Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: jrOT5B1gNnOAyIbstI1W4gfZVpbWhhqiWOicWUNGcV0=
Subject key identifier: 40:E7:CF:67:92:E2:34:43:15:E0:56:92:D2:BB:8A:B0:65:0B:4A:0C
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019D2816ECE26EFB8BF6237BA4945B122040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:24 +0000
Manifest this update: Thu 26 Mar 2026 03:01:24 +0000
Manifest next update: Fri 27 Mar 2026 03:01:24 +0000
Files and hashes: 1: 1-WshWzag49fgBIIVS2C0Ln43YnY.roa (hash: UrL7K+EtrLLqE/i5EAvmTal0bqvr0HWJvCJ78tbp0jM=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: 7kaRkkd4VpnTZv7rWxa1tgpHFh8tZoWgkLZgWoKjSfg=)
3: vBdouYkRW9ci3JYZ30IDKLuHdds.roa (hash: WJUobDpZaCY+TaeHhazACg6LZ8z6jzGQfsE7W/uWZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ec:e2:6e:fb:8b:f6:23:7b:a4:94:5b:12:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Mar 26 03:01:24 2026 GMT
Not After : Mar 27 03:01:24 2026 GMT
Subject: CN=40e7cf6792e2344315e05692d2bb8ab0650b4a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:74:56:d9:fd:1c:88:31:4d:a7:5d:3a:c7:
c5:7c:46:20:d6:86:dc:b3:76:76:bd:9c:d4:d9:93:
73:13:98:80:bf:e2:0f:34:a0:a1:72:29:c9:2e:cf:
b6:26:72:3d:06:f9:72:ec:94:4f:b6:b7:ad:63:96:
10:03:9d:73:f7:18:f9:c9:25:00:2b:7d:02:d5:24:
78:78:8f:a0:0c:05:66:84:66:e4:91:b4:79:ad:85:
66:fe:05:5c:68:7d:30:31:a8:e4:91:d5:57:d1:47:
0e:4b:96:85:aa:fe:ad:a3:59:74:2d:fa:a4:5d:ad:
55:13:5c:f6:d3:0d:6d:1a:cb:65:45:61:cf:9e:4e:
fe:4d:cb:ec:44:f4:07:50:52:97:31:3a:8e:ce:08:
0b:de:e6:b3:ba:ae:47:0c:e8:e8:ac:36:0c:9d:7c:
4f:ae:3c:a4:18:73:60:05:2a:e1:e2:fe:8d:3b:75:
1f:b8:1a:42:8d:d2:86:2d:64:44:cf:4f:f9:c3:0b:
6e:9a:5e:6b:22:1b:61:a6:a4:eb:65:d2:29:61:0b:
a7:3c:8b:25:ab:fc:41:08:65:64:e5:aa:30:fe:10:
6e:f8:06:b8:e6:fe:ac:b3:8e:8a:f7:62:b9:29:6a:
4e:6f:21:5e:db:7f:66:3f:34:83:a0:df:7e:71:8c:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E7:CF:67:92:E2:34:43:15:E0:56:92:D2:BB:8A:B0:65:0B:4A:0C
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:76:f7:b2:46:66:ef:dd:f8:d1:f7:64:8d:33:1f:2c:92:4a:
1b:0d:50:a8:c2:09:c6:50:f6:a6:f0:2b:c6:90:ef:01:67:c3:
f2:89:6c:74:e5:11:a8:b9:17:7b:8e:ec:e5:94:c7:33:cd:3e:
36:fe:1a:4a:94:dc:26:58:17:52:01:89:ca:2f:3e:c6:85:bf:
63:05:38:7d:5a:c1:1b:4e:03:c3:84:9a:3f:08:4e:0b:b0:68:
3a:68:42:23:74:ec:dd:b6:6c:4d:3e:ca:f2:7c:a2:ae:dc:a8:
56:62:38:c9:34:4a:25:49:b2:e4:75:54:68:02:a4:0f:37:16:
f2:7e:8e:6a:57:77:12:f3:d4:ab:65:bc:6f:61:f9:01:d6:60:
4b:cb:99:ea:c4:52:a2:6a:30:0d:87:ae:4d:b4:d6:f5:e6:04:
bf:1c:6a:0d:63:b8:bf:02:6f:fc:ff:54:ea:1d:a9:0c:dc:6a:
63:17:f1:55:4c:d2:90:51:24:12:dc:06:e8:86:ef:d3:de:e9:
db:13:ea:04:2f:d6:d9:14:db:cb:4a:dd:12:d7:c3:24:4e:12:
4b:41:2c:06:ed:0c:87:5d:a5:bb:f5:90:be:05:ce:d2:58:e5:
89:0e:4d:23:10:ae:bd:7d:ac:0c:42:d1:36:b8:0a:7a:54:1d:
e1:a7:5b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:43 2026 by rpki-client