Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
File: mf5n9L9N0mrjFbMae0cs5NXBrmo.mft (raw, json)
Hash identifier: FGOTVfG6EKWC9xIc5Rzs+rdKpv+WgFkT+NJOCXzQofo=
Subject key identifier: 73:A2:76:C2:6F:22:4C:93:AA:19:6B:4C:AF:0E:84:D1:BE:5B:4D:34
Authority key identifier: 99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
Certificate issuer: /CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Certificate serial: 019D3789930E3DE3E2632C39D11C71D446D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: eMpcZEpOg2N0GNjlI3sO9BmaZ6A.roa (hash: j9M/fnlNW/6tDg+Ea3qW22DPN5/BiegIfG702h57st4=)
2: mf5n9L9N0mrjFbMae0cs5NXBrmo.crl (hash: XSXbd3vVP2jnJO2XGENMVybWq7I69QG9DWiBH5J/mX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:93:0e:3d:e3:e2:63:2c:39:d1:1c:71:d4:46:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=73a276c26f224c93aa196b4caf0e84d1be5b4d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:20:74:f8:3f:77:6b:28:df:27:76:fd:d1:
57:f9:49:72:b9:34:8c:8c:fd:d5:12:8f:5d:b1:90:
61:7b:2b:d8:81:6e:1b:26:79:e2:97:53:fe:34:17:
24:95:ac:b4:f5:1a:12:14:df:38:bf:da:32:21:82:
22:c7:74:1e:89:57:fc:b0:43:5c:5b:e9:82:cf:94:
20:4c:3b:8a:c0:32:6e:5b:51:73:24:47:bd:31:ff:
5d:c7:35:48:7b:24:91:75:69:bd:ec:8b:28:c0:d7:
b4:f7:db:ea:1c:f3:2a:1b:5e:8a:df:8b:00:d2:23:
c6:bd:72:d3:04:81:84:43:d3:d3:dc:f2:a6:38:85:
9a:9c:5b:9a:76:69:69:2c:cd:f0:57:ad:8c:56:ed:
a5:7f:9d:d6:dc:74:f7:ba:c0:56:90:e9:12:0a:34:
ec:28:df:c0:82:95:a6:b2:83:c1:95:3f:68:ed:5d:
97:04:e6:eb:59:93:e9:79:60:18:8f:5a:38:87:09:
37:3a:32:6d:d8:8b:87:e2:13:c4:6a:c8:94:d5:70:
71:3d:b9:47:bd:3e:2b:56:96:dc:af:c7:7f:3a:0a:
48:dd:32:5a:b6:06:5a:ef:e5:35:8d:b3:d1:e8:5d:
36:e1:53:4d:ef:30:fa:81:62:dc:2d:e3:57:b3:13:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A2:76:C2:6F:22:4C:93:AA:19:6B:4C:AF:0E:84:D1:BE:5B:4D:34
X509v3 Authority Key Identifier:
keyid:99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b1:98:e7:36:91:82:1e:04:b2:8c:16:6d:f2:17:6a:c4:60:
05:39:66:92:9d:0c:ce:0b:45:29:e8:2b:75:5a:ec:6a:ad:d1:
be:05:78:15:8e:97:c5:53:6b:ab:7b:61:bd:94:39:b5:c8:fd:
0c:71:9c:60:25:81:f0:a0:db:45:dc:3e:6b:1f:fd:21:69:66:
c7:7f:1a:94:a3:4e:d6:8d:e2:8a:ca:de:1a:cd:1b:3e:55:68:
78:85:3e:c6:9c:ed:92:c7:44:ef:66:3b:f0:ad:97:01:98:c3:
cf:c8:10:93:3c:0d:50:84:af:9c:d1:b8:8d:20:68:50:ee:1a:
9d:9e:4e:b5:65:94:77:34:fd:0c:3e:51:46:4b:8d:1d:c4:a0:
b4:38:a4:18:e9:3f:a6:03:55:33:8e:87:ee:47:c6:75:22:16:
94:6d:56:19:a7:03:b4:71:b5:23:63:1b:56:c7:54:fb:de:66:
5b:c5:9a:21:88:43:ef:b9:a1:77:80:0f:c2:a6:9f:95:6c:54:
86:11:b8:ed:4d:72:06:bb:8d:4f:82:1a:71:2d:11:01:c4:fb:
f0:94:2b:0c:94:e1:b9:3d:b8:b2:b4:28:b1:88:5b:b2:72:e2:
a8:75:3f:d4:06:2a:8b:22:b3:1f:41:51:77:68:25:e9:62:38:
73:2f:20:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:58 2026 by rpki-client