Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
File: mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft (raw, json)
Hash identifier: ekvSK1NpiOsrEt/o0Z0AIJet46EyQVFM3AntM5oyVtY=
Subject key identifier: 14:2B:A1:B8:97:8E:DF:36:76:17:65:F1:8F:9E:FF:F8:D7:FB:1E:7D
Authority key identifier: 98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
Certificate issuer: /CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Certificate serial: 019D39AE6BE2C3A87DB11270A5FC28E20BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 13:00:25 +0000
Manifest this update: Sun 29 Mar 2026 13:00:25 +0000
Manifest next update: Mon 30 Mar 2026 13:00:25 +0000
Files and hashes: 1: Ido2M0FweL3C9dqdc0-U2P4b0R8.roa (hash: ZFVyhccObFtKIvVwdVOf1IOPpLnjK5DJfJnbV+g9WKs=)
2: mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl (hash: 1LLGmswSo1v3Q+Rz6Kti6mrCv/uOXeQPsgCLKImNBYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:6b:e2:c3:a8:7d:b1:12:70:a5:fc:28:e2:0b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Validity
Not Before: Mar 29 13:00:25 2026 GMT
Not After : Mar 30 13:00:25 2026 GMT
Subject: CN=142ba1b8978edf36761765f18f9efff8d7fb1e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:df:a0:f9:46:65:1c:aa:5f:e3:14:ce:7e:
68:b2:2d:2b:d8:50:34:35:ae:27:95:c1:d8:38:f9:
6c:65:54:b9:0e:5e:7f:80:d4:57:e2:cd:cb:60:cc:
f7:37:38:ff:8d:55:be:5a:e6:7e:df:2c:78:f9:9a:
7f:02:f3:1b:ac:1f:85:66:df:ce:a6:02:a0:3b:6e:
1f:a4:b8:ee:92:9a:de:9d:32:aa:62:b6:d2:82:d4:
c7:71:64:2a:ba:6e:7a:75:85:66:ba:17:6e:7e:1c:
95:ae:c2:37:4f:e0:4f:bd:d9:0d:cc:e0:92:64:fc:
f1:8b:3a:77:dd:2c:e9:a8:9e:8c:89:69:47:2e:5f:
87:25:bc:2c:1d:cf:cd:f2:71:f9:0b:91:18:c2:d3:
db:12:5f:f9:c9:ce:1e:44:31:8a:af:80:e5:4e:d5:
bf:9c:72:f4:c1:9f:cb:31:0d:a4:12:a8:89:6c:9b:
4c:b5:23:37:f7:14:06:b3:e7:5a:86:66:56:af:8d:
f0:e1:bd:ff:50:8f:63:4e:8b:73:ad:f3:bc:b6:81:
51:1e:8f:e1:be:f6:0e:3e:33:0a:dd:62:32:5b:ae:
a4:0e:1b:9e:52:51:e2:c1:a9:3f:7b:8e:8e:31:80:
66:a5:5b:be:d4:ae:c9:95:f5:da:20:52:72:4b:79:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2B:A1:B8:97:8E:DF:36:76:17:65:F1:8F:9E:FF:F8:D7:FB:1E:7D
X509v3 Authority Key Identifier:
keyid:98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:29:1b:e0:a8:cb:52:86:f5:64:c2:42:83:fa:e5:d2:3f:b9:
0f:f2:a9:79:94:d5:38:6b:e0:70:a7:06:2f:f5:7c:07:32:c0:
9b:12:be:6e:43:5d:fa:7c:20:8f:1b:98:9b:2b:36:3f:3b:fe:
62:8b:1f:2b:0e:35:cb:81:e3:b7:7d:cb:39:71:63:41:69:14:
25:4c:f9:1b:0b:fd:65:99:4e:9e:f2:22:5e:32:35:72:34:ba:
c5:c6:50:42:3e:e4:75:79:8e:19:4b:ca:6a:c4:d7:9a:ba:54:
93:88:52:8c:47:36:66:d6:93:6b:1c:e5:5a:b9:59:0a:0a:e5:
d9:11:5b:78:24:53:97:d2:8c:69:80:cc:fd:9c:7e:b2:9b:fb:
15:ee:83:ba:a1:21:d0:e4:d8:d7:de:b8:3d:4f:72:f9:61:ba:
b1:85:48:f0:fc:16:77:07:b4:96:31:e1:55:56:ca:ef:bb:7b:
94:8b:75:fe:d4:1c:a3:a3:1d:85:e1:c9:06:16:73:21:33:6e:
c2:72:58:96:28:86:7d:38:fc:c2:08:dd:dc:ab:77:5c:32:c9:
90:ce:c6:6f:35:7e:2e:a2:32:f4:70:dc:4b:ee:c2:fd:d4:98:
0b:15:e7:07:3c:f9:87:37:c1:96:b0:fc:3c:3f:2f:c8:28:5f:
7a:4b:26:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:15 2026 by rpki-client