Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File: m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier: OsL00d8845vJjDNFDfVn/yjnXNK8xtq6448Qej5YmDk=
Subject key identifier: A3:A1:1A:73:CF:28:14:C4:A5:33:63:93:DD:46:4B:67:9F:CD:CD:40
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 019D1EDC7317E6CCF6F04D0B4ED84F54ECB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number: 11C3
Signing time: Tue 24 Mar 2026 08:00:56 +0000
Manifest this update: Tue 24 Mar 2026 08:00:56 +0000
Manifest next update: Wed 25 Mar 2026 08:00:56 +0000
Files and hashes: 1: 1-g6OpGedOnxN63cJ1EmDTL-4hvw.roa (hash: JM6W0dxskOtwH/4wZYEeDey8i9ac93ewUEb24GlUyks=)
2: Q4oVtB_GG7eovbLinG-u2kk_sok.roa (hash: cM5qIsneZAmTqIZg9DeB6vafwKefGN204JmC+NSInLk=)
3: TRB5S_43lNyOLKzxAGsR3jba-nU.roa (hash: K/IXnKVsdiRn2o1kH+FaE/QlEeszfs0vxtMbvnwDCbQ=)
4: m4hSv_mEGl1O7CcJ0lhgjYNl4mM.roa (hash: uKi5CjgcDmOAt0F3mDiM2fjwRKRtze0jB8esHr2tRSk=)
5: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: 9JPeSfmPcvvuY2mK9HiRNjXJn+Nc/z+lk/WH/dSvtZU=)
6: tZ7C1MYt9I9U0h7GnvEIm9NToaE.roa (hash: sb1ZYmGZNktATZIUUN0if0MQ6BfFbZD5jVek7sbME7Q=)
7: u-b7hCj6gdd6K9YCWBDHTcbmd6g.roa (hash: qRx5Ajf58qovX1XwWQ0T9y9tHlrDKVNojCTuf45PlRo=)
8: v_G295N19bDrQCJDMtlZ-ai88wg.roa (hash: ZZZ/+7GguAvkf95Ay0eDVtwD7Ey8QKEeDZLP7i4i8qA=)
9: wTjmQameKdcpA0z8PRkcVGZwuuc.roa (hash: k2WV/2PH4Kau8EV05RXYKBWzXM8y2f7UYSrD2p5Z2q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:dc:73:17:e6:cc:f6:f0:4d:0b:4e:d8:4f:54:ec:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Mar 24 08:00:56 2026 GMT
Not After : Mar 25 08:00:56 2026 GMT
Subject: CN=a3a11a73cf2814c4a5336393dd464b679fcdcd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:c6:46:d5:1d:3f:ad:65:28:fe:25:0c:2c:
74:0b:92:92:b0:bd:1d:d0:2a:61:42:79:e1:c4:e4:
72:5d:51:86:b5:50:17:13:20:ec:ff:69:d5:0c:81:
f5:ab:8f:fa:26:6e:cb:bf:63:6f:76:88:70:8c:0d:
02:10:89:e2:92:3e:15:65:18:55:27:80:c1:39:af:
aa:92:6e:33:cf:95:7a:75:62:72:ed:f2:95:c5:5c:
ec:72:da:9a:95:42:11:1a:3f:74:d6:c9:0a:1a:6b:
c8:89:54:19:70:39:47:0b:af:17:9f:c7:47:9e:15:
fa:c4:7d:33:a0:3c:15:51:d5:5d:3d:dd:2e:54:74:
ef:40:02:9c:77:96:48:82:c6:12:c8:f7:07:e7:65:
cc:66:cb:75:fc:78:14:f0:22:b6:db:0b:0b:16:44:
77:89:93:9f:12:b1:16:f6:03:fe:3d:0a:28:e0:13:
f7:fc:57:70:09:82:fb:4a:d8:f4:f8:3e:9e:03:a9:
ea:4c:1c:ca:0c:21:2d:28:c9:dc:ec:f5:a3:63:14:
c3:2e:12:dc:43:ed:19:37:d3:b4:5c:48:f4:66:55:
5e:dc:10:4e:af:f8:a9:17:65:e5:4e:d3:a0:6c:07:
0f:1a:df:37:69:40:c3:a9:1b:2b:c5:7b:db:f7:f8:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A1:1A:73:CF:28:14:C4:A5:33:63:93:DD:46:4B:67:9F:CD:CD:40
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:87:55:88:aa:13:5a:0c:59:2d:c4:67:53:51:1a:86:53:f6:
1d:16:5e:87:0f:24:88:a5:4b:0a:7e:45:b0:90:09:63:c0:ee:
f1:e6:00:e6:b2:d7:d5:1f:cd:44:40:28:f8:93:1b:5d:86:fa:
a9:c0:73:64:60:ba:4a:2b:9f:99:11:16:87:aa:2c:b0:1e:b7:
25:1b:b2:b6:21:4a:57:1e:1d:f7:51:d7:90:70:fb:ac:60:07:
21:09:cb:be:d0:44:3a:b6:8d:92:b7:48:98:33:d9:63:f4:1b:
49:0b:f0:52:49:d4:62:0d:6c:f4:1b:36:3e:8e:42:be:21:16:
68:9d:e1:3d:a6:ac:a6:07:c5:11:29:77:74:9f:29:97:e2:c6:
bb:6b:e0:e7:4a:8c:dd:38:2b:35:e8:4b:6a:75:b1:68:78:41:
a6:53:92:c9:a2:48:80:8d:95:e0:2a:11:2b:15:bc:bb:79:f3:
c4:1d:22:c9:a2:2b:d7:a9:ad:1b:de:59:0a:a7:17:05:c7:4b:
e1:84:dc:47:71:06:d6:e2:b8:d6:5f:3e:c0:74:3a:8b:89:21:
9d:25:76:4d:88:ef:a2:ea:f9:1c:2a:48:97:38:89:9b:53:07:
67:0e:39:92:94:ac:ed:fc:2f:28:c0:2e:1a:81:bb:b5:db:ca:
e2:4c:9d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 14:45:24 2026 by rpki-client