Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: kztOEzlEcysiXMHyDTOx/YBivLpCnFwWCiI6+rcqA0A=
Subject key identifier: CB:BB:D5:51:9A:B7:AC:AB:07:BB:68:1D:8C:53:46:95:9A:F2:DA:03
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 019D2696097B8CBDBEFF9DCFEB6CEB80A07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:01:00 +0000
Manifest this update: Wed 25 Mar 2026 20:01:00 +0000
Manifest next update: Thu 26 Mar 2026 20:01:00 +0000
Files and hashes: 1: Avc3DoG9n8NvJWjUCmVcnkN97O4.roa (hash: YMjpamajsCA46OT3leu0kluW3gE2qUo5wS/kP9h33r8=)
2: Ek07ovRM2Kh_Vc9JMXBQkpJ1Q9o.roa (hash: SY/fpD8jCYcf0UhkUzguL/mEf+0d9gsoahH2LNMAjv4=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: En1lcSRRVpZjyVaCls2thuTrFr7gBTt9gDEBDdWO6cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:09:7b:8c:bd:be:ff:9d:cf:eb:6c:eb:80:a0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Mar 25 20:01:00 2026 GMT
Not After : Mar 26 20:01:00 2026 GMT
Subject: CN=cbbbd5519ab7acab07bb681d8c5346959af2da03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:80:01:f4:e4:5e:42:38:65:59:28:ae:57:
83:a4:75:c8:b6:b6:73:d4:9a:85:f6:d1:72:56:d8:
be:7f:93:7c:0a:43:b5:a3:cc:f4:62:ba:64:9d:74:
2e:4a:95:6e:a7:24:08:ef:a6:66:87:9d:0a:2a:8c:
c4:2e:b8:45:05:f4:19:16:f2:57:e1:66:c3:34:27:
0d:99:88:32:6d:ca:53:3b:12:24:21:2d:46:83:7c:
1c:60:44:51:46:3d:c6:a2:aa:fd:51:a0:70:86:c2:
c8:b7:d1:c6:18:a8:e2:aa:10:b2:1d:a7:88:df:74:
10:18:6a:3e:92:ac:9f:15:47:61:4f:05:56:13:9e:
7b:ca:eb:74:80:fc:da:e6:f3:32:97:b7:ce:22:e8:
29:ef:77:4d:b3:f7:61:e0:cb:db:ba:ec:75:95:41:
52:36:25:03:9a:ee:da:bc:09:3a:d1:59:d4:bc:61:
b5:8b:be:93:4b:d9:77:ab:74:dd:f4:69:51:d0:50:
28:ed:12:84:10:14:a7:04:08:35:8d:18:c6:9c:37:
15:7e:70:8c:55:f9:4d:12:be:63:80:14:e7:60:41:
44:89:15:04:13:98:1c:02:a3:8c:59:2f:96:31:09:
d4:99:b5:56:7e:0b:3d:a4:7d:e3:d6:b8:63:56:81:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BB:D5:51:9A:B7:AC:AB:07:BB:68:1D:8C:53:46:95:9A:F2:DA:03
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7c:49:f0:3d:76:c1:b9:3e:70:a9:7e:f6:76:8d:d2:c4:5f:
f6:e4:64:9b:c5:ff:e4:d8:d8:b5:cc:79:b8:be:33:93:7c:fd:
24:4a:c1:ba:ff:cd:9d:fb:54:18:11:ef:84:9e:f3:e5:18:0e:
29:22:67:30:42:b4:6e:cc:c1:05:47:21:fe:31:e2:1c:50:c1:
37:df:85:99:5e:16:5a:ed:10:92:79:15:ad:24:ed:c7:51:b9:
35:90:e4:35:33:6e:1c:ed:79:a6:18:39:84:9e:f4:f2:cf:73:
ea:bf:d7:96:23:24:e4:c2:f1:01:9e:4e:44:16:eb:7a:23:09:
58:68:e5:0b:da:87:1c:f8:12:19:62:92:0f:50:88:c7:81:e7:
73:21:ef:94:5c:3c:12:da:f9:ac:3e:c4:69:25:77:49:f4:de:
12:63:c6:d6:c9:a6:18:61:1b:0b:66:33:f0:ca:55:fe:f9:a5:
10:d7:d2:44:27:a6:d0:92:69:05:c0:d3:96:2b:68:fb:41:79:
9e:92:9a:d4:fc:9a:af:9b:87:2b:58:bf:62:bc:50:63:fc:3c:
2f:53:0a:a3:e7:1d:61:2f:75:43:77:e9:9e:d0:df:6b:81:2e:
ba:ff:f5:25:bf:82:dd:e4:2c:df:e3:29:b5:16:e2:d2:fc:99:
ce:d4:49:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:44 2026 by rpki-client