Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
File: m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft (raw, json)
Hash identifier: yWAylZ+7WJkJqOZpNsRjHfvB1+m61R00OoGUP3b6Ca8=
Subject key identifier: 7E:73:03:E3:16:12:7A:39:7E:50:E6:15:60:4B:46:B6:E0:FD:66:8B
Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6
Certificate serial: 019D27DF744C4B33CC813DC59EFE8076B456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
Manifest number: 1586
Signing time: Thu 26 Mar 2026 02:00:48 +0000
Manifest this update: Thu 26 Mar 2026 02:00:48 +0000
Manifest next update: Fri 27 Mar 2026 02:00:48 +0000
Files and hashes: 1: Cnqe5cv9mrso-CM_LT3GA2G_6-Y.roa (hash: srt7eXLyW2rW7dmcsFP38hUiNjRVW1d3X72WjScYtng=)
2: m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl (hash: fQ+Z+7UDZUoztan+c82lJtxiJY1604RvPdjG0cxP8ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:74:4c:4b:33:cc:81:3d:c5:9e:fe:80:76:b4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6
Validity
Not Before: Mar 26 02:00:48 2026 GMT
Not After : Mar 27 02:00:48 2026 GMT
Subject: CN=7e7303e316127a397e50e615604b46b6e0fd668b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:ab:24:82:8a:14:ac:28:07:59:5f:dd:d3:
3d:76:0f:ee:26:64:21:f5:10:97:06:0d:37:fd:68:
c3:e9:22:24:11:4a:6e:5a:0b:7c:fc:e3:16:19:37:
1b:4c:ca:28:95:51:2f:f3:ef:81:35:37:e5:c6:7b:
d7:69:f1:db:8e:d4:f7:20:9c:f6:15:5f:36:f3:f2:
d3:6a:72:65:d1:74:d3:37:71:da:00:5a:7e:bc:de:
31:22:39:43:14:c0:88:9c:04:9d:af:4c:a2:94:e2:
f7:55:4f:e1:2c:5c:3a:31:e1:22:1b:6d:17:15:3c:
6b:51:f9:9a:02:c4:ee:b3:20:b2:b8:fc:f0:ee:dd:
ea:f1:49:9c:55:a0:92:3e:c2:6d:5a:89:b6:2a:68:
60:15:23:b4:b5:84:ab:45:31:a6:78:87:7a:c6:b0:
72:ab:f8:2a:16:9f:eb:34:d7:aa:d6:30:d1:34:a4:
d4:cf:e1:c4:f4:0f:17:ac:13:61:99:23:13:07:19:
1b:3d:dc:1e:e9:72:60:f8:8a:6d:74:17:cf:d8:3a:
dd:21:83:85:c9:0e:60:be:5a:bf:83:7f:a6:5b:9d:
97:be:bc:df:fa:99:ef:70:0b:1e:f2:b7:c8:e4:d7:
03:39:16:d0:6c:e0:3a:77:83:5f:d0:49:96:fe:e0:
2a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:03:E3:16:12:7A:39:7E:50:E6:15:60:4B:46:B6:E0:FD:66:8B
X509v3 Authority Key Identifier:
keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:40:87:dd:06:a0:bf:1e:57:e0:b0:27:1d:14:9b:9e:00:0c:
ca:76:87:db:fd:3a:5f:37:33:25:a1:f8:a9:fc:3b:7e:e2:66:
8f:41:83:77:ed:6a:5a:8c:f4:5c:46:59:17:f8:19:81:63:45:
8b:6b:af:82:9c:e6:61:98:c0:56:0f:f2:d6:af:41:f0:fd:c7:
18:2a:95:89:c9:3d:c9:31:93:89:25:7e:30:a7:e7:e8:ad:7e:
a1:b6:7f:a4:a0:19:1a:f1:5e:ba:6f:7f:ef:c1:2c:6e:3f:9c:
bf:80:d8:bc:a0:f4:82:ef:3e:79:c5:84:4c:73:7b:78:9a:37:
27:1d:a4:e7:e7:04:17:6a:ff:cf:a5:70:55:24:8b:06:6f:4c:
87:57:9b:16:d9:14:03:10:f9:7f:18:fa:46:8e:29:aa:a0:19:
a5:1f:05:ec:c3:aa:1e:18:12:55:da:82:9f:a1:03:a8:6d:3a:
b7:11:b8:38:79:09:7b:35:29:6e:24:42:f3:8d:d6:b8:f4:76:
f1:56:51:0c:65:c1:a9:b5:eb:10:ae:07:fa:7b:b1:42:88:a4:
f8:07:c1:ae:35:d2:d6:4f:57:be:e7:46:c3:76:90:e7:97:9a:
48:30:18:70:49:78:13:c3:cd:db:99:de:4f:2c:f4:66:75:55:
3c:66:f4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:25 2026 by rpki-client