Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File: m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier: D+qSjMNsiXyMr0l/TVd5/IN0RZztftuuqwCS/IZh+b4=
Subject key identifier: CE:39:D4:31:3F:29:98:58:83:84:E4:54:B1:06:90:08:3B:9C:B2:B5
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 019DD05172D23422A47529FD457CDEBD0B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number: 1872
Signing time: Mon 27 Apr 2026 19:01:31 +0000
Manifest this update: Mon 27 Apr 2026 19:01:31 +0000
Manifest next update: Tue 28 Apr 2026 19:01:31 +0000
Files and hashes: 1: cjkYRf3Yh9WpwKdD5YYzfaFNvWw.roa (hash: 3gq9vL58U08Go4S/2DXWUX5EoB3kYBslnaNgZp37wkE=)
2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: eY+y5iPH5AYJBp+0abWbGEdEYxL9UMw9ZjhfmaWjFxI=)
3: msBIl7hzmZuQkbrJ6sui74p1Pgg.roa (hash: 1/8Tc8pewIiwrYAG9YY8GUqoXDl/4u6a8D5S98uRMyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:72:d2:34:22:a4:75:29:fd:45:7c:de:bd:0b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Apr 27 19:01:31 2026 GMT
Not After : Apr 28 19:01:31 2026 GMT
Subject: CN=ce39d4313f2998588384e454b10690083b9cb2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:dc:89:50:97:e6:96:ef:d1:7b:f9:f9:8a:
55:05:bc:3e:2d:b3:91:50:40:1c:cb:6c:5c:29:03:
f9:09:2e:94:39:6a:3f:b1:73:05:85:6b:b0:e8:be:
1d:d4:4a:fe:24:25:4e:a6:bf:53:75:5a:72:7c:3b:
e3:63:ef:9c:d7:71:6a:fa:f1:0e:17:30:50:25:fe:
ea:db:22:49:a9:9f:4d:88:58:45:cc:fd:aa:66:5e:
1b:8a:f1:66:0b:b8:86:55:8a:21:b1:08:33:67:cc:
9f:d7:28:ae:09:17:a7:bb:49:fe:47:2d:e1:4a:6b:
49:c3:89:fb:5b:ee:93:67:ae:bd:3c:c8:44:bc:dd:
27:17:1f:28:f1:bf:ce:5a:c1:94:27:80:d8:64:3d:
26:3b:bd:88:e6:31:48:5d:a4:f9:1e:d8:8b:05:58:
8c:2a:53:16:69:77:51:a2:0b:a2:8a:79:5a:7e:ef:
c3:3e:30:76:1d:ca:3a:b3:3f:39:dc:7a:2d:24:69:
cb:bc:bd:67:08:00:1f:77:3d:41:99:c3:9f:05:d9:
73:99:82:f0:d9:4c:d8:b6:fb:d2:dd:cb:d5:3f:43:
cc:fa:f1:83:bf:a3:3d:53:fc:3d:3b:0b:47:c3:be:
87:e0:a7:5c:f1:89:2b:c4:d3:34:58:68:a0:ba:b4:
70:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:39:D4:31:3F:29:98:58:83:84:E4:54:B1:06:90:08:3B:9C:B2:B5
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:08:9c:38:d6:99:31:62:e5:c3:bd:77:71:ea:0d:99:63:f0:
a9:44:39:aa:a3:76:8c:a8:81:fd:53:76:0c:d6:ef:56:f4:29:
76:fc:2b:15:a9:07:82:37:1f:0e:e2:44:be:6f:29:b3:9a:68:
ae:3e:8a:d6:c8:ba:4e:ed:46:df:a4:0e:9d:4f:3f:56:5f:10:
51:64:a1:94:e3:bb:77:50:c0:84:60:fe:df:8a:e1:aa:9e:e1:
d2:4d:da:24:6a:be:56:71:79:3c:89:fb:83:ec:63:24:bb:72:
0e:57:71:85:4b:77:cb:d3:6b:52:70:3f:6f:c4:7d:ef:35:0f:
c8:e8:8e:b9:21:87:f1:f2:9d:c0:67:83:8d:d4:dd:44:80:f4:
58:1f:73:a4:80:3b:60:31:93:36:37:b0:b4:6d:20:2f:0e:55:
07:73:1d:6b:5c:d1:89:4a:9e:08:6c:26:72:81:39:55:08:cf:
7a:55:0e:76:e8:a2:63:0d:c8:89:f2:41:f5:e7:f8:0b:e7:69:
1d:7a:80:2e:53:b0:a4:cf:fd:d2:e9:44:42:62:28:4e:c3:de:
80:33:e0:aa:99:49:02:76:12:9e:14:94:fd:0f:82:d8:7c:92:
77:8c:49:48:42:a9:f9:da:a5:f6:9b:24:cd:54:6d:06:4f:88:
53:a1:fc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:05 2026 by rpki-client