Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier: C3+PGpykQ8iMNWpC3ER8ltX2peo7eQnYQtb6Wt3kAfc=
Subject key identifier: 66:58:39:6F:F9:51:F9:79:01:21:78:1D:0F:40:5E:CF:D7:15:A6:27
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 019D04781A216F9C982E984E2C48297FD3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number: 096C
Signing time: Thu 19 Mar 2026 05:01:12 +0000
Manifest this update: Thu 19 Mar 2026 05:01:12 +0000
Manifest next update: Fri 20 Mar 2026 05:01:12 +0000
Files and hashes: 1: 3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa (hash: AzZG+4D5GxDUpzfM6ZHMgxfiWGvCIzXIyJrcYsz9Als=)
2: _WqApLTSHnn-QALIm4js6GY_w-E.roa (hash: vRro0DgNa75sk/Unt/zDQwG9CVSw25Sr8T6Yt4LIK54=)
3: e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa (hash: 2MJbHB4+HtGJ4wxkgZ0Dl95e/tJehFc1YChaP86nwFM=)
4: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: w/jOF25Rrj36jvLuTq8j13OMeF7WthiQC37atWYHXJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:78:1a:21:6f:9c:98:2e:98:4e:2c:48:29:7f:d3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Mar 19 05:01:12 2026 GMT
Not After : Mar 20 05:01:12 2026 GMT
Subject: CN=6658396ff951f9790121781d0f405ecfd715a627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:a5:e2:d6:02:ae:56:d3:36:8d:dc:45:ea:
a8:2d:33:f9:36:0f:4f:67:67:bf:db:59:f2:73:61:
75:d4:52:fb:31:cf:c3:9f:9d:51:29:aa:b3:43:15:
46:12:ea:cb:4e:0b:d8:3c:b6:12:99:a8:33:d5:2a:
79:3c:0a:2f:1f:ac:8e:97:fc:eb:cf:53:aa:bb:b4:
e8:7c:51:3b:a4:4a:5b:3b:9c:45:1d:41:8d:c0:05:
d8:b2:7e:d7:90:18:11:36:fd:f2:c2:66:5d:a1:98:
45:b0:e8:b8:90:d5:17:13:b6:e4:7d:06:1d:eb:7c:
ff:b8:e7:79:3b:25:43:24:cf:6c:8b:25:f0:8d:de:
d7:1d:25:99:17:da:00:f5:8d:26:14:90:8e:b9:ba:
ed:d8:02:0c:17:65:f7:94:fa:0a:0a:74:ec:4e:7e:
ec:83:a4:ef:fb:ad:4a:51:ed:d7:96:10:d0:2e:25:
1f:e5:a3:8d:95:da:0a:f4:5d:7e:44:10:bb:92:26:
3c:f0:44:75:fc:d0:a3:95:83:87:6c:1a:92:3e:e6:
9f:18:78:1a:3d:32:63:af:f2:6f:bd:46:0c:62:fe:
94:26:3e:2c:64:42:68:ff:d4:56:fe:34:cf:47:e3:
8e:67:ba:36:92:b1:ba:6b:4e:23:0a:c4:d0:1e:ac:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:58:39:6F:F9:51:F9:79:01:21:78:1D:0F:40:5E:CF:D7:15:A6:27
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0b:5f:31:6d:33:a8:22:ca:03:0d:66:5b:e8:eb:5e:d8:f5:
d6:a5:d4:16:93:db:34:ad:f7:62:0f:93:ac:fd:67:6a:f2:f6:
13:22:ef:48:57:f5:01:13:a4:40:13:8e:93:10:54:b3:51:24:
92:ad:20:11:df:a6:da:1d:f6:ea:8b:94:3a:8f:cd:f3:1d:97:
aa:28:28:1d:1d:be:0c:df:b9:be:63:80:41:38:b4:38:48:6b:
ab:13:e5:7e:3e:e9:9d:41:a7:99:94:7e:6a:a0:a7:57:8d:d0:
5b:7b:d6:ac:0b:3b:b4:06:dc:35:b8:a5:f0:52:61:99:cb:a0:
42:c8:af:f1:ff:b7:a3:0e:67:cc:5f:3b:7d:76:33:b4:75:5b:
33:46:e8:a5:ea:b8:f8:f8:4e:48:a6:b7:e5:1f:e2:92:a4:75:
5a:40:af:82:e0:c5:a2:16:a1:dd:60:95:6d:0d:47:5c:c2:3a:
94:23:ca:92:bf:71:d3:93:75:e8:55:6a:4c:eb:c0:43:9f:1b:
db:6a:3f:9b:06:87:78:ab:65:21:bc:18:6c:89:fe:29:2b:3a:
db:15:e9:2f:9f:26:0a:96:5d:93:b3:b0:b4:57:a8:4d:62:b6:
4b:50:d4:89:8c:70:4e:3a:95:57:13:47:56:33:e6:c4:c9:59:
87:3f:d2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:59:56 2026 by rpki-client