Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: hqxqhp3N2QAASUE5BboW+TmFmNhKpDe8zYB9dstMH7s=
Subject key identifier: 80:54:8C:93:A1:45:B8:82:23:38:00:F6:FA:9B:4F:A3:E4:7C:FD:AA
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 019D27E0495797932EC80FFB4BCD7EE743EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: 2P1GYD166nihkwScz5T2PnxUNBc.roa (hash: kpyKepByfDU6eMI6BwB2mHLR2Ws+hOGxFPcFrKdltdw=)
2: 3C-MFf4CxJMdsuA2xUMbeT95cFQ.roa (hash: l72WNVI7l9ZF7eo8/aRUo3EuE6KrjKZ6m4xqm9jc1jg=)
3: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: GG2TMOrjfTTsi0GOE/Zc8fY1yGvol++48jDCZDiZllI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:49:57:97:93:2e:c8:0f:fb:4b:cd:7e:e7:43:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=80548c93a145b882233800f6fa9b4fa3e47cfdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cf:c7:eb:cd:f6:08:45:7a:a5:25:4a:02:64:
81:5d:24:90:5e:c4:92:98:cc:bb:a1:4f:9b:4c:5b:
18:57:d4:9c:3d:0b:c1:b8:df:82:c4:48:fb:2e:20:
16:a8:e5:f7:94:97:7c:a0:36:44:fd:fd:01:31:90:
5a:e2:40:64:f6:36:66:61:c5:e1:d0:5f:b1:f3:ea:
c8:63:1f:c8:ea:03:3d:b7:cc:31:f0:fc:98:e9:98:
85:54:14:20:96:0c:c1:05:0a:5a:a7:15:85:a7:74:
c9:ce:eb:66:60:dc:d0:98:69:11:f2:51:7f:a1:d6:
83:2b:f0:c1:fd:6f:31:71:97:c1:54:c6:da:71:52:
5f:8f:2b:28:56:21:b2:18:c4:b6:a8:72:15:92:0e:
e3:4c:05:7c:cf:7f:c3:fb:dc:0d:23:f6:63:12:2d:
11:62:f2:54:22:a3:e3:90:29:ed:52:1f:63:dc:8e:
9b:e8:e3:e8:f5:39:2d:26:eb:ca:d3:07:3f:3a:4a:
a5:c4:c8:a1:00:0c:c9:c9:17:82:f1:06:43:af:96:
c1:e9:15:07:d9:7c:fc:45:47:3b:cc:ca:81:a0:e4:
67:66:84:25:47:ae:04:16:03:fd:41:06:be:f4:5c:
7a:9c:c1:07:c8:44:0f:f4:29:db:74:27:dd:a4:bf:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:54:8C:93:A1:45:B8:82:23:38:00:F6:FA:9B:4F:A3:E4:7C:FD:AA
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c3:46:c8:23:17:f5:cf:f9:49:9b:9f:f2:58:89:26:0c:1e:
fb:fe:1f:db:3f:76:03:6a:e9:3d:c0:27:87:85:6e:9a:5c:a9:
f5:09:b9:d7:01:07:f8:45:7b:4e:bb:33:12:44:34:4d:c2:15:
bd:40:06:df:5b:c4:18:bb:e2:73:2d:4e:0c:4a:3f:98:6d:0f:
86:94:2c:6c:e7:e7:eb:b0:44:24:43:51:db:b7:67:b9:1c:63:
64:75:3d:2a:77:d5:4f:4f:d8:a8:92:e2:34:06:12:90:5a:09:
7b:f9:91:67:08:77:f6:c8:41:89:41:64:99:69:c9:33:86:c9:
27:7a:df:32:6c:c7:da:f2:9b:8b:3c:d2:53:ff:33:24:42:73:
dd:e4:2a:0f:62:cc:ec:af:76:3a:76:e1:ca:eb:df:f4:64:60:
b4:fe:4d:cc:f7:1d:d9:26:7e:17:f7:9a:dc:e2:60:4c:c1:f8:
6a:e3:90:7f:a9:d8:c9:7f:75:8a:b2:a1:b9:b9:3f:46:e5:71:
85:c5:9a:57:1a:02:02:df:8c:22:47:72:7a:ba:2f:c5:ed:9e:
97:ba:4b:56:73:68:d4:2b:63:16:2a:91:73:ab:77:4b:0a:60:
90:57:eb:8c:ee:f0:88:6b:05:46:bd:b7:cf:54:23:a6:e7:62:
8c:32:99:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:15:47 2026 by rpki-client