Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: 0lZdRgE9aRtZaSEwmvJ+hNnJgpPF/Bs0AcZwdGx96KU=
Subject key identifier: AA:53:6D:8D:FF:6B:91:72:B9:89:06:A9:BE:5C:1E:88:90:8C:EE:DF
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019D2A0475328A73B6B8A0A7290AD874D9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:00:28 +0000
Manifest this update: Thu 26 Mar 2026 12:00:28 +0000
Manifest next update: Fri 27 Mar 2026 12:00:28 +0000
Files and hashes: 1: 1-WshWzag49fgBIIVS2C0Ln43YnY.roa (hash: UrL7K+EtrLLqE/i5EAvmTal0bqvr0HWJvCJ78tbp0jM=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: w0es468/IH++7OWvAg76pdzq/lZmzLzdCsR4AULd2Jw=)
3: vBdouYkRW9ci3JYZ30IDKLuHdds.roa (hash: WJUobDpZaCY+TaeHhazACg6LZ8z6jzGQfsE7W/uWZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:75:32:8a:73:b6:b8:a0:a7:29:0a:d8:74:d9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Mar 26 12:00:28 2026 GMT
Not After : Mar 27 12:00:28 2026 GMT
Subject: CN=aa536d8dff6b9172b98906a9be5c1e88908ceedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:cc:5a:c7:f5:03:f5:68:c9:91:a4:03:13:
a6:66:bf:45:13:40:8d:c1:26:f7:19:40:19:60:8b:
27:c9:f8:96:e6:7b:f1:74:2f:b3:1f:d2:14:83:18:
c1:83:8f:f2:f0:81:8c:a9:5f:5f:71:b4:06:0b:24:
19:a3:a1:d7:0e:ea:36:d2:3d:71:67:62:f5:88:74:
a5:75:72:2e:d4:40:e8:e6:9a:22:d4:0a:84:0d:f9:
80:91:84:03:76:01:9e:46:e5:1a:94:0f:f2:26:41:
15:f3:93:4d:39:31:4b:39:09:b3:1d:cb:25:f9:a0:
87:b9:d8:e1:0f:54:db:87:04:7c:9b:47:13:87:c4:
45:e6:bd:51:49:1f:b8:9d:39:5d:09:a6:f9:32:fa:
07:37:18:56:d1:b4:77:96:44:6b:fc:8e:06:7d:53:
cd:c8:06:57:5c:b0:ac:39:82:a4:b9:ec:3e:dd:74:
3c:16:78:44:e1:04:75:a9:38:fa:8d:d8:15:ab:cc:
70:cc:51:80:c2:1d:01:11:1c:4e:05:a8:cc:4f:36:
96:2d:54:97:1a:74:2c:26:ae:e3:e0:84:21:63:57:
60:d5:80:a4:3b:31:12:2b:48:93:ea:f2:bb:cf:11:
17:bd:de:59:8e:4d:47:a9:6d:ee:ac:53:bf:02:98:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:53:6D:8D:FF:6B:91:72:B9:89:06:A9:BE:5C:1E:88:90:8C:EE:DF
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0e:8f:0a:7f:04:be:3e:54:48:25:64:49:13:c9:95:1d:66:
af:d5:59:01:7a:42:b0:d7:64:54:8b:6b:b1:39:9b:43:44:dc:
cb:84:cc:36:a2:5c:34:d1:70:68:a1:e0:cb:8b:53:7d:48:08:
2c:43:f5:c3:65:e0:b0:84:74:53:f4:58:93:d2:3f:42:cf:af:
bc:9d:c2:e5:ca:de:02:fe:3b:b8:f3:67:3e:e8:57:59:f3:3a:
63:2b:b4:00:17:a1:0a:53:8c:33:cb:d5:8a:fc:e2:8c:f0:ee:
02:9a:55:78:2f:f6:41:cb:9d:79:cc:36:a3:79:84:13:71:33:
88:6c:d0:1d:cd:9b:0b:6f:dd:6b:3d:fb:67:29:fa:da:7c:73:
2e:98:7f:6c:28:19:7e:46:69:33:f7:96:75:da:cd:75:de:30:
83:9b:74:a3:1f:de:1f:49:6d:18:17:bf:25:3f:0f:50:ec:43:
e0:3f:02:76:7b:bf:8d:4f:66:c6:0a:98:a2:79:d1:5a:49:cc:
73:2b:05:57:50:96:66:e0:cd:8e:32:71:0b:ff:d0:5d:4a:ae:
1d:20:5c:ee:16:fc:35:bb:d8:d4:b8:cc:83:24:21:56:b9:fb:
7b:7e:8e:c8:d4:b9:81:ac:ab:0a:5d:fe:49:9b:ae:b9:b4:1a:
ec:1e:32:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:36 2026 by rpki-client