Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier: Z0BY2q9psUxt15siYt7XvGxjbbUMYHGiIVcEwjbpi/g=
Subject key identifier: C9:D3:CD:09:39:6C:2C:9F:96:00:DB:8D:D3:3D:09:E7:9E:C3:34:2B
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 019D284DA92C019A0F702A1693DBDA49BCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number: 0B4B
Signing time: Thu 26 Mar 2026 04:01:11 +0000
Manifest this update: Thu 26 Mar 2026 04:01:11 +0000
Manifest next update: Fri 27 Mar 2026 04:01:11 +0000
Files and hashes: 1: Ph0J2YLOlU7YjgB24Ww0ogtAJDo.roa (hash: itSFIEdCoDExFok/Ab/usil828dE//sP90iU8HWvoSU=)
2: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: rtXg8e5O+VuAlrADF1sgtByXJqzIAl0gnRLYM0CwyPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a9:2c:01:9a:0f:70:2a:16:93:db:da:49:bc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Mar 26 04:01:11 2026 GMT
Not After : Mar 27 04:01:11 2026 GMT
Subject: CN=c9d3cd09396c2c9f9600db8dd33d09e79ec3342b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:89:e0:55:fe:92:ea:74:7a:f7:61:0a:d6:
2c:7f:14:7c:41:97:0a:a1:5d:72:ca:91:e6:fd:c3:
9c:42:d3:67:97:56:b6:84:bf:dc:bb:b7:70:42:20:
24:de:a4:f1:ac:cd:88:12:5f:64:73:8b:a6:3c:82:
46:4e:59:7f:c6:6d:19:0b:f4:23:e7:34:aa:1b:35:
04:57:50:ef:62:c6:cb:1b:65:64:f1:fc:14:89:e5:
29:db:72:ba:d2:a3:85:8a:bb:21:04:bb:b8:64:8c:
1e:93:9a:70:47:de:4d:20:02:65:9a:ff:56:13:fd:
8e:33:fe:df:ff:86:d7:da:bf:84:b0:00:19:57:a1:
7a:d6:7a:4c:5d:50:df:04:4f:03:81:b9:1d:17:b7:
bb:44:f8:3b:95:d7:03:4d:bc:bd:0d:29:66:0b:79:
7d:5e:d5:2b:d1:e9:62:65:44:73:33:e7:05:ae:a0:
b2:f1:f8:44:2a:2a:cf:dd:7d:3a:d3:3c:7b:96:72:
ca:f9:ba:69:b6:27:5d:d1:48:95:8f:63:df:89:f0:
a4:ea:5c:ee:ba:45:d8:40:f4:4c:07:1c:56:42:0e:
1e:4d:4e:d5:4f:6a:7c:7e:1b:15:f6:b1:b6:7c:41:
c2:54:0f:2c:1d:82:a7:f9:a2:ce:17:0f:72:16:a6:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D3:CD:09:39:6C:2C:9F:96:00:DB:8D:D3:3D:09:E7:9E:C3:34:2B
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ff:b5:d5:e0:32:bc:72:61:04:4e:05:ef:c2:27:28:cb:11:
af:d7:ff:fe:82:d2:97:0c:71:93:91:c2:c5:22:e9:7b:b0:d8:
a4:5f:65:ae:65:2b:f2:ae:4f:36:5b:7b:be:5a:b5:7c:92:e9:
98:cb:b2:47:8f:17:4d:83:6d:86:37:76:70:b8:a0:9a:2a:5c:
d6:e9:ff:f0:58:82:04:40:0e:9d:d6:cf:69:65:fe:14:96:ad:
69:21:2d:ad:3e:7d:76:63:30:5b:71:80:f5:c7:b2:c4:be:0f:
e3:b3:81:7a:ca:c2:13:9a:15:c6:55:84:ab:76:9a:fb:3a:d8:
cf:5f:b0:fa:e3:f5:ea:c9:8f:4a:50:d1:84:9d:32:17:f5:90:
8e:1c:f6:a4:ab:15:3d:d4:02:d0:f5:63:a3:f5:68:d0:aa:2d:
75:c9:c8:13:a1:97:80:cb:39:4f:47:46:4a:d8:6f:36:0f:2c:
95:05:d5:02:a9:5e:b0:69:4e:05:c1:07:3d:f1:c5:37:51:21:
cd:87:d6:db:26:9d:08:c1:d3:d1:3f:bb:64:6b:ec:7e:ba:1f:
a9:1f:ca:7e:26:6e:b6:fa:ca:aa:27:51:a9:29:40:3c:e8:cc:
ff:b0:fc:3f:f0:a0:9d:f2:d7:72:f3:e4:61:6c:52:3f:96:7d:
63:67:1b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:54 2026 by rpki-client