Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json)
Hash identifier: OJio1icmijFnguKDQzA/WzzJiVzJn/s3hj/1a6uETb0=
Subject key identifier: A0:A5:3E:41:D0:FD:0D:E7:E8:A6:3D:E3:C3:29:26:27:FD:D2:BF:E3
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 019D37BFF2A680FFB6857B239AC69AE14122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
Manifest number: 1153
Signing time: Sun 29 Mar 2026 04:00:19 +0000
Manifest this update: Sun 29 Mar 2026 04:00:19 +0000
Manifest next update: Mon 30 Mar 2026 04:00:19 +0000
Files and hashes: 1: Z-M8lVgS2gwgAHLuyet33qHzwgM.roa (hash: fWLoTiwsPxZRXJ5Vm/x03hJnQBlEMfiyIhGQEUF0Fxs=)
2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: nPNpLLctQ9Cs4/f99Go8EM++uTAi194+682tUZNNfWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f2:a6:80:ff:b6:85:7b:23:9a:c6:9a:e1:41:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Mar 29 04:00:19 2026 GMT
Not After : Mar 30 04:00:19 2026 GMT
Subject: CN=a0a53e41d0fd0de7e8a63de3c3292627fdd2bfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:5a:10:52:c1:54:80:bc:b3:cb:1e:b3:05:
07:c8:99:7f:2a:02:10:70:3f:ca:98:66:e2:0c:2c:
57:8c:73:f1:41:26:f7:6e:d0:54:99:99:95:6e:85:
b8:5d:9b:69:d4:ab:fa:38:9f:4f:6e:9c:b5:b8:a4:
97:14:8a:30:6b:ce:04:9f:cd:c4:17:e2:f8:d2:08:
b1:59:bc:0a:ae:5c:bb:0e:63:cd:d3:f4:fa:0b:ea:
fa:19:31:dc:7b:57:75:b9:a3:b4:b9:59:0b:68:1c:
05:94:6e:0b:c3:b0:6c:02:ab:08:81:14:43:ce:89:
28:1f:1b:27:f4:e5:28:1c:e9:b7:a7:28:75:04:a2:
6d:eb:c4:05:57:a3:7c:ba:88:0c:f7:a0:c1:0c:50:
8a:7a:34:0e:92:02:66:24:5f:f8:0e:43:e6:b8:3f:
a9:f4:a5:1e:a9:88:be:58:c8:f5:93:4f:37:2b:13:
45:07:35:54:27:15:b5:45:42:61:cc:b1:2a:45:9e:
25:43:13:67:eb:02:31:ea:db:b6:94:9f:3f:f3:aa:
0e:72:4f:fa:2f:14:14:20:2c:d2:8f:e9:54:73:a6:
88:14:c8:c3:54:3d:39:1c:41:11:4d:5e:da:77:a2:
53:47:44:b8:6a:04:a0:96:8c:b5:d9:f3:00:2b:fd:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A5:3E:41:D0:FD:0D:E7:E8:A6:3D:E3:C3:29:26:27:FD:D2:BF:E3
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:38:8c:ca:25:6b:b7:16:25:cc:aa:32:1f:00:a1:b9:71:7c:
4f:56:1b:72:c4:28:03:90:f0:17:ac:69:fc:3b:76:ff:95:2b:
5a:46:80:ea:46:a1:3d:ea:0f:53:22:d7:d8:12:87:ac:4b:07:
d8:84:4e:d6:8c:4d:31:79:ad:ff:5e:ab:fb:4d:a6:3d:25:ba:
5a:c2:20:7b:97:e3:a1:ce:7b:98:f5:c1:cf:42:51:cb:c6:00:
03:76:55:22:5b:f8:1a:0e:78:03:6b:e4:00:5b:dd:ba:75:46:
a4:70:c7:79:08:be:53:53:bf:53:69:5a:98:8c:8a:66:f2:52:
ae:d7:be:2c:96:5b:1f:0b:b1:38:d0:8a:21:ca:26:97:a0:6e:
fd:92:9d:86:e4:ab:2b:2b:49:0d:2a:f1:54:55:97:2e:62:40:
c2:9a:6d:57:8f:72:f0:67:61:20:46:b6:cb:0f:15:1d:a9:81:
c4:06:66:4f:dc:fa:e0:27:24:64:f4:70:5e:65:c1:ce:74:2d:
5b:de:70:e5:68:51:0a:25:93:d0:93:dc:d6:13:86:98:86:2b:
6b:18:77:ec:82:d4:03:ae:36:4c:2c:f2:cd:4f:56:73:30:5c:
61:75:dd:c0:bf:1a:d0:53:b2:ff:7b:1c:42:af:11:c3:b7:10:
ea:57:05:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:03 2026 by rpki-client