Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
File: MmHv5idxJgTzW5rZzL8DaGlfUBM.mft (raw, json)
Hash identifier: p9YmS2UvtK/20L/4XWKutBB9AuTS1OKwtqG8bxOzLXU=
Subject key identifier: 46:C4:60:A7:D0:44:29:84:DB:FD:04:56:1C:C2:89:09:A3:6E:45:A4
Authority key identifier: 32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13
Certificate issuer: /CN=3261efe627712604f35b9ad9ccbf0368695f5013
Certificate serial: 019D3977A19B333D7DDB888A6019E2B91BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
Manifest number: 02D9
Signing time: Sun 29 Mar 2026 12:00:34 +0000
Manifest this update: Sun 29 Mar 2026 12:00:34 +0000
Manifest next update: Mon 30 Mar 2026 12:00:34 +0000
Files and hashes: 1: 8UOImPECS7Tb8bv1qOFKL-C2oI4.roa (hash: 1X/4/xyAeuRwfLo60MnDR1gYBOVEUFBCMmt3e2Crits=)
2: MmHv5idxJgTzW5rZzL8DaGlfUBM.crl (hash: wGYcu2tUoafF1/Q5x9iGTH6c6jIH88sNsL6Fe2A1Y/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a1:9b:33:3d:7d:db:88:8a:60:19:e2:b9:1b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3261efe627712604f35b9ad9ccbf0368695f5013
Validity
Not Before: Mar 29 12:00:34 2026 GMT
Not After : Mar 30 12:00:34 2026 GMT
Subject: CN=46c460a7d0442984dbfd04561cc28909a36e45a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:6d:b9:69:9c:27:8d:da:89:5d:b7:05:57:
c4:32:87:dd:ac:9d:47:5c:12:b7:cf:33:93:c7:7a:
d5:22:5b:dd:82:60:ec:0e:3f:c8:e1:7c:4f:12:94:
e9:50:01:06:7e:a1:56:9c:d6:11:cb:80:3f:06:00:
cc:f0:c9:39:ab:fb:35:55:16:ca:7d:d7:22:6f:55:
65:0c:3a:0d:1e:5f:4e:2f:bb:a2:26:63:d2:da:ed:
31:31:6e:4b:e9:50:2f:43:ec:b9:86:d5:bd:64:1d:
e4:e4:e5:64:47:5a:05:67:b5:29:43:92:cf:76:fd:
ae:33:6e:24:37:37:85:dc:95:bc:b3:b8:dd:5b:a7:
7d:6e:92:16:96:1d:ba:f8:10:46:a4:2c:0e:05:a9:
f0:fd:b0:34:ee:a6:00:a5:5e:83:ce:37:42:7a:be:
d0:af:d5:78:c2:79:c7:4f:3a:15:39:34:16:fe:6e:
4a:5b:e9:3b:c4:31:8b:9e:f1:8a:7f:7e:a1:fe:b0:
19:d7:0f:21:19:cf:73:58:5b:eb:6e:8d:6c:3f:42:
1d:cb:2d:94:3a:fb:6b:62:79:c7:fc:8a:bb:0f:37:
81:a2:f9:ca:2e:72:80:19:6b:c1:34:28:67:1b:50:
aa:c8:a5:b6:24:32:a1:b4:df:d9:a8:f3:ac:40:4b:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C4:60:A7:D0:44:29:84:DB:FD:04:56:1C:C2:89:09:A3:6E:45:A4
X509v3 Authority Key Identifier:
keyid:32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d7:9c:48:8e:3a:15:93:f0:f1:e2:58:a7:dd:66:f9:56:5b:
36:2c:49:46:26:a5:6c:6b:be:9e:b8:dd:6f:a3:7e:4f:8b:0d:
10:a6:24:64:48:53:e6:d7:ef:fc:ca:e9:d0:11:57:a1:12:2c:
26:d7:07:5e:34:43:4e:30:3b:da:d7:79:70:1b:4e:70:41:00:
e4:59:ef:95:48:76:95:cd:5b:f1:9f:af:3c:c1:44:54:03:10:
ec:0c:4d:de:68:ee:27:81:9c:fc:d4:3a:99:ef:3a:a5:bd:34:
05:d9:1f:4f:91:6c:ee:71:a5:21:5a:67:f1:27:74:7d:c0:6e:
d9:00:70:28:24:ee:ab:24:09:96:3e:d8:44:b1:ee:d5:1e:8e:
0c:75:09:0d:36:a7:38:0d:07:74:68:f0:f7:35:6a:71:8d:1b:
70:02:90:bf:b3:37:56:d0:1a:4b:ae:bc:3f:79:b8:eb:7e:f2:
e5:45:3b:a1:af:7e:95:ee:15:7b:a2:ee:bd:16:53:84:59:49:
80:c0:ec:a5:10:9b:47:4e:ac:e8:d7:c1:75:92:28:a0:eb:b3:
8d:b6:67:45:8a:c3:9f:e7:b6:2e:16:c4:9a:1e:6f:44:05:53:
af:6c:28:34:e6:ea:17:c0:63:bd:58:85:b7:eb:24:21:4b:5f:
ac:b7:76:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:59 2026 by rpki-client