Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: mXf2d1SfscB0bz9D3hGyVJ0/5X/Iu2z5Xce6T/Mio38=
Subject key identifier: B0:81:A1:A0:00:EF:81:88:5E:61:D8:0A:0C:7C:31:C0:1A:BF:94:1B
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019D26CCEA0A161B9E4605C28C2F0EF915FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:00:56 +0000
Manifest this update: Wed 25 Mar 2026 21:00:56 +0000
Manifest next update: Thu 26 Mar 2026 21:00:56 +0000
Files and hashes: 1: KFiiFWif923SIcwC9nBmJ-HUVJ4.roa (hash: ycwpSj4ZG3+CrkzSV++20ftzs6baQIacEYL2lp7sLR0=)
2: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: cr/Vuuw5ZikkAQZxrwNNmln/2XUQ6gyRvy8LRvIyl64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ea:0a:16:1b:9e:46:05:c2:8c:2f:0e:f9:15:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Mar 25 21:00:56 2026 GMT
Not After : Mar 26 21:00:56 2026 GMT
Subject: CN=b081a1a000ef81885e61d80a0c7c31c01abf941b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:0b:04:cf:df:fd:ec:21:4f:c6:5e:3b:67:
98:e8:af:3d:d5:85:7a:a3:56:43:e4:81:9e:0a:62:
3e:53:62:07:d4:6e:b8:a6:60:3e:92:3f:9b:0e:e7:
d3:8a:f2:d2:46:6c:bc:b2:26:e3:0e:8d:e7:37:90:
3d:92:6f:ca:9c:ee:b5:d4:a7:5f:1c:79:f0:f6:dd:
f5:4c:94:88:df:64:2a:bf:83:7c:00:4e:5f:5c:10:
d7:4a:e4:d2:e4:99:be:d2:43:b9:01:05:be:15:e3:
59:39:3e:ad:42:a5:08:ae:e0:19:87:8f:f5:74:7c:
4c:ad:65:12:d1:ea:99:b5:b4:6d:b9:56:8b:af:8f:
52:40:fe:09:44:79:ad:70:de:e9:7e:6b:c3:f3:36:
d4:31:dd:e3:6f:c4:29:1e:61:53:e6:fe:63:54:2a:
77:5a:f4:ed:ba:74:a8:18:92:65:72:f0:ed:e9:ac:
ce:2e:6b:13:a8:06:4b:dd:76:aa:0e:03:77:22:c1:
76:9f:66:97:54:12:f0:b8:e5:2c:40:bf:1e:0a:64:
57:27:ec:0b:5d:e0:95:a1:40:6f:09:1c:de:6d:fb:
95:02:26:49:18:80:40:45:8c:ed:ac:4b:26:bc:75:
8b:7b:26:9f:bb:cb:d9:e3:d4:bd:02:05:e0:d9:af:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:81:A1:A0:00:EF:81:88:5E:61:D8:0A:0C:7C:31:C0:1A:BF:94:1B
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1f:93:69:c7:c6:05:96:ea:48:22:54:9a:4c:84:bc:e5:93:
9e:72:39:c8:47:d0:92:79:e8:37:39:6a:94:78:cb:4b:07:3e:
1c:a4:87:a5:1c:78:32:48:69:55:6c:85:4e:b3:a0:01:b6:b5:
35:44:8f:c9:2a:55:ff:93:71:cb:80:f7:17:f0:76:d5:44:2b:
8a:6b:fb:0a:ac:5c:7b:cb:19:57:ce:7b:67:8e:7d:14:ea:98:
44:65:bf:17:6e:8a:f0:90:68:1a:1f:75:a7:cc:ed:e2:f0:9e:
5e:de:6e:b6:52:58:d8:24:5e:8c:ba:00:52:8a:1e:b3:c8:f2:
f0:b0:0b:5d:7e:9d:38:b1:9b:b0:e0:2d:55:c4:69:39:5e:bc:
db:90:e0:43:d2:94:86:97:58:34:bb:9b:c4:3e:25:a4:5d:58:
e3:13:a2:49:5b:10:d7:7c:c6:11:d0:97:56:2b:2a:61:dc:a5:
ef:90:a6:70:53:a0:c2:95:94:ea:6f:f6:f8:7e:48:8f:3a:0a:
d9:6d:51:67:3d:00:1a:45:52:a3:14:7a:55:91:7f:58:a5:ab:
bb:46:59:a4:df:de:a1:81:f0:75:a3:be:c6:27:f8:fd:23:1e:
e1:21:0e:1a:8d:a9:63:47:8c:73:64:93:62:f5:69:7e:89:63:
4b:05:3f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:45:37 2026 by rpki-client