Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier: kaVkbidWtGMhMmPp+TKuqefp5EOplGJeupPJ8fFK4Ns=
Subject key identifier: 96:29:5B:32:72:F6:44:EE:0C:62:65:66:D6:82:75:B5:B6:D1:01:49
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial: 019D3941A234DA175929FDABB6C323D0B953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number: 0260
Signing time: Sun 29 Mar 2026 11:01:35 +0000
Manifest this update: Sun 29 Mar 2026 11:01:35 +0000
Manifest next update: Mon 30 Mar 2026 11:01:35 +0000
Files and hashes: 1: cAKVqYBd9IcAL6r2ZvxM_Qj1ndI.roa (hash: XqFaKsdiSRNsnwScS0QPlL53huZcp/xfhEBOIjWXbkk=)
2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: qDuf4jqDKjjAJgKk5yaDNgpcfyNM4oYdoO5P0Z2ndmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a2:34:da:17:59:29:fd:ab:b6:c3:23:d0:b9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Validity
Not Before: Mar 29 11:01:35 2026 GMT
Not After : Mar 30 11:01:35 2026 GMT
Subject: CN=96295b3272f644ee0c626566d68275b5b6d10149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:25:8d:ca:96:0b:b9:73:d3:b3:eb:ed:b2:
ec:11:bb:2e:8e:55:f5:df:a4:5e:58:3c:41:dd:25:
a4:ea:65:fa:31:7a:3c:07:c7:b5:82:bb:2e:b2:3e:
b5:97:a5:d7:6b:48:14:84:82:3f:8e:4a:4a:bb:dd:
66:0f:d9:11:3d:52:5a:d6:ee:c9:7d:99:e5:4c:16:
9e:1a:99:6d:de:81:0f:56:a3:04:e5:30:bd:38:68:
c0:76:56:3c:5a:f3:aa:b1:07:4a:15:d3:f1:20:ec:
2a:2f:aa:5e:c6:cc:3f:f3:76:83:60:6e:47:92:c2:
b0:6b:00:47:83:2d:67:50:fe:f4:fd:1d:15:a4:0e:
47:f1:65:b1:ca:f7:84:7a:f1:a6:fe:e8:f0:70:26:
75:6e:3a:d4:71:fe:92:c0:cd:b3:94:bf:49:fd:b1:
01:77:c0:2f:d4:9e:e7:6e:2a:93:4b:07:2a:88:d7:
61:ab:23:ef:6c:7f:d0:99:b6:46:d7:25:cf:b4:23:
d4:a8:55:3d:23:bc:0e:81:fd:fe:1e:e5:2a:7d:90:
d7:7a:99:55:f7:9f:8e:18:d9:7d:4d:f6:ca:fb:52:
c9:61:86:c6:ed:84:32:30:3d:fa:51:51:72:ec:74:
36:ad:83:11:a4:85:12:1f:80:62:94:92:cb:6c:cb:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:29:5B:32:72:F6:44:EE:0C:62:65:66:D6:82:75:B5:B6:D1:01:49
X509v3 Authority Key Identifier:
keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ab:02:f6:8a:29:59:c9:6f:95:ab:db:89:e0:f2:0b:d4:3b:
42:d1:dc:78:d4:bc:50:1f:09:cb:1c:f9:6a:8b:ba:37:fc:45:
fa:b9:7d:bf:29:f8:fe:fd:f1:f8:2a:a7:35:79:17:15:c3:09:
b5:74:b9:dc:73:7b:34:02:ab:79:dd:1c:2c:d7:38:db:28:f7:
5b:ad:33:11:15:46:32:73:5f:dd:60:6f:f0:e6:4a:fa:f8:2b:
ac:a8:69:a6:7a:b1:e0:0f:c5:6d:a4:71:51:45:e1:f4:5f:ed:
22:60:74:70:85:3d:82:55:8e:17:29:8f:6f:d0:a3:f1:72:92:
d8:df:f2:9a:4e:9d:7a:5a:ea:86:98:69:f8:3b:f6:ba:90:b6:
7b:05:30:55:7b:ae:b8:8b:c3:96:de:9a:71:d0:c2:ff:5e:0d:
0e:a1:18:57:9e:57:fe:ad:7d:1b:19:b4:21:d4:a9:4d:48:fb:
ba:4f:31:26:9a:db:62:08:25:80:21:fb:73:ca:bb:d1:ca:a8:
51:cf:93:76:d0:95:6f:a5:ac:e6:92:0c:ad:18:30:9a:fd:ec:
cc:ac:72:eb:26:34:81:d0:c2:ad:67:cf:f2:02:fa:0e:4c:56:
14:35:74:6b:f6:8a:50:64:21:ef:d4:85:c6:a2:75:d5:63:bb:
29:5e:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:04 2026 by rpki-client