Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
File: m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json)
Hash identifier: 9C/2r8ip6Fm73CV4qIStP+4GDVGqSAyyzkRMaRwINoU=
Subject key identifier: A0:D4:DD:80:8B:02:CD:9C:79:AD:19:2F:00:00:DF:EA:59:1B:B6:8A
Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
Certificate issuer: /CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Certificate serial: 019D394133EC0FFA8E1C82EBBF88BEDBC60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
Manifest number: 150C
Signing time: Sun 29 Mar 2026 11:01:07 +0000
Manifest this update: Sun 29 Mar 2026 11:01:07 +0000
Manifest next update: Mon 30 Mar 2026 11:01:07 +0000
Files and hashes: 1: IFQ-id79kHlDKPQ9PpUhMxfR5F8.roa (hash: 8hN9YwJ+324f32TBhUPA/FbIWI7pWULirPqO3HhSjN8=)
2: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: DFD+fdZVMSK4lzUMGseXRlxyNVPt4WaVPTEmAyWpimY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:33:ec:0f:fa:8e:1c:82:eb:bf:88:be:db:c6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Validity
Not Before: Mar 29 11:01:07 2026 GMT
Not After : Mar 30 11:01:07 2026 GMT
Subject: CN=a0d4dd808b02cd9c79ad192f0000dfea591bb68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:8a:9d:74:f9:87:b9:45:b1:01:d5:a2:7d:
af:50:3c:6d:41:87:79:3b:30:99:53:0e:d5:c7:f6:
5f:9b:1f:c2:a7:f5:f8:6b:0d:47:be:02:7e:fe:83:
ec:2f:1f:2c:f9:13:f0:47:2d:36:ef:d1:1a:df:f9:
d8:96:89:e0:ae:56:9e:a7:a1:d6:38:e9:71:7f:d6:
a9:73:d8:18:4b:68:d2:10:0b:75:db:fe:dc:6a:0a:
3c:b4:a4:5c:3b:46:31:aa:65:f5:62:c0:45:ac:c1:
bc:de:66:66:17:19:82:29:cd:8d:96:63:c9:48:06:
61:c5:18:ee:e0:6c:da:ad:20:4d:32:f5:ee:43:c6:
5a:42:85:44:de:8b:d1:61:b2:71:f4:4b:32:f6:78:
06:14:f6:10:ef:c0:e0:40:6b:20:96:03:27:16:fc:
bd:8d:0b:86:34:f7:c8:05:7f:eb:19:04:de:44:a9:
7a:97:9e:de:80:c5:d5:a9:b8:ff:aa:9d:b7:97:09:
32:d7:08:93:61:ea:44:3a:0a:92:35:ad:64:81:90:
a9:55:14:39:ef:64:eb:db:2b:48:77:9e:c3:2b:53:
75:ee:7b:13:1f:1e:59:eb:c7:34:4f:6f:28:7e:0e:
7b:00:ea:7c:3f:af:d1:a5:17:99:ef:3a:e3:92:29:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D4:DD:80:8B:02:CD:9C:79:AD:19:2F:00:00:DF:EA:59:1B:B6:8A
X509v3 Authority Key Identifier:
keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:63:bd:bf:58:70:09:13:0f:19:6b:49:a7:d1:a9:23:ec:36:
e0:8b:a6:a7:13:0b:0a:0c:12:42:09:a5:b1:c9:f4:5c:a5:a2:
81:e9:4d:63:41:0a:f1:f9:70:b3:cd:ab:93:42:58:0b:fb:9c:
ba:9a:c9:dc:80:d0:6b:a5:c4:7f:26:47:dc:e6:d2:8c:1a:8c:
0a:6a:f9:42:4c:2f:eb:36:8d:cb:dc:21:06:88:ac:81:06:48:
0a:d9:32:03:0a:fb:65:e9:b1:dd:06:d2:c7:57:2c:b0:18:d4:
e8:0a:3b:c2:17:af:c3:7a:12:12:7d:2d:81:c5:38:a0:5d:06:
37:9f:c3:00:b4:e6:9b:f9:96:a2:0d:67:75:77:d9:1a:e6:60:
9c:c5:fd:93:80:c6:a6:df:02:dc:0c:01:5e:9b:a3:17:7f:12:
23:92:06:33:87:ce:0d:98:70:45:43:34:bb:26:10:e0:cf:38:
00:8e:1f:fb:b8:26:d0:2a:a9:e4:94:a7:7d:ef:6f:9b:07:ac:
57:41:1e:ef:05:63:3a:28:81:18:94:d6:08:f5:0d:5f:95:c4:
79:02:d5:8e:07:5b:0b:fd:31:b0:64:69:fa:87:77:f9:e1:25:
bb:17:f8:bf:51:5b:81:20:14:73:16:df:c9:d8:98:34:7c:14:
d7:6e:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:04 2026 by rpki-client