Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: GUekicO/l8m9XUmwjnvjSsTtBJllJgMQm/hRKdk0Q44=
Subject key identifier: 47:41:09:FA:45:C2:95:42:00:B6:5E:3B:0B:16:41:A7:C3:60:1D:12
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 019D389BD1088035ABBE67384AA1E42EC8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: 42Oa6hAtTxZiFbmEwvIO-2OcwoM.roa (hash: SkLlsU0plCQ3OmjzWWaN+6X8mXDGCP5VlIK1uTpu/is=)
2: V0-osk911oZBoXIEbj4rnci62yY.roa (hash: rYxJFA3gAE6iirrxlQ+evDRo4zqxQB5y71GogsBIQ7c=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: cxeYSbkRzvOC3ukOChm7+hOeh+q9Gr4kXy3fiIc4ok0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d1:08:80:35:ab:be:67:38:4a:a1:e4:2e:c8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=474109fa45c2954200b65e3b0b1641a7c3601d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:66:7c:d4:5b:66:97:3d:e3:0c:69:46:10:
fb:b7:d0:18:b8:3f:a8:26:4a:9b:96:66:02:7e:f2:
c5:be:e2:51:1a:06:02:b6:6b:fa:53:43:59:84:a9:
29:74:41:d4:70:42:54:65:e0:99:84:e4:4b:fc:31:
a4:01:c4:a0:ce:c9:e7:62:58:c4:eb:d5:0e:9c:80:
46:da:07:d6:b8:b5:8e:46:df:c1:70:d2:cc:c8:f6:
f8:1f:a6:01:a1:04:52:70:61:3f:35:8d:38:70:8d:
a9:06:de:79:4c:60:ec:cb:5e:c2:6f:b5:84:0b:e6:
e6:28:b3:97:e9:36:8b:d9:4a:2d:bf:42:cf:e9:22:
cb:e3:20:95:bc:c4:6f:37:6f:80:c9:20:5b:ea:34:
09:56:be:c3:3d:44:8e:4a:49:bf:88:05:de:93:df:
5c:ed:50:a5:8d:1c:78:47:f6:3c:29:55:a6:f3:66:
a3:f0:78:77:ca:86:ee:52:ef:13:10:b2:07:a6:4f:
2f:a4:54:97:71:ac:de:6c:58:a6:b2:d8:3c:4e:43:
b6:1e:5d:92:6d:46:c2:25:b7:f3:40:d3:23:dc:6e:
98:fb:c2:98:f2:8e:97:db:7a:51:6c:b7:7f:7b:93:
73:13:44:53:81:ac:20:5e:b1:99:1d:47:f6:d5:07:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:09:FA:45:C2:95:42:00:B6:5E:3B:0B:16:41:A7:C3:60:1D:12
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7a:0a:20:88:96:61:fa:f2:de:9b:ee:fd:bb:d6:01:52:b5:
16:01:e7:f8:93:49:a4:f8:6d:bb:8b:3e:b0:a1:11:48:cd:51:
34:c9:3c:9d:c9:9b:3f:66:9e:10:e7:83:37:ef:39:e9:8c:4a:
4e:9c:79:5a:9d:81:e2:fa:99:57:4f:6d:7a:54:15:ef:18:c8:
f2:c8:46:9d:52:83:a3:10:db:d1:9c:e8:d7:79:4f:f0:8c:66:
aa:37:a0:2c:ae:fd:27:e2:f4:b4:86:ac:a0:52:58:bf:4c:73:
69:55:fe:5f:62:8c:3f:a5:63:b4:73:ed:47:3e:ba:0c:b2:5e:
b7:2b:bb:47:20:1f:a5:ba:03:00:fc:73:60:0f:48:19:ca:4d:
47:af:40:34:a6:90:f6:0c:79:fe:e7:9b:c7:42:42:cd:8e:b8:
b9:3b:fc:9b:b5:66:0d:61:44:d3:7b:fa:1d:f4:b6:bb:1f:78:
d2:86:f3:81:d8:84:fe:fe:0c:5c:8e:20:95:d6:c5:82:b1:ad:
53:8a:cc:5d:19:8a:6f:48:a7:56:16:ee:44:e6:26:94:9c:33:
48:0e:75:de:4b:d9:8d:a8:c9:3e:d8:86:ee:23:06:9e:dd:d2:
ce:f4:48:0d:d0:5d:a0:3d:be:82:91:1c:80:89:f2:d5:25:69:
c9:c7:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:02 2026 by rpki-client