Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
File: mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json)
Hash identifier: ukRl1Gc3tTCpXQtc7FMN8nnXdinbZ1MV6IDmeDPGnNI=
Subject key identifier: 00:9B:61:08:8A:FC:63:ED:AD:5C:6B:E5:E9:19:1A:7D:C1:C5:0D:D7
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial: 019D38666A0F9CF9E158434109CA76B19540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:02:09 +0000
Manifest this update: Sun 29 Mar 2026 07:02:09 +0000
Manifest next update: Mon 30 Mar 2026 07:02:09 +0000
Files and hashes: 1: ddjD16rm4JILTdAjj-sSBzq-X1k.roa (hash: L1W0Os3qTK0wbx8L6WCdIflXsRPDUvdKdtqZMMyv5RY=)
2: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: ZtG+CMXgGAVM7B5iRckQlAJaCrIUxEmscIzJ2CFOyqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6a:0f:9c:f9:e1:58:43:41:09:ca:76:b1:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Validity
Not Before: Mar 29 07:02:09 2026 GMT
Not After : Mar 30 07:02:09 2026 GMT
Subject: CN=009b61088afc63edad5c6be5e9191a7dc1c50dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:ed:20:31:50:f6:64:07:89:09:92:bb:06:
f4:4a:a9:7f:d8:be:50:e6:4f:ed:cf:f8:c8:be:1f:
ad:bc:a5:53:16:17:30:ae:3e:da:b4:8f:d0:cf:21:
1d:38:b1:14:bf:c5:16:53:c9:9b:e7:bb:d9:50:c5:
97:84:18:f4:33:f0:ea:61:2b:05:de:0b:8a:5d:21:
9a:06:e7:c5:11:71:db:66:35:90:8d:84:81:0c:e9:
05:25:36:cf:15:57:ac:34:e5:cc:72:49:fd:c3:3f:
d8:2a:a0:f0:cd:e4:c7:99:bf:77:af:0c:7e:36:e0:
d1:61:ae:a4:f4:d0:65:05:68:a9:d2:83:7c:a0:44:
b2:36:b1:ba:ad:12:07:1e:95:ad:39:0d:bc:94:38:
fb:3f:fe:f0:7b:38:d4:d0:8d:e8:77:16:4d:58:7a:
a6:b5:f8:3a:e3:65:37:b3:f1:8f:0d:cf:4b:c1:53:
fb:3c:b9:95:ca:73:b0:fb:5c:4b:2a:0a:38:5a:b7:
d6:3f:91:88:8c:84:58:a2:1c:3f:e6:4c:c0:d1:af:
f4:ae:92:06:c9:04:cb:3b:64:26:11:63:bc:a3:ab:
73:c5:a6:87:23:06:2b:49:78:da:1a:57:fd:f1:b3:
ba:35:3f:13:29:ee:cb:d7:fe:95:36:bc:6a:b6:07:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9B:61:08:8A:FC:63:ED:AD:5C:6B:E5:E9:19:1A:7D:C1:C5:0D:D7
X509v3 Authority Key Identifier:
keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c8:ed:35:c1:27:5e:1e:51:e2:e9:ee:af:52:0a:67:54:c1:
7a:da:6d:df:b2:9c:1d:3b:9e:ee:20:61:22:1e:89:fa:ad:f9:
30:35:b6:21:f6:73:59:14:3c:fd:78:9f:a1:ff:b7:8b:15:71:
20:02:6c:d9:c9:8b:4e:27:43:17:3e:d8:2b:2e:8b:1c:9f:49:
a4:d7:37:cb:e2:8b:80:2c:2e:7c:b1:8f:77:e1:e8:04:43:ea:
4b:8c:84:20:27:6d:4f:a7:75:f1:54:cd:21:7b:6c:ff:1f:e6:
3a:42:8e:e2:00:d8:06:21:5f:99:94:58:93:25:92:97:27:ec:
d9:96:25:c8:7e:12:33:84:27:7b:a3:b0:b3:ab:1a:48:4a:76:
ae:3b:dd:68:23:66:1d:9c:69:d4:c7:aa:d1:46:8e:2a:9d:bf:
e6:74:25:f3:3e:02:f6:5b:43:a9:f9:1d:de:f1:00:e8:65:55:
45:a0:88:28:db:35:06:f2:f0:7c:12:f3:28:5a:36:a3:39:88:
79:a4:d1:2b:4c:de:a8:69:03:fa:c2:a0:d0:08:42:2f:69:8d:
79:d0:8d:a5:c0:d0:19:35:2f:fe:6d:54:21:c4:60:2b:4f:d1:
94:a9:82:17:3a:16:03:5c:6d:eb:2e:95:ec:f5:73:6f:e1:86:
1f:f5:b7:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZmoPnPnhWENBCcp2sZVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmViYmJjYmUxYmY2MzQ2ZWQ0NzZiODNjN2UxM2E3ODQ0
MTdhY2QwHhcNMjYwMzI5MDcwMjA5WhcNMjYwMzMwMDcwMjA5WjAzMTEwLwYDVQQD
EygwMDliNjEwODhhZmM2M2VkYWQ1YzZiZTVlOTE5MWE3ZGMxYzUwZGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBDtIDFQ9mQHiQmSuwb0Sql/2L5Q
5k/tz/jIvh+tvKVTFhcwrj7atI/QzyEdOLEUv8UWU8mb57vZUMWXhBj0M/DqYSsF
3guKXSGaBufFEXHbZjWQjYSBDOkFJTbPFVesNOXMckn9wz/YKqDwzeTHmb93rwx+
NuDRYa6k9NBlBWip0oN8oESyNrG6rRIHHpWtOQ28lDj7P/7wezjU0I3odxZNWHqm
tfg642U3s/GPDc9LwVP7PLmVynOw+1xLKgo4WrfWP5GIjIRYohw/5kzA0a/0rpIG
yQTLO2QmEWO8o6tzxaaHIwYrSXjaGlf98bO6NT8TKe7L1/6VNrxqtgeLywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACbYQiK/GPtrVxr5ekZGn3BxQ3XMB8GA1UdIwQY
MBaAFJouu7y+G/Y0btR2uDx+E6eEQXrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEt
NDRlMjE5YTllOTZlLzEvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEtNDRlMjE5YTllOTZl
LzEvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMjtNcEn
Xh5R4unur1IKZ1TBetpt37KcHTue7iBhIh6J+q35MDW2IfZzWRQ8/Xifof+3ixVx
IAJs2cmLTidDFz7YKy6LHJ9JpNc3y+KLgCwufLGPd+HoBEPqS4yEICdtT6d18VTN
IXts/x/mOkKO4gDYBiFfmZRYkyWSlyfs2ZYlyH4SM4Qne6Ows6saSEp2rjvdaCNm
HZxp1Meq0UaOKp2/5nQl8z4C9ltDqfkd3vEA6GVVRaCIKNs1BvLwfBLzKFo2ozmI
eaTRK0zeqGkD+sKg0AhCL2mNedCNpcDQGTUv/m1UIcRgK0/RlKmCFzoWA1xt6y6V
7PVzb+GGH/W3dA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:33 2026 by rpki-client