Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: NxIvY3Jmu/8f3Ac+oolIqegjZiNINpFjqQlWwDgxJOA=
Subject key identifier: 4C:E8:0D:74:A6:E5:4F:DD:EB:12:8C:64:61:51:BC:8F:3C:41:45:79
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 019D2961869FDBBA71FB8CFB0EDF916C64CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0E9C
Signing time: Thu 26 Mar 2026 09:02:30 +0000
Manifest this update: Thu 26 Mar 2026 09:02:30 +0000
Manifest next update: Fri 27 Mar 2026 09:02:30 +0000
Files and hashes: 1: Hi85wc6uJWXTGae11EDMD2GIBrI.roa (hash: F5Lq64IGd6DB3AuiERrPRgP1NYUhYidZ19qyklKfzQk=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: 33YGvnw50DVaRNzAjmavB369e5HT9OVjud7D7hMHCgA=)
3: wSkm2DS0COZLH_6lYON3OI8O84s.roa (hash: qk1hRiw34z/5pPQQaOhoxeWqj5Uy++y3lT/FiUcWPfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:86:9f:db:ba:71:fb:8c:fb:0e:df:91:6c:64:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Mar 26 09:02:30 2026 GMT
Not After : Mar 27 09:02:30 2026 GMT
Subject: CN=4ce80d74a6e54fddeb128c646151bc8f3c414579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:79:1f:0f:56:9c:23:f0:61:c1:fd:42:08:
4f:8f:55:3a:4c:8e:3d:00:b3:39:dc:73:c4:db:b5:
a0:42:cb:15:e9:f4:73:ad:b8:6b:8b:88:c6:94:7e:
63:c0:3c:4a:23:86:9c:a7:4d:c0:65:c7:1c:2a:ed:
2c:13:56:cc:8f:44:e4:f4:8b:14:7f:65:2f:ec:e5:
ae:34:1f:7d:fe:dd:3c:6b:c1:7a:57:ee:ce:21:e6:
60:02:0e:54:87:87:5c:48:58:4a:b6:e3:8c:f9:c3:
d3:0f:1f:95:97:57:16:c0:5b:48:5e:20:85:dc:ba:
47:a3:a1:14:df:bc:c7:08:c8:bd:12:3a:e7:ec:af:
23:fa:0c:98:7e:d8:3a:b3:29:cb:c7:30:c3:e2:86:
06:55:41:46:c8:59:35:5c:7b:8f:f0:7c:81:46:c6:
52:14:54:f0:cc:9a:f5:d6:ac:5d:7d:dc:98:ab:25:
92:ae:9d:50:aa:ac:96:bb:cc:71:ff:12:7f:4d:18:
29:69:00:4a:df:a7:84:b9:5a:42:ef:b2:89:d5:2c:
e8:2e:54:39:20:8b:ae:33:78:e5:0e:7b:da:86:28:
e8:40:01:6e:4a:37:f7:a6:05:02:71:4c:2b:0b:49:
c8:f0:80:94:a6:dd:73:19:6b:96:c0:d4:87:7d:e0:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E8:0D:74:A6:E5:4F:DD:EB:12:8C:64:61:51:BC:8F:3C:41:45:79
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3b:79:32:37:cf:96:b3:13:96:3f:b2:3e:f2:72:d1:57:28:
eb:df:8a:9f:82:3b:84:23:f6:9b:2a:1f:53:48:32:1b:f4:5b:
8f:12:69:26:95:1f:4f:9e:06:7b:06:da:86:27:33:9b:84:fe:
f9:8c:0c:43:2d:25:16:da:77:16:9a:74:13:2d:e3:35:1b:70:
5e:e1:50:4a:74:cb:02:11:e5:60:cf:26:77:4e:91:f7:86:b5:
fd:9a:74:50:69:5f:63:0d:ba:36:84:23:dd:26:8b:db:99:98:
e4:c3:45:44:61:20:da:27:c5:3d:aa:66:db:fa:f9:49:e5:41:
53:72:58:55:ef:12:de:75:13:00:52:fd:e1:7c:23:0f:41:a8:
e0:19:20:29:b5:97:fd:cf:9f:27:53:dc:fe:6c:0d:ac:bc:e6:
1e:2e:b5:54:62:77:30:f4:b6:df:9a:a8:66:1c:97:2f:45:a6:
e4:72:b3:e3:67:67:46:97:02:46:aa:ae:2e:18:61:f6:b6:29:
5b:0b:46:78:35:b4:d7:94:5f:8c:f7:64:9f:d6:92:20:b5:c2:
1d:ed:48:5b:ca:cd:70:74:9e:c9:8f:74:55:e1:5f:6e:64:0d:
9d:72:ce:98:33:1e:be:11:1a:77:ec:11:1c:ce:f0:f9:e9:4d:
29:ad:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:35 2026 by rpki-client