Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
File: mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json)
Hash identifier: 4AHEbRMA/ZUMuctm4CtgHveNncu8Ed8IKYiE4cUo6mk=
Subject key identifier: 52:4C:9D:C4:4E:76:A3:E4:64:60:B0:96:C5:42:2E:29:DC:C2:70:79
Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
Certificate issuer: /CN=99252ff7f4dcf62234d22f86a1135b344923daab
Certificate serial: 019D26CD797C2C52D8FE72BA0386767F38E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
Manifest number: 0B3D
Signing time: Wed 25 Mar 2026 21:01:33 +0000
Manifest this update: Wed 25 Mar 2026 21:01:33 +0000
Manifest next update: Thu 26 Mar 2026 21:01:33 +0000
Files and hashes: 1: RQkXmpWajYBXor9So-wL840KNkQ.roa (hash: X3j2x3fF0ht1rXuyx9TYCfG+9AORrgkuoTZ6MublhHE=)
2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: Lbp6BeXL5mmnznf0ygVllPv5FHgi9FB0nEd+benAUl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:79:7c:2c:52:d8:fe:72:ba:03:86:76:7f:38:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab
Validity
Not Before: Mar 25 21:01:33 2026 GMT
Not After : Mar 26 21:01:33 2026 GMT
Subject: CN=524c9dc44e76a3e46460b096c5422e29dcc27079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:00:bd:3d:60:24:f9:74:66:ec:5b:2a:44:93:
f2:df:54:e9:69:aa:c1:a4:6d:f3:dd:ee:0d:35:3d:
ce:0c:73:3e:17:01:cf:b1:56:cd:11:2d:1d:25:82:
92:36:a9:b1:f4:69:9c:5b:03:37:f4:92:5d:a3:7d:
79:95:05:a4:1b:d9:cf:4d:52:ff:e1:18:ee:84:50:
7b:a9:79:78:3f:ab:4b:78:f2:45:85:d4:a5:d9:6f:
bc:54:38:cd:6b:0a:47:9f:5d:78:ec:fc:5b:de:06:
b5:1f:a0:bd:0b:58:68:d2:5d:1f:f3:85:23:7a:5f:
53:01:94:69:01:bf:ff:02:98:43:4d:7a:74:e0:92:
9e:e6:9c:0c:36:28:20:92:82:d9:dd:5d:f7:b4:25:
25:10:8c:bd:6f:24:ea:a5:b8:8b:bb:eb:58:99:6d:
02:2b:68:66:2b:32:de:86:14:71:83:70:22:28:4a:
10:ac:13:1e:d5:b0:1a:d0:2c:c5:e5:95:c8:8f:f9:
25:b1:c1:9b:55:d1:f8:50:b7:d5:37:46:b8:78:3c:
1b:68:8b:cf:d4:cf:3a:90:17:c6:47:b5:5e:c5:76:
b3:85:0c:65:27:26:6d:0d:1a:ff:80:e1:2e:c0:1e:
e9:d9:4f:97:c3:de:92:e9:46:c1:a6:02:4d:e0:64:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4C:9D:C4:4E:76:A3:E4:64:60:B0:96:C5:42:2E:29:DC:C2:70:79
X509v3 Authority Key Identifier:
keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:66:76:a5:cd:ec:91:ab:f8:9c:3f:01:2c:b5:6f:d5:02:d2:
9d:2a:2d:ee:7c:b6:03:58:a0:4b:1b:ed:8b:06:d9:0c:44:a1:
4d:b7:ad:34:e0:27:33:b0:6e:44:7f:54:83:a0:48:33:24:1b:
18:00:8d:bd:4c:2f:a5:3f:73:e3:df:b9:7b:dd:16:72:28:41:
6c:55:4a:26:fc:e4:e5:f7:f9:38:1f:df:fc:cb:30:75:d1:7f:
ba:ed:ca:50:de:ad:dd:45:b9:10:67:12:0f:9b:d6:4e:89:d7:
f3:2d:a0:58:e4:32:b7:b5:97:f2:89:70:c0:9d:86:bb:23:a4:
6e:c2:aa:ae:10:a7:22:ce:06:5d:16:c0:27:5b:2b:47:47:ef:
4b:f3:95:bc:4f:32:3d:d6:ee:39:63:19:1f:f5:f6:b2:48:f2:
8a:f4:c3:13:45:4e:b3:04:49:40:37:b9:0f:bf:e0:dd:38:8b:
ed:35:b0:58:e4:13:62:83:e6:c8:61:bb:cd:b0:1b:62:48:19:
80:37:1b:36:f9:e6:0c:b0:3d:25:ee:92:62:27:1f:bb:95:bb:
06:40:ff:08:6e:6d:7c:f4:37:da:49:ba:07:be:b2:8e:06:37:
3c:0d:9a:cb:0d:4d:cd:f7:3d:a6:b7:b7:72:ed:27:b1:40:5c:
a6:eb:a3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:11 2026 by rpki-client