Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
File: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft (raw, json)
Hash identifier: tZbN86irSwFM+agOFuDzIFiAmTaatsLZF7H3xDlqu7I=
Subject key identifier: 97:86:26:E7:C6:61:3A:25:1A:75:B9:25:B9:55:3E:70:C5:E1:2E:BA
Authority key identifier: 33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
Certificate issuer: /CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Certificate serial: 019D378981A553FBFDCC18D9352F868BEAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:51 +0000
Manifest this update: Sun 29 Mar 2026 03:00:51 +0000
Manifest next update: Mon 30 Mar 2026 03:00:51 +0000
Files and hashes: 1: 6ztQxOe_PEgUsDBO6kHXBhIN87Q.roa (hash: vJYdONcCwz7ZRzjkkaza8LT61nND9UkJTOAa0xHd8m4=)
2: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl (hash: q9GyuavSc2cj190d7alWVRIp2aMqOKSewFGYfsc4B70=)
3: vrpkaL0U3jMOO-KVqiy6oc1DpeY.roa (hash: 1otko+I+GMmAYVo9i25VRg3S321FcTSnDSSA4SjQNEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:81:a5:53:fb:fd:cc:18:d9:35:2f:86:8b:ea:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Validity
Not Before: Mar 29 03:00:51 2026 GMT
Not After : Mar 30 03:00:51 2026 GMT
Subject: CN=978626e7c6613a251a75b925b9553e70c5e12eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:de:26:92:28:14:71:dc:77:13:d5:9f:3a:b7:
c5:90:fb:a8:c9:fd:5c:7a:11:74:88:f7:86:fb:df:
3a:1a:9f:38:41:5c:64:f0:a9:ed:1c:66:0c:95:7c:
ab:de:90:ef:cd:7b:9e:b8:4d:da:14:55:0b:a9:d3:
bb:16:2c:8e:80:db:c4:bd:30:75:e2:74:22:dc:70:
c9:5f:21:42:c2:97:b0:a9:98:8d:7d:94:fc:5c:62:
1c:7c:61:e9:9b:e2:2a:e3:34:ba:a9:9c:3d:e6:ad:
8f:bd:9d:c8:4b:cb:56:d9:a9:98:93:d1:8e:af:98:
fd:32:68:8e:7b:e2:af:fb:8a:92:63:05:11:88:2a:
97:63:5d:45:54:e4:df:da:74:44:ac:6b:eb:b5:42:
1b:df:49:66:c0:c9:55:d9:e3:9e:61:36:b6:07:d7:
5f:e2:af:a4:63:3c:89:e4:72:47:0e:5f:02:3a:f1:
e0:fc:6d:3e:16:ef:1a:18:13:7f:7c:35:65:66:70:
db:37:05:27:3f:c7:27:c8:6b:c5:f1:23:cc:4b:21:
c6:3b:9e:37:ec:91:cf:9f:f0:9c:a7:45:98:c5:aa:
c1:fb:7e:fb:95:76:34:25:ce:c9:f6:20:1a:1d:29:
1a:90:0b:ea:3d:0c:ba:d7:76:af:4f:c5:34:42:8d:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:86:26:E7:C6:61:3A:25:1A:75:B9:25:B9:55:3E:70:C5:E1:2E:BA
X509v3 Authority Key Identifier:
keyid:33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:06:22:3a:a9:68:84:a4:9d:99:0a:61:79:b8:dc:08:87:46:
1a:7c:ed:ba:f4:aa:7b:4c:57:f0:ce:6f:8f:8f:99:1f:a2:98:
78:7c:86:96:a8:7b:c3:0c:5a:f7:43:aa:5e:3d:a3:ea:1c:fb:
e9:69:4d:da:e0:8c:ad:a0:dd:6b:17:c8:8a:ad:4c:8d:9d:99:
5f:b5:77:97:ab:db:5d:21:37:f0:b0:c3:ea:29:13:76:bf:9c:
19:80:e4:f1:8c:1b:cc:d2:9d:5d:fb:98:42:6e:b8:9e:5d:80:
2b:ad:97:8a:6d:c1:3b:cf:0e:25:e9:c6:a0:9a:61:98:35:85:
ae:1b:b3:2d:1f:ac:da:95:be:b2:71:0a:38:0f:19:51:71:d7:
f0:2d:81:9a:ae:7e:9b:6d:6e:dd:a5:41:44:11:fa:1b:24:64:
7a:cd:76:6e:aa:74:56:a9:62:94:f4:84:26:a0:5f:2e:9a:30:
1d:ac:6a:40:9d:37:01:e6:c3:ca:90:ec:26:c8:b8:3b:e0:65:
f8:fa:ac:de:2a:90:96:35:9a:94:fc:36:b8:1e:d2:a9:28:d2:
e3:71:6b:0f:02:bb:a6:0f:3d:27:65:76:0f:7e:01:0c:5f:8c:
e9:d9:6b:b5:09:68:46:97:2b:76:7f:8d:99:d7:9e:5b:2e:04:
0f:b5:49:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:04 2026 by rpki-client