Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier: npQqaI8QsRYrtvk/uH7Ba1rw41pXno29aMWYbjBCiWA=
Subject key identifier: 9A:0F:54:4F:B2:CD:A2:A9:50:A6:8F:3F:80:46:20:C5:B8:93:E9:DD
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 019D389BF4851D83295C3DD1FEA92932875A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number: 0886
Signing time: Sun 29 Mar 2026 08:00:37 +0000
Manifest this update: Sun 29 Mar 2026 08:00:37 +0000
Manifest next update: Mon 30 Mar 2026 08:00:37 +0000
Files and hashes: 1: BR_BUevx2sg_8tyRkbQkeVhjNsQ.roa (hash: DcW4cVxJuDUK3IKLW2cbHxN+qa5e/QUPCI24FuVBujI=)
2: NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa (hash: nHBSYWCWMkjsq8eIHvyxI7K4o3nKXMreU+r6LsPFSas=)
3: f-WzYrTcVspbvV27XUH8n69DSig.roa (hash: dPXvzRcp3N5snJFT4/YTmjC8NO5nN1yqw4UaUWODI/0=)
4: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: xci44DTZ8xPxgXkKVK9CU1UANy3K2hJcsnjYDv+74yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f4:85:1d:83:29:5c:3d:d1:fe:a9:29:32:87:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Mar 29 08:00:37 2026 GMT
Not After : Mar 30 08:00:37 2026 GMT
Subject: CN=9a0f544fb2cda2a950a68f3f804620c5b893e9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:e5:18:5e:20:59:de:a6:55:7d:93:3d:40:
0e:df:03:1d:70:e7:bc:3b:2c:0b:ec:85:25:00:73:
a4:2d:a7:78:a6:2a:a1:0c:66:87:14:99:84:1a:d7:
2a:ae:9d:7d:28:57:81:5f:f7:04:73:54:f8:af:65:
f0:81:9b:90:c6:3e:af:be:cf:86:21:98:0b:60:b0:
7d:16:3f:ef:34:bc:0c:a0:d4:31:d0:8a:ed:21:7e:
12:3b:8a:30:16:22:33:65:c0:ad:c9:03:33:77:9b:
11:58:ea:3f:26:1e:11:49:30:aa:a2:4b:77:61:4a:
46:fe:73:29:54:c6:31:ec:e9:9d:60:70:89:56:5c:
45:dd:80:d7:c1:29:2a:14:74:a8:fc:0a:ee:85:5c:
aa:fa:9f:3d:bb:e5:e5:df:a2:5e:64:92:29:42:2b:
ca:01:31:4a:e6:29:e3:4f:fb:de:82:9d:94:6f:1f:
4a:fc:3e:b0:e1:fd:77:0a:9f:01:40:2b:28:c1:d7:
b3:da:eb:57:6f:b8:0c:eb:fd:b2:4b:69:24:97:89:
ae:21:40:43:31:34:6e:03:9a:ef:c6:79:10:e7:ac:
a3:52:41:24:4f:01:4d:8d:94:0b:6f:86:a5:ce:a6:
04:33:c7:d4:f2:36:03:49:90:0d:45:5e:0a:47:e0:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0F:54:4F:B2:CD:A2:A9:50:A6:8F:3F:80:46:20:C5:B8:93:E9:DD
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a9:7a:52:2a:4c:da:90:61:c2:15:c3:e8:bb:d1:17:50:c1:
96:50:ef:23:dc:1f:8c:b4:e7:31:27:2c:2f:af:9a:10:d7:07:
b8:d6:eb:11:c8:51:53:1e:67:4d:b5:71:37:40:95:cf:ee:d4:
e1:88:f5:d0:db:c1:a4:64:24:ed:b7:49:a5:2c:cd:9f:57:09:
50:18:20:10:80:27:57:a7:84:2b:da:82:32:f7:65:45:14:c7:
0f:40:89:ec:b3:12:77:ee:35:ce:19:12:e9:a0:c7:4c:78:1c:
b7:c3:51:6f:b4:f2:ad:ae:56:50:94:bd:27:da:fe:68:d4:17:
25:12:32:78:68:9d:92:ff:7a:13:a1:d1:26:83:29:81:28:bb:
4a:f6:ee:66:f5:6c:50:ae:be:ba:20:78:17:66:60:5f:04:82:
14:f9:7a:b2:0f:2d:74:0c:6e:25:93:21:f3:fd:1e:df:d2:7f:
6b:6d:56:4f:06:44:e7:4b:e2:f9:be:f5:9e:4e:2f:53:26:5c:
86:87:30:0e:db:d9:c9:81:05:84:75:41:95:6b:40:10:63:34:
4a:2a:65:d0:22:73:55:fe:5a:18:b0:95:6b:ea:0f:89:3d:e7:
0f:4f:90:ad:b9:9f:6b:93:7a:48:2b:99:05:e1:dc:15:d2:7a:
5a:11:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:53 2026 by rpki-client