Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: h15Bt1Tv+g6OCLWTSvCxOKVJW+u5P0ZCkUIqQofolOU=
Subject key identifier: D3:F2:76:3A:11:A9:E1:22:6C:04:23:F1:86:62:31:7A:EE:54:DD:A5
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 019D371B8F562B02793E4543130415F7F181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 01:00:46 +0000
Manifest this update: Sun 29 Mar 2026 01:00:46 +0000
Manifest next update: Mon 30 Mar 2026 01:00:46 +0000
Files and hashes: 1: UlgMubvL0b05NPo0OYBZNNMYbpc.roa (hash: 5BRGLDe+CLca7bIM6Jp7/JjKHJiwcAuqklCH8T20ndI=)
2: WaF459Cc2uKlfeZQW71nNqM2m1o.roa (hash: INQ6UPfyYeMJRdxCsd5oJRH61VvqzRfFQEhDkUi1R2A=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: 6hAQxsoaSeMQQiK1aH5Sld1sD+NkTmzZaBoZcWbrsFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:8f:56:2b:02:79:3e:45:43:13:04:15:f7:f1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Mar 29 01:00:46 2026 GMT
Not After : Mar 30 01:00:46 2026 GMT
Subject: CN=d3f2763a11a9e1226c0423f18662317aee54dda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:07:5f:2c:f6:22:1a:48:c5:2b:60:9d:73:e6:
95:70:f6:7b:3a:95:1b:79:4d:96:a6:35:1f:2d:f1:
bd:1b:90:e6:e8:28:2c:b0:48:cb:f9:54:d5:76:f7:
4b:c3:49:33:d0:46:49:9a:0f:9c:46:2a:5f:07:71:
43:80:66:e4:bd:5e:f2:40:f7:b5:2c:8a:18:23:08:
a7:8c:2b:f6:00:e6:fc:79:9f:e4:f8:35:72:c5:50:
4f:47:5f:cd:85:1d:74:75:ee:08:44:cf:c1:8b:41:
91:e4:8d:01:5f:22:f9:1c:fb:84:23:de:3d:ee:de:
67:23:10:79:32:b9:b8:42:bf:0a:b7:d7:ef:25:35:
1a:ee:22:55:08:49:03:ff:15:4c:dc:71:df:08:59:
88:61:88:87:f7:92:b6:a2:a6:53:fa:65:91:5a:08:
05:95:e6:40:fa:95:92:1e:96:0b:9d:25:3b:c4:c3:
aa:ec:a1:a0:63:8b:d5:e9:71:a5:77:f8:16:9c:ae:
9c:4a:38:81:64:e3:ce:8f:00:b3:66:5e:f0:ae:f9:
8c:d3:59:ae:4b:e6:04:c0:a0:0c:73:1e:51:90:af:
83:68:67:d4:0e:e5:a8:71:e8:b0:58:d3:80:80:c0:
39:c6:ec:77:99:3d:84:a7:43:e5:62:ec:0e:a3:1f:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F2:76:3A:11:A9:E1:22:6C:04:23:F1:86:62:31:7A:EE:54:DD:A5
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9c:ad:91:2c:c5:b4:47:e7:d1:da:f4:e9:c6:fc:b1:62:18:
18:77:ce:70:6d:72:1f:fd:9a:21:f8:b0:8e:b2:3d:f5:f4:06:
f8:6b:57:41:af:9b:46:e5:7a:9a:9b:82:70:dc:3e:5f:3e:37:
a0:72:63:45:a0:8c:08:42:13:6e:87:72:14:76:28:c8:7a:72:
7a:59:a1:39:9f:26:df:1c:53:dc:c7:55:f6:c3:f5:2b:0e:ed:
18:64:8f:16:a6:a6:1b:b2:d8:78:0b:f3:71:d3:ba:06:59:4a:
b6:a7:8d:83:4f:0a:59:ab:67:42:a3:1e:56:94:5a:54:ee:42:
32:89:a8:af:db:48:ad:d9:c0:0d:18:94:e0:ea:62:c9:a6:26:
03:8e:55:e4:73:f1:ea:73:25:58:d6:8a:c0:a2:8b:bb:5b:b6:
7d:b9:2f:7f:23:99:56:9d:1e:c8:95:bd:4e:79:b3:69:54:a4:
6c:dc:e7:d7:d4:26:fe:aa:86:a9:b3:2d:7c:83:36:a8:10:42:
52:cc:d6:41:a3:65:ea:ab:0c:ec:ea:a2:99:5c:c2:22:66:6e:
55:de:3a:e4:4b:90:32:71:bb:72:9a:21:a3:4e:7c:3a:f7:b8:
cb:d1:08:11:11:75:a7:89:8b:7f:1b:c1:c9:ae:ad:e0:38:1f:
86:62:e6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:57 2026 by rpki-client