Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
File: M645mYTXN0sqjgr3LSv88QXIYVQ.mft (raw, json)
Hash identifier: qfDe8WIVf9l+IuRtW8upQU+Hb2pWtxWPfUR1T5UslZE=
Subject key identifier: 98:69:DB:09:10:F4:FA:95:0F:52:2A:EB:0B:A4:27:A8:EB:E9:97:4A
Authority key identifier: 33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
Certificate issuer: /CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Certificate serial: 019D26CCD03C633ABD8248187D1925615A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
Manifest number: 179B
Signing time: Wed 25 Mar 2026 21:00:49 +0000
Manifest this update: Wed 25 Mar 2026 21:00:49 +0000
Manifest next update: Thu 26 Mar 2026 21:00:49 +0000
Files and hashes: 1: M645mYTXN0sqjgr3LSv88QXIYVQ.crl (hash: mNORnrv7qLTLEEx6V8gnxcpglRePoecskJqT3lusR3o=)
2: Ue_ex91Wx7ZgS5Ut_yw50dy3Kus.roa (hash: ME8w3BueP73JCqBn5Tuam33su5W75EsAbAVULP0Vw6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d0:3c:63:3a:bd:82:48:18:7d:19:25:61:5a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Validity
Not Before: Mar 25 21:00:49 2026 GMT
Not After : Mar 26 21:00:49 2026 GMT
Subject: CN=9869db0910f4fa950f522aeb0ba427a8ebe9974a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:cc:cd:53:2a:1b:79:69:43:b8:8f:49:df:
45:83:a9:7a:67:9a:f6:5a:69:02:ec:1e:11:7b:6a:
32:b4:72:73:63:ba:b3:3f:6f:c2:42:43:12:a3:f3:
a8:76:7b:2e:37:b3:2b:5c:fe:2a:80:0d:66:ab:27:
d5:08:90:5d:c6:78:17:62:07:33:b4:88:c6:84:76:
a0:23:eb:f7:be:18:5a:32:98:d6:28:4c:fd:f3:ee:
d3:f2:64:10:9d:23:4a:f8:d3:88:2d:6e:3b:72:57:
c0:18:20:8f:c2:75:22:a3:7a:55:69:ec:e1:f7:80:
13:e6:58:58:60:01:74:6b:a5:b9:83:e4:de:81:5d:
87:6f:1e:36:98:49:bf:95:46:98:78:18:65:8c:3b:
2d:df:1f:e4:1c:7a:1e:04:6d:84:ee:11:c6:23:bc:
e5:ff:fb:34:aa:86:ed:c7:96:73:4e:69:14:f1:35:
ac:09:e4:d7:ad:09:d3:40:80:0c:d9:f5:eb:ff:c5:
61:bd:1b:53:fd:66:e8:3a:2f:12:3e:c7:42:bc:61:
b3:fb:0c:fe:43:7a:58:70:0d:d6:97:78:37:c4:7d:
0e:97:2c:b6:1a:c8:96:a5:22:21:f7:70:f3:f2:c5:
21:b6:50:b9:5b:67:d5:f3:57:c8:85:e5:83:da:2c:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:DB:09:10:F4:FA:95:0F:52:2A:EB:0B:A4:27:A8:EB:E9:97:4A
X509v3 Authority Key Identifier:
keyid:33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:70:5a:e1:81:a5:c5:6b:b0:28:fd:00:de:f5:18:87:18:b3:
91:0b:f9:5e:f7:66:61:d3:33:76:97:58:98:a0:34:3a:0b:6e:
e8:d0:a9:bf:63:33:fe:e8:90:7e:d7:6d:14:08:40:e1:83:9a:
9d:b2:17:4c:83:96:ff:a3:55:7c:18:f6:f5:ff:5e:73:85:ef:
fb:4a:ce:b2:20:d5:65:28:dd:77:e7:7c:17:7d:83:3f:76:e1:
9c:0e:96:d0:b2:af:96:6d:f3:58:d4:d5:90:3d:4b:9c:4c:19:
36:b7:10:7b:cd:68:08:c9:74:2a:c0:f1:48:28:9b:de:cc:df:
05:49:af:44:f3:83:26:66:9f:f8:a4:37:bc:3a:9b:94:1e:d4:
01:96:d4:da:8b:cb:40:72:3a:af:67:a7:3f:a3:8b:2b:2f:82:
ad:a0:72:93:d1:fe:b4:e5:5e:18:4e:69:f0:c6:4a:17:e5:03:
a3:fd:2d:0b:f3:c4:62:9b:a6:1c:cc:66:f3:c6:83:4d:9e:cb:
5a:fe:11:f5:d8:03:e1:ee:ba:4f:68:28:84:fc:1d:a7:9a:07:
66:c4:bc:e5:ea:b2:2f:1e:e5:ed:36:18:77:36:c2:22:a8:3d:
96:29:cd:ce:86:04:06:a6:19:e4:cc:91:0c:4d:85:3d:ab:10:
c9:b5:67:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:07 2026 by rpki-client