Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: PvgaGK24luhjfwispDwz149QFAPUYRqojCsmlEj2KHU=
Subject key identifier: 30:42:FD:FD:0C:0A:B4:FD:59:48:55:5C:F8:5F:B8:A7:69:2D:C7:FF
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 019D2996F62B4732186B51392D54C299C760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 10:00:52 +0000
Manifest this update: Thu 26 Mar 2026 10:00:52 +0000
Manifest next update: Fri 27 Mar 2026 10:00:52 +0000
Files and hashes: 1: WHwPKWlS1MbhHwPa_EcSvzO973g.roa (hash: ZJla+7f5axXV/6uT6lJ/b0sWEBJptZZvhKtPIna394I=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: JhLTYvNt3cXSrKaCgd9vz3FkOtWKMXgnEZm+qmYjeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f6:2b:47:32:18:6b:51:39:2d:54:c2:99:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Mar 26 10:00:52 2026 GMT
Not After : Mar 27 10:00:52 2026 GMT
Subject: CN=3042fdfd0c0ab4fd5948555cf85fb8a7692dc7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:f3:3d:08:37:72:38:b8:06:c1:41:51:e1:
98:36:7c:a1:7b:07:6d:24:c4:cd:dc:41:41:b2:30:
db:25:f0:e2:d2:06:1a:64:4c:ac:94:97:a9:e6:08:
4b:42:1a:4d:d6:de:6d:fe:d5:bf:02:0b:82:2f:56:
63:a3:36:4e:75:ea:51:f7:f2:da:64:90:1c:de:29:
66:4e:0f:df:74:30:7d:4a:5d:d8:51:d8:fb:9f:d4:
28:dd:d3:fe:97:92:6d:19:bb:27:14:f6:12:1c:ac:
b4:b1:44:9b:26:b3:6d:bd:e6:68:8b:92:25:3c:8c:
68:f9:f5:08:f2:2c:1c:0a:45:28:1c:b5:f0:7a:2d:
a0:48:55:a1:8d:17:9d:14:0e:92:ba:7a:0e:c8:47:
ff:5a:e2:e3:5c:47:64:5b:69:40:ef:29:95:9d:8b:
28:7e:46:30:fe:cd:44:46:f5:02:7e:46:7c:96:85:
bd:23:2d:7f:b7:4f:19:f1:31:4a:cb:b8:83:5f:88:
cb:c9:d2:ff:37:76:c7:94:21:54:d6:b0:8b:b5:3a:
59:c1:99:23:2a:cd:58:66:85:13:32:f1:7a:ad:c7:
47:a7:43:8e:2e:1f:18:2a:0a:db:95:38:90:cc:4f:
7c:43:33:f9:f1:c0:0d:5e:64:70:1e:4c:36:41:7a:
76:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:42:FD:FD:0C:0A:B4:FD:59:48:55:5C:F8:5F:B8:A7:69:2D:C7:FF
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:21:6d:21:a2:7e:70:44:4c:ca:c3:20:84:dd:3d:9a:c7:bd:
c5:cd:9e:68:47:93:a3:14:9e:11:4f:97:1b:a1:76:a3:e3:df:
ce:2a:1c:f5:a3:8a:f3:e3:b1:88:51:57:32:0c:33:20:58:5d:
2f:96:2d:85:3f:e2:05:83:4b:ae:10:1b:1a:84:89:05:fd:e3:
57:c2:db:c6:c7:2b:c4:2e:11:58:89:99:c7:63:fc:bf:4b:41:
e7:f1:d6:a3:04:58:15:2f:17:c0:1c:70:7c:ec:fd:5e:e5:38:
55:9e:0f:67:f4:15:b2:0e:f4:73:42:9a:e7:a4:67:38:4a:b9:
00:58:a0:2b:93:66:fd:67:a5:d2:66:9d:2a:37:03:8a:43:79:
00:c4:92:a1:0b:76:e2:21:2a:f4:56:d7:5c:b8:e5:b0:8e:ab:
3c:09:06:32:20:ed:db:89:8e:44:d6:fe:10:d8:96:82:32:2d:
91:6c:da:7f:b5:66:72:62:1f:5e:75:b1:c4:a1:a2:2b:3f:ce:
8f:a9:b3:e9:7e:b7:0e:8b:2e:ad:db:e9:ed:40:83:4a:4e:3c:
76:68:b7:b2:b9:85:a7:4f:0a:42:74:a7:c5:05:cc:99:df:09:
e1:b6:9e:60:fb:43:20:dd:4e:9c:9b:ca:1b:fb:63:79:bd:ab:
c5:e9:1f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:17:44 2026 by rpki-client