Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
File: mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json)
Hash identifier: x7S9IUfuMuFKmP9AtXDH3abR64xIBe2QvJJQrcUDTUk=
Subject key identifier: 0D:D4:63:57:3F:03:E1:80:CD:F4:FD:D6:E6:F9:00:40:99:1A:AF:A9
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Certificate issuer: /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial: 019D38659EB18925617D018CDF4611697182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
Manifest number: 1824
Signing time: Sun 29 Mar 2026 07:01:16 +0000
Manifest this update: Sun 29 Mar 2026 07:01:16 +0000
Manifest next update: Mon 30 Mar 2026 07:01:16 +0000
Files and hashes: 1: ii2y3_3OasAT5vVqpy7EkID9V2Q.roa (hash: eHIEjyO4o7PMmo5LxlNBD9RVF/znC0lnkJD1jokxFWo=)
2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: oicfDqGeRXvfJox68NZQRWfAeceQM4suQM6o5scS9ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9e:b1:89:25:61:7d:01:8c:df:46:11:69:71:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Validity
Not Before: Mar 29 07:01:16 2026 GMT
Not After : Mar 30 07:01:16 2026 GMT
Subject: CN=0dd463573f03e180cdf4fdd6e6f90040991aafa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:48:60:4e:d6:a8:ef:b9:aa:25:bf:af:06:
b7:2a:46:d4:0d:d4:c1:a6:4c:eb:fa:c0:0b:7e:9e:
e7:b5:dc:58:85:23:cd:97:9d:f6:77:8d:1e:85:0b:
37:cc:e5:e4:be:f6:e7:d7:89:c8:47:f5:97:85:1b:
cb:62:e1:93:06:8d:49:05:a4:9d:8d:19:e4:7d:39:
a2:70:cc:cd:d6:9a:de:b9:84:b5:70:6d:80:f1:69:
50:8b:44:5a:57:d1:08:2e:19:5d:61:0c:73:03:8a:
7a:e0:c5:72:da:f2:ef:34:a7:fa:68:91:a8:c8:14:
82:ad:22:b0:ec:56:7d:56:91:8b:3b:3d:f6:87:ca:
62:88:af:4b:96:27:fa:4e:cc:2d:95:57:1d:a1:50:
70:bb:05:a3:ee:05:34:c9:92:3e:4f:fe:de:7f:98:
45:1e:c2:cd:c0:3d:61:1e:2e:3c:0b:8e:1e:4b:fb:
b8:27:e4:bd:c9:48:81:bf:16:74:4a:37:71:a9:1a:
54:fa:16:91:ae:bc:a9:b4:ce:b2:a1:8f:81:41:c2:
6c:a6:ed:15:74:0d:d7:a6:ae:55:76:1e:33:7b:d6:
a7:4c:70:6b:70:53:f0:ba:ba:09:ea:95:0f:b6:bb:
9e:ec:cb:d2:57:e7:6f:da:f1:b8:b0:2b:a0:69:d1:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D4:63:57:3F:03:E1:80:CD:F4:FD:D6:E6:F9:00:40:99:1A:AF:A9
X509v3 Authority Key Identifier:
keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:56:23:ad:07:d9:f4:52:64:7f:40:b6:85:ae:6e:9d:78:b1:
f4:a9:d7:90:32:13:25:b2:36:56:8e:e0:61:c7:cd:83:48:ba:
a7:8f:eb:d2:ca:af:9b:01:35:1b:46:ad:55:a5:74:3d:08:ef:
d7:1c:45:5e:3f:6c:d5:de:76:59:3d:ea:eb:c0:66:39:fc:35:
4f:88:ce:e7:f9:1f:52:c1:0f:85:1a:6b:b7:00:dc:15:e6:de:
5a:49:1f:05:ff:6a:79:a1:c2:a6:47:20:94:0b:6e:cb:71:07:
7a:56:d0:0f:db:3a:c1:84:ee:46:be:f8:2b:62:24:0f:fe:c5:
4b:f4:a4:66:3b:23:13:d6:46:5d:00:df:a0:ea:89:d0:5c:be:
b0:4d:8b:f4:bf:5f:cf:e4:d9:b4:bf:2b:eb:9a:b8:ad:db:36:
dc:93:72:1b:d5:69:d5:9c:25:bb:b2:a0:f5:f7:0b:99:c3:5a:
2a:d4:db:e0:e1:50:a0:3f:35:0f:3b:ba:e1:d9:1e:d6:51:08:
0e:ff:9c:f3:dd:c8:1c:80:28:21:fa:f6:b4:db:b7:c2:9d:ec:
b4:bd:09:09:dc:0f:c5:6a:50:f2:c8:c2:0e:3c:4a:58:77:9d:
59:90:ba:6d:35:ab:94:4d:00:95:00:83:d4:98:f1:d6:b4:f5:
03:da:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:49 2026 by rpki-client