Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
File: MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json)
Hash identifier: sGZsk9jeV+k0XMaaYA+FZXjdid/yljIipHirqTtP5Jw=
Subject key identifier: 99:68:E0:75:45:31:1C:EA:6E:15:69:E2:7F:DE:6F:6E:9E:4D:7F:C6
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial: 019D2A3BD1F78B6BB6436A074AFCC94B8318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
Manifest number: 06F8
Signing time: Thu 26 Mar 2026 13:00:56 +0000
Manifest this update: Thu 26 Mar 2026 13:00:56 +0000
Manifest next update: Fri 27 Mar 2026 13:00:56 +0000
Files and hashes: 1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: m9QXlB8Da7Y8zcgmsZo3OxvnxM3Bd4zK2wxwaGh+9Qw=)
2: fpLIbJHijuX4TKgTAyoHnBJ9FNk.roa (hash: gQJgoj/tjnQ3iGvuvLFVs4DZHdJmjGfyDkoOcNA2s6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:d1:f7:8b:6b:b6:43:6a:07:4a:fc:c9:4b:83:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Validity
Not Before: Mar 26 13:00:56 2026 GMT
Not After : Mar 27 13:00:56 2026 GMT
Subject: CN=9968e07545311cea6e1569e27fde6f6e9e4d7fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:be:7c:1b:50:9e:01:73:1b:bc:40:40:da:
3c:af:0a:a1:85:2c:11:46:f1:d4:56:50:c7:5b:2c:
e6:b8:a0:2e:b8:32:1b:a8:6c:c1:ab:5a:7a:86:a0:
a6:d4:0b:59:7f:f9:b8:69:a0:6d:cf:51:aa:8b:06:
b9:7b:ae:e7:7f:f3:5b:03:e8:bd:95:1b:34:93:2b:
ec:3b:a6:f4:74:a4:dd:c9:4a:53:b2:5d:d2:85:1c:
e3:27:2b:99:63:ae:07:17:ca:e7:05:8a:ba:1b:c7:
b4:39:e6:63:95:f5:1d:dd:93:45:51:29:c0:1f:39:
15:c6:70:fa:74:d0:13:36:f1:59:78:4e:c7:e7:78:
7e:89:5a:34:e9:71:e0:70:aa:20:de:73:2f:a6:73:
70:7d:fb:b7:a7:a8:af:ed:b6:7b:77:c2:88:3e:85:
20:19:0c:73:b6:30:0f:6e:f7:96:ea:60:4f:71:02:
91:8e:48:65:ff:d5:46:3a:53:47:b1:45:ba:26:59:
04:a6:11:b3:9c:ed:7c:13:f4:4d:ea:15:e6:d9:cf:
38:5c:51:72:9f:dc:15:90:10:fb:e8:0f:95:6a:22:
7d:ca:29:13:64:52:41:8b:af:f9:e8:ce:d7:12:3c:
95:cc:c0:16:07:c3:dd:06:c1:ba:ff:82:17:1b:90:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:68:E0:75:45:31:1C:EA:6E:15:69:E2:7F:DE:6F:6E:9E:4D:7F:C6
X509v3 Authority Key Identifier:
keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:45:07:e1:75:00:2c:3e:3e:e7:55:55:5d:6b:26:f1:ca:51:
af:40:33:88:a6:4e:b5:68:8a:a3:17:00:45:a4:b2:9b:b9:df:
86:7f:f1:0a:cd:39:df:4f:29:0f:c7:9c:14:6b:21:c4:23:7e:
10:ef:63:14:e7:4d:5e:4a:c9:44:b3:ff:a1:23:4f:e7:99:f4:
ee:41:6c:e1:b3:04:e9:7e:3b:e1:f9:b7:6d:10:b7:f9:2b:07:
ea:2e:80:a2:85:1e:45:06:0b:59:07:5b:a4:d4:86:1c:70:74:
52:2e:08:52:ae:a4:3c:41:9f:56:21:20:a7:6d:2e:19:18:8f:
a2:f0:99:7e:72:86:12:35:e1:43:c9:e5:67:9d:57:14:eb:c1:
cb:5f:22:3a:c1:dc:de:7f:ea:4c:29:f3:b4:3b:a7:82:47:c5:
a8:98:a0:d2:5a:44:a3:5f:60:8f:6b:b4:d7:f1:94:dc:24:69:
91:38:eb:cb:1b:0a:98:0b:a9:c5:03:b7:5e:97:86:32:bd:35:
9a:aa:bc:27:3b:88:d9:30:82:8b:fb:e6:56:86:ba:01:1c:b1:
41:57:2d:a9:98:1a:e8:1d:2d:7a:f7:2f:d9:7e:06:7a:ef:1c:
53:6d:00:2d:46:e1:b9:48:6f:0d:d6:b3:35:23:86:91:60:9b:
c6:36:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:44 2026 by rpki-client