Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.mft
File: mmLEo5rOzN4eeB5-zC8CKU8MIT4.mft (raw, json)
Hash identifier: 5QwOKmahmSM1uORr61EMtiwsm8FPLIMmMs77Md7oSy8=
Subject key identifier: 9B:E6:75:80:CC:1E:F0:DF:23:94:C2:B3:91:1B:3D:34:45:13:BD:87
Authority key identifier: 9A:62:C4:A3:9A:CE:CC:DE:1E:78:1E:7E:CC:2F:02:29:4F:0C:21:3E
Certificate issuer: /CN=9a62c4a39aceccde1e781e7ecc2f02294f0c213e
Certificate serial: 019D32D09536BEC9AB9F4E5663464BBFB371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLEo5rOzN4eeB5-zC8CKU8MIT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.mft
Manifest number: A4
Signing time: Sat 28 Mar 2026 05:00:23 +0000
Manifest this update: Sat 28 Mar 2026 05:00:23 +0000
Manifest next update: Sun 29 Mar 2026 05:00:23 +0000
Files and hashes: 1: ejhx-gadggmweDD7LTvGkXuubDk.roa (hash: qceFGO0N3SsqKOwEV1zGkAfuEl6PCwI7cu5tB/f/1Ak=)
2: mmLEo5rOzN4eeB5-zC8CKU8MIT4.crl (hash: MKCBpwz7ZFAWilQjs4psnPYNfsofjBxvuhJBtNTF/Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmLEo5rOzN4eeB5-zC8CKU8MIT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:95:36:be:c9:ab:9f:4e:56:63:46:4b:bf:b3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a62c4a39aceccde1e781e7ecc2f02294f0c213e
Validity
Not Before: Mar 28 05:00:23 2026 GMT
Not After : Mar 29 05:00:23 2026 GMT
Subject: CN=9be67580cc1ef0df2394c2b3911b3d344513bd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:ac:e3:be:00:ec:4b:32:33:19:93:cd:62:
6d:ca:c5:43:4e:02:41:67:4f:de:ed:66:3d:c1:ad:
df:1d:31:e3:01:21:cc:f2:ea:6c:48:98:7a:84:2f:
2d:b3:4d:12:af:33:b5:a4:22:9b:ea:90:49:c6:5e:
8a:ff:ea:c0:d6:ab:24:a1:9f:6a:f0:c4:44:54:91:
cb:ce:8f:59:86:27:8a:dc:ab:d4:c7:c8:d7:68:c6:
1d:9f:41:ab:2b:43:71:a5:ee:3e:d2:34:d4:33:1b:
c0:9f:36:94:64:84:29:0d:ce:cb:76:fe:e2:ca:4d:
6c:e9:9c:6a:21:bd:19:34:7f:bf:6b:50:5e:b2:c5:
d1:1b:1d:71:18:13:66:89:6c:97:fd:20:59:0c:16:
2a:60:0f:41:79:09:0f:2e:97:77:2e:3b:7d:45:6d:
74:32:b6:73:c6:d7:ec:81:80:29:9e:21:5a:8c:d1:
84:c7:eb:ed:95:9a:a1:80:0a:d3:34:7a:1d:02:a3:
3c:b5:20:6c:42:4a:1f:06:ad:b7:94:12:87:1c:62:
7c:64:76:ce:e2:69:1e:3e:72:56:bc:ba:9c:7f:6f:
00:8a:9a:03:94:a9:bf:55:aa:44:a7:95:69:0d:3c:
2c:07:c8:94:dc:9a:cb:7b:b4:ae:54:a2:80:0f:f4:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E6:75:80:CC:1E:F0:DF:23:94:C2:B3:91:1B:3D:34:45:13:BD:87
X509v3 Authority Key Identifier:
keyid:9A:62:C4:A3:9A:CE:CC:DE:1E:78:1E:7E:CC:2F:02:29:4F:0C:21:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLEo5rOzN4eeB5-zC8CKU8MIT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d3:3f:aa:21:35:b4:f1:e4:55:17:30:47:de:22:9f:ff:f8:
66:46:35:82:40:c6:e8:05:34:18:42:55:85:2f:39:be:b7:55:
9d:cd:1e:e1:b5:d8:0c:1c:b4:02:d4:fb:4f:e5:44:07:a4:07:
ff:55:72:67:12:ee:20:6c:18:47:cf:59:3b:b5:59:4b:72:23:
bb:5a:ba:8b:5c:88:8b:c9:53:66:b2:96:c2:ca:0f:4c:b4:f8:
e1:97:a4:a3:b4:97:49:17:12:a3:b5:91:f0:96:ef:85:1d:fc:
53:df:39:ba:c3:78:6d:a5:e3:d4:93:a4:c6:1c:3c:cb:c1:61:
b7:0e:65:9d:4d:ee:dc:b3:52:30:ab:f3:36:0c:f3:7c:49:11:
e1:83:78:4c:e5:82:dd:b1:e2:34:ab:10:bd:34:bd:f0:b5:27:
9a:23:12:bd:81:5c:32:21:81:60:15:39:e0:19:57:de:39:d1:
e1:fa:c6:70:03:fa:a0:ef:24:ad:1b:e2:15:bd:80:11:2b:bf:
e3:fe:fe:9d:06:52:e0:be:ed:b7:63:fd:0b:ff:13:f9:b5:71:
60:15:bb:34:ad:41:d8:b8:a8:a0:85:bb:59:88:68:ea:f2:61:
ba:99:30:4b:e6:48:8d:6e:b3:d2:97:0a:08:fc:58:0d:ab:cc:
22:e7:f7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:30:09 2026 by rpki-client