d:d0:42:6e:58:
43:07:ee:b2:d5:1e:5d:c5:92:66:86:12:c5:c8:1a:fc:41:2e:
d9:d3:80:18:45:67:bb:1a:6f:3f:bb:6e:d7:68:d5:26:3b:57:
a1:40:c8:c0:d5:9c:9f:cc:2d:80:f0:c0:eb:04:af:af:ba:e3:
5b:28:60:9e:ff:75:a3:ed:72:7a:98:7c:26:80:a5:aa:73:86:
34:8a:99:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:19 2026 by rpki-client