Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
File: cM9eaXxglK22vJcVazXgBf1M8uI.mft (raw, json)
Hash identifier: d8JhU2S4YPfG3of/k1rk/ZbOHVtnqsaKAedhgu40eLw=
Subject key identifier: 88:AE:2D:6E:CA:CF:D8:8B:7B:46:95:B3:99:3F:81:86:95:3A:98:D0
Authority key identifier: 70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
Certificate issuer: /CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Certificate serial: 019D2628154C7A07FBAAC24B60631A03870E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:00:54 +0000
Manifest this update: Wed 25 Mar 2026 18:00:54 +0000
Manifest next update: Thu 26 Mar 2026 18:00:54 +0000
Files and hashes: 1: NBCpqIpZAF1KaD7VX5EAO0lgw58.roa (hash: FNwe4WLfDmM1bNzJd35FzEdIcc1xxE0RPwhccQQkLXQ=)
2: cM9eaXxglK22vJcVazXgBf1M8uI.crl (hash: bgADhBetfOS+Fzx2ZBPZvRhBK3XXu8/MMeO4ZjPG11k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:15:4c:7a:07:fb:aa:c2:4b:60:63:1a:03:87:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Validity
Not Before: Mar 25 18:00:54 2026 GMT
Not After : Mar 26 18:00:54 2026 GMT
Subject: CN=88ae2d6ecacfd88b7b4695b3993f8186953a98d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:88:73:13:84:0c:a7:69:c0:18:bc:18:c2:76:
b7:c2:70:c3:66:12:0c:40:6b:ca:f5:a2:d6:44:4d:
9e:38:a3:ef:58:57:d8:1f:aa:ff:12:4a:3b:c4:09:
e9:e8:4e:82:ef:0e:43:15:f6:06:76:5b:b7:e9:ee:
ed:e6:2b:b0:97:f1:45:39:aa:0d:5d:d8:fb:34:e0:
46:32:c3:a9:44:fc:44:7b:03:3e:91:2a:52:7d:72:
e9:8e:80:f8:87:c3:35:ad:a4:bb:7e:d3:c8:75:2d:
c6:35:54:9d:ec:12:c8:68:90:5c:c6:7d:80:8b:07:
65:5a:5a:8d:1c:ba:ae:d3:10:74:d8:4d:b4:08:b8:
23:db:b4:3e:c7:4a:5f:b6:68:bc:b2:da:0d:fa:71:
37:d7:01:c9:5a:55:7d:72:68:3c:e5:4b:88:7e:58:
f9:bc:d3:ce:50:0f:d8:2b:b1:36:40:21:fe:fb:b1:
33:8e:5d:66:ae:de:82:dc:45:b8:07:8f:7c:d3:ed:
d0:e9:9f:f0:6d:ba:7d:1d:0d:21:28:bf:ce:c3:65:
a4:05:88:c5:59:c8:99:4d:93:5e:13:19:1b:34:40:
36:ed:86:a1:f3:ad:c4:f2:47:d5:8f:a9:25:9e:6f:
6c:c4:3d:af:3a:b6:81:ac:41:c6:12:3d:43:80:00:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AE:2D:6E:CA:CF:D8:8B:7B:46:95:B3:99:3F:81:86:95:3A:98:D0
X509v3 Authority Key Identifier:
keyid:70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fb:6e:8d:33:e2:16:89:f6:60:7b:f1:d8:de:ff:f9:5d:81:
fe:24:ef:0e:d6:46:85:46:05:24:92:e9:ad:a4:fe:83:be:03:
7c:8c:ed:72:c4:4a:f4:dd:5c:26:58:af:77:a5:b6:f4:74:0d:
4b:47:72:2f:6a:fe:64:19:d7:fc:25:b9:d3:db:47:4c:5d:33:
ee:a4:60:05:58:e0:fa:16:67:a6:a0:1a:fd:ba:70:02:98:aa:
74:73:14:3e:9f:ab:c9:8d:a7:ae:43:2f:b4:05:61:a0:79:ad:
32:5b:03:77:9d:e0:88:17:eb:d9:ed:fe:05:51:ab:80:c9:c4:
84:84:8a:3e:41:54:80:c4:62:50:6e:14:d4:b7:4a:ae:56:51:
1c:26:63:52:0a:fa:71:85:f1:e7:7c:c7:e5:bd:a8:62:cc:5d:
84:65:db:71:19:16:84:85:ef:3f:56:52:8d:0e:03:2b:63:46:
bd:b7:28:a7:66:10:f3:7c:75:47:4a:4c:49:04:50:07:db:6d:
9e:ab:38:a7:8c:5c:63:03:34:bf:89:9b:ed:3f:58:61:da:4e:
e7:ed:ff:b6:a6:1a:1d:05:21:87:ee:ff:bc:aa:32:77:35:18:
33:d8:e4:82:a3:9e:fc:a3:fa:15:bb:86:cf:83:53:54:e6:46:
6a:5d:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:55 2026 by rpki-client