Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft
File: mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft (raw, json)
Hash identifier: 6hcvxb1TF4GYsv+EduQkG/qJjzqEOr1ip9aZB8HbA5I=
Subject key identifier: 85:44:C8:89:FF:44:3D:76:6F:7D:15:70:26:DD:74:BD:3A:FA:71:66
Authority key identifier: 99:5E:D1:29:AB:2F:51:0F:68:BB:C8:B3:FC:F1:C9:A1:EE:7E:DD:EF
Certificate issuer: /CN=995ed129ab2f510f68bbc8b3fcf1c9a1ee7eddef
Certificate serial: 019D389BAADC55B5449C2B67E9813E80A8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft
Manifest number: C2
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: AaT-fL5JWKGrOL8GvEvZO5K_kg8.roa (hash: jfOg1jyji1rFCzF9opIEWmOgvVGmxRn37HA911nURHY=)
2: mV7RKasvUQ9ou8iz_PHJoe5-3e8.crl (hash: 04LQsemR9OjmLN5/MDK8G1ovBNC05NG0HR206FboTww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:aa:dc:55:b5:44:9c:2b:67:e9:81:3e:80:a8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995ed129ab2f510f68bbc8b3fcf1c9a1ee7eddef
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=8544c889ff443d766f7d157026dd74bd3afa7166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:85:e0:22:f5:a1:4f:6e:f1:17:e2:00:6b:
11:e5:ea:64:e3:bb:96:70:fd:7d:32:09:fa:c5:19:
7e:fa:06:8a:b0:63:cb:f9:7b:66:0c:48:80:75:ca:
78:4d:b7:81:75:57:a8:23:16:1b:cd:50:b0:e6:df:
a0:08:e4:91:fe:11:eb:fb:a5:21:bc:f4:e4:eb:da:
67:e2:b8:c6:8f:6b:ce:cc:f5:1b:91:93:58:84:86:
57:0f:2d:78:8f:3d:9a:dd:4b:4d:38:52:85:43:01:
19:c6:20:bb:15:a9:fc:7e:9d:50:68:7a:dd:6e:8b:
05:83:eb:a1:8a:e7:d8:61:5f:f4:b8:75:e8:7b:b5:
e5:4b:d1:2b:5a:cf:81:60:ee:61:46:09:22:8e:58:
4c:33:ca:d8:5f:95:2d:8f:09:02:95:a0:31:44:18:
88:03:58:b9:89:76:56:d8:33:85:ae:90:49:73:f8:
a8:b6:f1:b6:76:36:fa:bc:1f:b6:65:8a:c3:d0:f7:
30:db:92:de:bd:e8:a0:03:a2:c7:d6:44:e1:84:df:
41:07:46:f2:67:a7:12:95:86:e0:94:bc:0c:61:ec:
b3:02:30:52:fb:f6:d6:b7:d2:80:bb:ee:ca:cc:86:
68:b3:ee:58:54:a3:5b:20:cf:e1:90:d9:2b:78:76:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:44:C8:89:FF:44:3D:76:6F:7D:15:70:26:DD:74:BD:3A:FA:71:66
X509v3 Authority Key Identifier:
keyid:99:5E:D1:29:AB:2F:51:0F:68:BB:C8:B3:FC:F1:C9:A1:EE:7E:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2a:0f:17:2a:0a:a3:b4:9b:32:22:3e:c4:b9:b6:69:5e:6c:
84:d4:14:3f:46:29:43:95:7a:31:e1:70:53:bb:b3:57:4d:28:
49:2c:eb:0e:5e:9d:50:86:a3:4c:6d:70:5d:8c:8f:bf:c6:8a:
78:d7:f9:f8:b8:39:4c:64:56:1a:c7:af:1c:02:f7:5e:6b:67:
d0:9a:93:b5:20:0d:51:d4:19:2c:db:d6:d4:d5:09:05:a6:3d:
9d:d9:af:04:8b:d6:6a:0b:4d:e6:bb:fe:71:dc:48:48:92:f4:
69:c6:0e:1e:0a:55:05:9e:8b:f4:84:fc:e2:0e:e6:e7:29:a0:
98:16:ff:3c:a6:fe:96:69:9e:7d:74:11:0f:0b:28:44:ff:03:
8c:3d:af:17:7c:ca:ff:33:69:c0:12:6e:75:63:15:ba:ff:78:
25:cd:d1:58:95:41:26:2e:ed:77:d9:d9:39:6e:7b:81:53:b6:
ee:dc:31:d4:a6:6e:8a:25:c7:0a:2f:35:d4:dd:02:0c:05:34:
66:5c:7d:9a:86:70:cb:d5:ae:7e:81:38:ba:89:c9:48:c3:61:
14:9e:a8:81:9b:05:d5:22:b6:10:c9:be:0d:52:e9:3f:1b:75:
4e:4f:20:10:9a:89:02:9a:7e:c9:a9:92:55:08:c6:3e:7d:02:
3b:fa:1b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:01 2026 by rpki-client