Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: munrck1Crjz+N2lvrLs6rTXcy/OURZWra8/yd5EfndA=
Subject key identifier: 16:D7:F2:F5:8F:36:79:27:7C:32:D6:B7:C9:11:D8:C7:A2:FA:7D:0D
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 019D2583D658895CF4A75A907EA4E4AD5FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 15:01:30 +0000
Manifest this update: Wed 25 Mar 2026 15:01:30 +0000
Manifest next update: Thu 26 Mar 2026 15:01:30 +0000
Files and hashes: 1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=)
2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: GvGPqcu2mAkB2OlB2jpeHaZYTE6+mBmKmsYxRXAfEHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:d6:58:89:5c:f4:a7:5a:90:7e:a4:e4:ad:5f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Mar 25 15:01:30 2026 GMT
Not After : Mar 26 15:01:30 2026 GMT
Subject: CN=16d7f2f58f3679277c32d6b7c911d8c7a2fa7d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:88:4b:82:34:47:1a:4f:1b:fd:7a:53:25:
64:73:0f:8e:34:9d:c6:61:96:52:30:29:27:28:31:
f3:2f:dd:66:09:98:d5:50:a0:eb:f2:c2:db:25:93:
8c:4b:84:62:ac:48:33:dd:78:df:85:52:80:f7:8b:
8b:17:d3:2c:d4:6d:d0:7c:77:5c:1b:36:26:58:c5:
63:e3:73:83:b2:8e:9b:5f:6a:d1:99:f4:53:63:ff:
0b:42:df:77:45:b4:f4:8b:3f:97:a2:ce:89:9b:2f:
42:25:a0:a0:f6:44:bb:af:88:19:61:2f:04:57:7f:
fe:3b:9a:d0:19:69:88:55:34:0c:00:83:78:49:ca:
bc:ac:d6:d4:44:d0:e9:dc:cb:e9:33:93:e0:84:c8:
ad:87:58:f7:74:d6:c9:b6:8d:da:1e:00:ca:74:7a:
76:e3:c0:76:5e:6b:f8:fe:92:4f:ab:e3:b4:9e:cb:
46:15:7b:e3:d4:c4:ee:de:02:42:9f:fe:c1:5b:97:
70:96:fb:0e:28:9d:d0:de:36:9e:7f:3d:54:42:ef:
9b:e2:fc:03:12:6c:71:c4:4c:ed:8a:3a:d4:c0:aa:
a6:17:21:5b:4c:63:70:d4:60:a7:49:bb:75:1b:1a:
3a:33:fc:bf:e3:eb:89:42:a3:95:d4:0f:66:92:dc:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D7:F2:F5:8F:36:79:27:7C:32:D6:B7:C9:11:D8:C7:A2:FA:7D:0D
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:bf:2d:cd:39:53:df:5d:78:87:8a:13:97:e4:06:30:e3:41:
fb:69:6f:bf:97:4c:90:44:99:46:8b:1b:93:fc:ca:19:77:0d:
31:5a:f1:a0:0f:0d:ba:52:76:07:68:32:19:79:3c:e4:90:61:
aa:c9:af:3f:9b:b2:c4:c2:30:53:06:5c:eb:57:0a:bd:e2:6d:
3e:db:21:65:e8:c1:59:3d:a3:d5:01:59:ba:84:cc:8d:df:c0:
5f:b2:de:9b:b1:e0:2f:47:40:f9:0d:8a:fa:de:0b:39:94:a0:
25:30:1d:46:3f:a0:46:2e:51:a6:49:d2:0b:87:94:b6:ae:d6:
68:5b:b3:46:bd:4e:5e:fb:4c:d0:b0:b6:cb:db:c3:9b:45:41:
62:a7:43:41:1d:31:e6:30:95:0f:a8:e5:aa:84:d8:37:07:06:
96:43:e0:b9:15:b4:7e:e3:5b:44:fc:4b:62:ed:2b:1c:e4:fa:
99:98:73:91:d1:b4:b4:7d:15:30:70:c2:6e:0d:0f:85:5e:1a:
9e:75:69:01:d5:ed:49:e4:85:5b:c7:b4:2d:a1:d8:c6:fb:b4:
36:09:3e:67:17:90:fe:04:7c:28:6c:ab:28:9b:c6:8d:a7:73:
cc:78:a0:2e:cf:33:a3:ee:57:c9:2d:3d:6a:84:56:5c:e9:7d:
3d:d2:30:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg9ZYiVz0p1qQfqTkrV/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjRiOThlMzU5YjRjOTJjMzExODNmYmY3NDkyMzhlNmI2
ZjA4YzIwHhcNMjYwMzI1MTUwMTMwWhcNMjYwMzI2MTUwMTMwWjAzMTEwLwYDVQQD
EygxNmQ3ZjJmNThmMzY3OTI3N2MzMmQ2YjdjOTExZDhjN2EyZmE3ZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEyIS4I0RxpPG/16UyVkcw+ONJ3G
YZZSMCknKDHzL91mCZjVUKDr8sLbJZOMS4RirEgz3XjfhVKA94uLF9Ms1G3QfHdc
GzYmWMVj43ODso6bX2rRmfRTY/8LQt93RbT0iz+Xos6Jmy9CJaCg9kS7r4gZYS8E
V3/+O5rQGWmIVTQMAIN4Scq8rNbURNDp3MvpM5PghMith1j3dNbJto3aHgDKdHp2
48B2Xmv4/pJPq+O0nstGFXvj1MTu3gJCn/7BW5dwlvsOKJ3Q3jaefz1UQu+b4vwD
EmxxxEztijrUwKqmFyFbTGNw1GCnSbt1Gxo6M/y/4+uJQqOV1A9mktyDAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbX8vWPNnknfDLWt8kR2Mei+n0NMB8GA1UdIwQY
MBaAFJu0uY41m0ySwxGD+/dJI45rbwjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEt
YmIwZDA0YTI3NzI3LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEtYmIwZDA0YTI3NzI3
LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwb8tzTlT
3114h4oTl+QGMONB+2lvv5dMkESZRosbk/zKGXcNMVrxoA8NulJ2B2gyGXk85JBh
qsmvP5uyxMIwUwZc61cKveJtPtshZejBWT2j1QFZuoTMjd/AX7Lem7HgL0dA+Q2K
+t4LOZSgJTAdRj+gRi5RpknSC4eUtq7WaFuzRr1OXvtM0LC2y9vDm0VBYqdDQR0x
5jCVD6jlqoTYNwcGlkPguRW0fuNbRPxLYu0rHOT6mZhzkdG0tH0VMHDCbg0PhV4a
nnVpAdXtSeSFW8e0LaHYxvu0Ngk+ZxeQ/gR8KGyrKJvGjadzzHigLs8zo+5XyS09
aoRWXOl9PdIw2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:51 2026 by rpki-client