Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File: mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier: E+BdHPWp3N8t56a1J6O6+RIab4oIVEruMkeZClPrWCA=
Subject key identifier: 45:9A:81:61:B2:54:65:B2:6E:78:12:87:A0:08:0D:DB:28:46:CE:C7
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer: /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial: 019D389C10BA8FCC15D3384D9270A31B17E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number: 0807
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: aVRqpMHpdie8kn2Zv8LidnFaG0U.roa (hash: WAT/5tpdgHMh60hpQbSEIRGs2arCro1xYD6u1qjuT7I=)
2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: /+Hn2dcOjkf6/U9gq5uLxnf8n5KDS+eEdz/XmpHmGhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:10:ba:8f:cc:15:d3:38:4d:92:70:a3:1b:17:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=459a8161b25465b26e781287a0080ddb2846cec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:61:f6:b0:15:b2:12:70:49:e0:15:07:22:
63:ae:ae:ce:3d:45:90:ed:fe:b3:f0:f9:23:d1:e3:
0d:09:ed:54:05:37:23:3a:47:fd:90:66:97:32:e9:
3e:a7:bb:bf:11:42:c8:96:da:a0:e4:7f:c6:a8:90:
1b:62:92:f7:89:0e:d7:07:da:29:62:2c:e2:88:5b:
8b:96:27:1b:9f:3e:1d:86:f7:d0:02:19:12:05:cc:
c8:5f:ac:d0:53:82:72:05:8d:d9:67:7a:85:46:64:
0a:82:9f:42:d8:61:a3:b9:33:eb:a0:e7:2b:ca:f4:
34:c8:4d:b1:79:98:d5:85:a5:91:2a:2c:ac:3e:ea:
ae:cf:9f:13:64:29:47:9c:9d:7a:1b:44:8e:a3:73:
7f:dc:10:b0:99:ad:0f:41:44:62:fb:5c:c0:3f:c7:
fa:12:cd:5f:f9:9b:8c:c4:67:80:88:0a:03:5c:59:
08:73:05:de:19:8c:75:10:06:58:91:85:0f:12:01:
26:5e:69:2e:41:ee:c6:68:ee:a1:5f:f4:27:d5:d5:
1a:cf:81:41:26:89:c1:4a:25:7c:58:7d:a2:96:6f:
c3:7f:0b:19:97:d6:19:f1:4a:92:13:72:87:ed:9d:
35:7f:89:3d:cf:a2:cf:2a:53:8e:31:15:ef:06:61:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9A:81:61:B2:54:65:B2:6E:78:12:87:A0:08:0D:DB:28:46:CE:C7
X509v3 Authority Key Identifier:
keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9f:66:bd:36:01:83:ad:0c:87:28:17:ee:62:1c:cc:49:9e:
06:e7:2e:2a:99:62:29:3e:54:4b:ee:56:2c:30:3d:71:ac:cb:
0e:f6:7e:d7:86:db:eb:43:4f:c6:a9:20:7b:a3:e2:19:4b:3d:
7c:b3:d7:94:4e:00:0d:4a:27:3e:29:23:31:90:0a:6c:71:30:
29:04:0a:b9:a9:86:a8:fb:7d:1f:27:7f:83:d6:04:02:c7:c4:
b2:09:59:90:bc:dc:f4:13:ed:b9:7e:68:b5:7d:ea:cb:52:83:
7e:5b:02:e3:5d:06:ba:bc:4c:66:20:8b:86:b3:11:cf:fb:fd:
2a:f1:b4:42:ca:82:b4:10:84:7a:68:78:d2:fa:63:fb:10:3c:
dd:0f:1b:27:0b:44:e8:1e:e4:4f:57:8e:3e:41:17:40:48:41:
7f:2d:44:a8:8a:b7:08:a0:d2:93:f2:df:66:3c:91:93:77:44:
f0:e4:36:49:9e:03:a9:c9:0a:da:c9:53:39:d2:84:c1:89:58:
a3:7c:18:19:46:86:27:47:70:d0:cf:68:c4:90:3a:d2:27:52:
26:36:e6:e8:26:26:6e:84:f0:ef:ae:9e:ec:c3:28:23:51:56:
11:fa:1c:fc:33:05:5a:82:06:15:66:05:a8:80:dd:27:c7:1f:
e1:94:06:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:57 2026 by rpki-client