Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: JKd394j98meIo1pE92paRFalyzZhL6/njW7AP08hQ/g=
Subject key identifier: CF:CD:3C:DE:F5:61:AF:F6:D9:89:22:62:17:66:F7:FB:BB:EB:32:3C
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 019D25F122ABF8015175B8FF786583DB1C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 05FB
Signing time: Wed 25 Mar 2026 17:00:53 +0000
Manifest this update: Wed 25 Mar 2026 17:00:53 +0000
Manifest next update: Thu 26 Mar 2026 17:00:53 +0000
Files and hashes: 1: FBxiREsktkVFp8venH-s08qeoPQ.roa (hash: ibnO/dj3ZhDaLeFXf0GojpXiulWnjeB2LQmvljQymA0=)
2: WvhwqSTk9fYsIwVWoqZqzKg6HQ0.roa (hash: GwslgAUxIHInMefcYidsp1yt/WAtqY5sHB1EhJWpZT8=)
3: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: vJ+p1QhXZI2FbUd17acQr09FpOpuqSbOobjBR6ksb0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:22:ab:f8:01:51:75:b8:ff:78:65:83:db:1c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Mar 25 17:00:53 2026 GMT
Not After : Mar 26 17:00:53 2026 GMT
Subject: CN=cfcd3cdef561aff6d98922621766f7fbbbeb323c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:82:f4:fa:7e:74:1e:03:13:3c:34:65:c9:
15:43:d7:fb:8f:e1:82:6c:79:cb:a7:88:b5:50:97:
01:ed:62:69:86:db:6c:7e:a8:00:40:e2:3d:8b:54:
5f:df:8e:08:26:ff:9c:f2:be:ba:91:58:db:d2:0a:
dc:32:33:3a:cd:a7:ce:02:e8:5b:cc:41:ef:f5:c9:
eb:66:ba:62:79:e3:92:6d:f2:69:0f:c7:1c:ad:44:
8b:bd:ee:5a:d0:39:f4:9e:7c:8b:44:d1:f1:b9:08:
88:ec:2a:04:f4:80:83:05:18:b4:0e:7a:b3:cc:2c:
b3:bb:ce:1b:7a:f0:4d:dd:37:cf:b3:88:9c:6a:23:
b8:26:3f:bb:37:31:43:c8:4a:3a:c4:f8:7b:1c:4e:
8b:5d:04:1f:cb:11:1f:5d:fa:e8:dd:96:64:0c:4a:
e1:e8:37:64:b1:0c:86:5e:8b:1f:1f:db:34:53:38:
2d:f9:44:48:8e:4e:04:e4:4d:e3:e5:a6:25:ff:c0:
3f:a5:c0:67:e2:62:4a:a4:49:3f:4b:4d:e8:d0:c7:
f3:04:cf:54:4c:ff:60:bf:a3:47:72:91:00:bb:fb:
5c:21:62:ff:30:5c:76:8a:8c:23:0a:7e:57:c1:b7:
3c:ba:6a:4f:8e:e9:c9:e6:89:bd:ee:f2:19:2d:1d:
c1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:3C:DE:F5:61:AF:F6:D9:89:22:62:17:66:F7:FB:BB:EB:32:3C
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d5:ce:1f:08:5d:02:4d:55:ea:0f:d2:8e:18:83:9a:90:e1:
cf:61:97:35:15:8a:f9:eb:b7:af:6b:ab:31:8a:45:53:7a:d3:
74:b1:23:52:b1:b8:ac:5c:1a:22:5b:d6:6a:6a:e2:70:13:cf:
11:6f:29:8c:0a:a3:e0:8a:6c:ac:ed:d2:f3:17:34:c8:25:08:
c2:d6:00:0a:98:2c:11:88:9a:76:38:3e:be:19:0c:91:10:05:
ea:64:e4:fd:69:1d:55:d7:5d:e2:05:b4:ee:28:29:6c:4f:ab:
fe:3e:ac:86:be:9c:6d:15:4f:d4:6b:ca:57:ed:0a:f5:f5:7a:
47:b6:fb:14:b8:eb:87:f2:b7:f7:39:bb:c1:3b:76:a3:d2:f6:
78:23:ce:a8:f5:3d:a2:3b:1a:d7:7c:e2:f8:18:27:d2:65:be:
ca:f6:60:a9:b3:be:8f:bc:12:fe:03:12:c0:55:e1:b9:c5:a9:
ee:e2:4d:e0:a3:e0:de:ad:7b:ce:b3:0b:4c:5e:96:f9:db:b2:
ff:dc:cf:c4:83:01:44:fb:92:e3:0e:47:41:37:7d:46:50:c0:
b8:1a:34:f5:76:59:f7:65:cd:85:91:40:02:02:d0:a9:9f:94:
6e:f0:13:cd:6c:fa:4c:5f:a0:d0:e5:4b:a8:26:d6:52:93:58:
ae:e9:76:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:02 2026 by rpki-client