Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
File: m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json)
Hash identifier: XVewMB5hzOXrZLP21gGsljrdvzYOgP/CQLkbCQMfLdw=
Subject key identifier: F5:3A:17:1F:FD:12:34:09:64:3D:D0:9A:BF:8A:D4:1C:3A:CF:8B:F9
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial: 019D273AFE98BCF62592C4A470506649A60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
Manifest number: 0C94
Signing time: Wed 25 Mar 2026 23:01:10 +0000
Manifest this update: Wed 25 Mar 2026 23:01:10 +0000
Manifest next update: Thu 26 Mar 2026 23:01:10 +0000
Files and hashes: 1: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: uWzf4ohqA4Zsl4Plnsin47czfGyn+GInhke1pa8HwAY=)
2: yf4fsCLIG2l9cGmJeTOIIc51YeU.roa (hash: UF4YxdCOV/UBjXOSABiqqWZqo/WkePyMELF0t7EktlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fe:98:bc:f6:25:92:c4:a4:70:50:66:49:a6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5193d843af193e24875686673c95896eae3497
Validity
Not Before: Mar 25 23:01:10 2026 GMT
Not After : Mar 26 23:01:10 2026 GMT
Subject: CN=f53a171ffd123409643dd09abf8ad41c3acf8bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:c0:7d:93:39:68:f9:b6:74:62:2a:2f:8e:
d9:29:4b:05:60:4d:d1:57:95:0a:2f:a2:05:db:79:
c6:dc:01:e4:f4:67:82:2b:bd:b1:27:18:20:d4:2b:
52:bf:b9:f3:65:dc:2a:33:31:bb:f8:6d:e8:1c:a2:
6a:44:97:95:3a:64:50:11:11:34:be:97:9c:a7:69:
be:a3:bb:55:37:76:91:65:8b:c9:ae:15:26:ac:bf:
14:06:b4:05:df:34:ae:da:1d:75:88:e3:78:9a:82:
8a:8e:8e:b9:6d:b1:44:f0:9e:ed:50:bd:81:2c:08:
84:e5:c8:10:87:07:b9:71:7a:d4:42:a3:b5:76:4b:
e1:c8:7b:ed:dc:7e:04:78:b3:af:7d:b9:15:62:4d:
fa:f4:6d:dc:13:6e:28:91:0a:92:b3:4b:01:0a:b6:
fe:45:bc:d5:15:7d:23:2a:13:f6:f1:74:86:3c:c6:
40:29:04:11:ba:76:3f:aa:6e:e5:71:c6:a2:49:bc:
38:00:a0:77:1f:b0:3a:1d:78:c6:70:c2:21:60:c7:
e5:81:67:53:73:3f:dd:bf:d6:77:9d:c5:ff:f6:37:
3f:39:f7:af:78:68:14:1a:c5:f6:0f:bf:49:e1:a6:
0f:75:ae:d3:fb:29:04:85:cd:d7:53:3a:46:5a:6e:
3a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:17:1F:FD:12:34:09:64:3D:D0:9A:BF:8A:D4:1C:3A:CF:8B:F9
X509v3 Authority Key Identifier:
keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2a:20:46:01:57:f7:a0:40:bf:f3:40:99:b7:99:39:92:b1:
18:37:02:4a:2f:44:5b:7f:61:23:f0:b8:e6:37:7c:cd:1d:39:
5a:39:5e:39:7c:2b:a2:3e:20:ee:d3:c2:2d:32:39:1a:b4:ad:
57:66:3f:cc:05:1b:44:75:0d:96:c2:6a:b3:4c:08:8f:19:c3:
18:70:8c:44:dc:38:b5:4a:30:3e:a4:c9:0c:35:2c:3c:0b:b2:
92:2c:33:50:16:c9:27:2f:fe:ef:29:b8:e7:27:69:dc:94:88:
40:93:37:a4:1f:41:37:c2:d8:e5:f8:f3:82:72:dc:56:0e:7c:
8f:88:7d:2a:31:54:9c:7b:29:54:03:4a:f8:36:97:c1:74:3e:
2c:eb:39:5d:6a:7c:98:22:84:b6:06:06:14:dd:d2:ca:5f:10:
0a:cd:8c:8f:a3:26:1b:60:cb:1c:89:4e:07:05:6e:d7:b0:22:
86:7f:a8:b1:a4:1e:50:7c:c6:1d:23:1a:92:fb:01:89:fd:a5:
24:e8:00:a4:06:3f:20:c9:80:3b:25:f3:80:71:61:2f:f9:7f:
d6:9c:77:d4:99:90:d0:66:59:c3:9f:89:69:6e:6d:26:75:1c:
56:a3:7b:a5:6b:25:ea:3d:9d:e4:9b:20:a3:13:4b:06:69:12:
1e:36:da:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOv6YvPYlksSkcFBmSaYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTE5M2Q4NDNhZjE5M2UyNDg3NTY4NjY3M2M5NTg5NmVh
ZTM0OTcwHhcNMjYwMzI1MjMwMTEwWhcNMjYwMzI2MjMwMTEwWjAzMTEwLwYDVQQD
EyhmNTNhMTcxZmZkMTIzNDA5NjQzZGQwOWFiZjhhZDQxYzNhY2Y4YmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rnAfZM5aPm2dGIqL47ZKUsFYE3R
V5UKL6IF23nG3AHk9GeCK72xJxgg1CtSv7nzZdwqMzG7+G3oHKJqRJeVOmRQERE0
vpecp2m+o7tVN3aRZYvJrhUmrL8UBrQF3zSu2h11iON4moKKjo65bbFE8J7tUL2B
LAiE5cgQhwe5cXrUQqO1dkvhyHvt3H4EeLOvfbkVYk369G3cE24okQqSs0sBCrb+
RbzVFX0jKhP28XSGPMZAKQQRunY/qm7lccaiSbw4AKB3H7A6HXjGcMIhYMflgWdT
cz/dv9Z3ncX/9jc/OfeveGgUGsX2D79J4aYPda7T+ykEhc3XUzpGWm46VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPU6Fx/9EjQJZD3Qmr+K1Bw6z4v5MB8GA1UdIwQY
MBaAFJtRk9hDrxk+JIdWhmc8lYlurjSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iNWU5NDAtNjUxMS00ODA1LThkMGMt
MDAwZWFkMzk3NjVhLzEvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iNWU5NDAtNjUxMS00ODA1LThkMGMtMDAwZWFkMzk3NjVh
LzEvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiogRgFX
96BAv/NAmbeZOZKxGDcCSi9EW39hI/C45jd8zR05WjleOXwroj4g7tPCLTI5GrSt
V2Y/zAUbRHUNlsJqs0wIjxnDGHCMRNw4tUowPqTJDDUsPAuykiwzUBbJJy/+7ym4
5ydp3JSIQJM3pB9BN8LY5fjzgnLcVg58j4h9KjFUnHspVANK+DaXwXQ+LOs5XWp8
mCKEtgYGFN3Syl8QCs2Mj6MmG2DLHIlOBwVu17Aihn+osaQeUHzGHSMakvsBif2l
JOgApAY/IMmAOyXzgHFhL/l/1px31JmQ0GZZw5+JaW5tJnUcVqN7pWsl6j2d5Jsg
oxNLBmkSHjbauw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:04 2026 by rpki-client