Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: h+o6b9Tq7Bk47y0/3yYeDT0qJLMfDCUMS0mUpqbHyzI=
Subject key identifier: 26:16:9A:36:80:50:74:06:43:93:AC:CC:66:19:03:20:99:0B:3C:41
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 019D27A8A79493420B0C16E5FED15F5A1C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 1573
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: 2pSmfbphSDb9Cqxh8NYcKQtlp1o.roa (hash: maKyyaI7uWNQa13JatdDTrRmvHHlkhB9HEz590CRzd8=)
2: lNntVwqmP1g050CVm9YpSl35H2U.roa (hash: dV1Mh9n/uRu+yXT900FgqLc47Mey+zbCu4y2cZxScc0=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: skRqF2oqR3beRIcei7SoQw9t+O22d/nNMAHZ9f5SCOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a7:94:93:42:0b:0c:16:e5:fe:d1:5f:5a:1c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=26169a36805074064393accc66190320990b3c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:4e:e5:22:df:f7:6b:a6:d4:e9:fb:8d:00:
aa:74:f4:48:9d:3c:a1:ec:0e:c9:de:75:d4:cd:b3:
e9:39:d5:29:ea:4d:4d:70:fd:16:a6:fb:52:db:3b:
3d:72:2c:4a:6e:4c:bf:19:92:75:8c:8c:d1:39:c0:
31:9b:6d:c2:66:67:cb:34:b2:e2:85:0f:c0:2c:44:
3f:70:16:ea:58:03:c0:e9:75:18:01:22:27:59:c4:
53:1a:f8:e3:35:af:de:3a:93:c4:92:62:ee:cd:e6:
c2:54:aa:32:33:65:25:91:c8:02:03:0c:76:18:b1:
71:e6:d5:f0:ec:90:1b:82:f7:d1:5d:1b:67:d0:f9:
7d:1d:44:91:47:e5:52:3d:5f:e4:15:5b:0d:22:f4:
82:7e:12:43:4d:df:2f:20:7b:18:20:5b:64:b6:ba:
1c:06:63:a3:f4:e8:1a:cb:05:3a:53:bd:14:7c:09:
c7:d5:5a:52:f3:f7:3f:16:ea:2d:3b:3f:0b:ef:0a:
a0:99:71:77:ee:f5:1c:7e:f8:2f:ef:b7:7f:b0:d7:
ee:22:e8:7a:9b:8f:b5:91:26:8a:3f:a9:89:9d:00:
77:66:a3:02:84:0b:2a:62:fd:06:aa:51:8e:34:ed:
cf:73:c7:25:30:b5:cf:7d:95:ac:12:56:e8:b0:e8:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:16:9A:36:80:50:74:06:43:93:AC:CC:66:19:03:20:99:0B:3C:41
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8b:1b:09:0c:d4:b6:dd:a5:e3:03:74:7b:1f:5c:11:71:db:
dc:8d:10:fd:09:9c:83:29:2f:1d:26:54:c0:e0:68:85:a7:64:
60:13:fa:ca:39:eb:28:56:fe:28:5d:14:20:64:af:6d:1c:6b:
d9:d7:27:24:65:53:71:62:67:a9:bb:1c:dd:4f:6b:89:7f:dc:
b5:72:ef:51:b9:cb:fc:c5:e6:67:48:b0:82:3c:52:5e:f4:80:
52:ff:37:51:62:85:4f:8a:bd:b3:06:f4:67:c2:f3:5c:43:c8:
a7:3b:80:ab:41:b6:5c:c1:2b:dd:ad:f6:34:55:5a:c1:8d:e2:
1f:11:70:6b:83:8c:bc:c6:fa:ea:98:20:9d:c3:9b:6a:40:e2:
e7:a4:71:68:c6:77:21:12:bd:d1:29:34:a3:9d:72:d8:cb:ec:
fe:ea:f1:30:ff:9b:3e:44:4b:db:74:bc:b7:d2:1d:6d:94:9f:
96:df:90:10:e5:e3:59:d1:ac:a2:75:95:00:fc:5d:6f:9c:6c:
82:2a:b1:60:d1:d4:20:8f:34:17:84:ae:9c:62:3d:0f:63:bd:
e6:db:d3:62:29:10:24:39:e5:df:9e:11:4a:47:19:f8:5a:70:
24:b0:69:dc:91:d8:84:29:62:25:d8:2a:9b:5c:45:61:4e:b3:
99:48:c7:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqKeUk0ILDBbl/tFfWhx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmYwNzAxZDdhNjNjZjNkMTkzNjk1YzM5NWQxYTFmNzgz
MzVjY2YwHhcNMjYwMzI2MDEwMDU3WhcNMjYwMzI3MDEwMDU3WjAzMTEwLwYDVQQD
EygyNjE2OWEzNjgwNTA3NDA2NDM5M2FjY2M2NjE5MDMyMDk5MGIzYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/VO5SLf92um1On7jQCqdPRInTyh
7A7J3nXUzbPpOdUp6k1NcP0WpvtS2zs9cixKbky/GZJ1jIzROcAxm23CZmfLNLLi
hQ/ALEQ/cBbqWAPA6XUYASInWcRTGvjjNa/eOpPEkmLuzebCVKoyM2UlkcgCAwx2
GLFx5tXw7JAbgvfRXRtn0Pl9HUSRR+VSPV/kFVsNIvSCfhJDTd8vIHsYIFtktroc
BmOj9OgaywU6U70UfAnH1VpS8/c/FuotOz8L7wqgmXF37vUcfvgv77d/sNfuIuh6
m4+1kSaKP6mJnQB3ZqMChAsqYv0GqlGONO3Pc8clMLXPfZWsElbosOhm1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYWmjaAUHQGQ5OszGYZAyCZCzxBMB8GA1UdIwQY
MBaAFJovBwHXpjzz0ZNpXDldGh94M1zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjct
NzM3MTdjNTZiNmYzLzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjctNzM3MTdjNTZiNmYz
LzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIsbCQzU
tt2l4wN0ex9cEXHb3I0Q/QmcgykvHSZUwOBohadkYBP6yjnrKFb+KF0UIGSvbRxr
2dcnJGVTcWJnqbsc3U9riX/ctXLvUbnL/MXmZ0iwgjxSXvSAUv83UWKFT4q9swb0
Z8LzXEPIpzuAq0G2XMEr3a32NFVawY3iHxFwa4OMvMb66pggncObakDi56RxaMZ3
IRK90Sk0o51y2Mvs/urxMP+bPkRL23S8t9IdbZSflt+QEOXjWdGsonWVAPxdb5xs
giqxYNHUII80F4SunGI9D2O95tvTYikQJDnl354RSkcZ+FpwJLBp3JHYhCliJdgq
m1xFYU6zmUjH1g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:28 2026 by rpki-client