Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
File: fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft (raw, json)
Hash identifier: sXHrG6FsGmymMPCu42xFqI8UoUTKUtDwjgixS3qLVpk=
Subject key identifier: 1F:E9:9C:89:34:27:ED:9B:A3:D9:D5:4C:BA:DA:68:25:2C:20:C1:46
Authority key identifier: 7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7
Certificate issuer: /CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
Certificate serial: 019D37F72DF8CE0540A5C4CA6AC20B6AC5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 05:00:39 +0000
Manifest this update: Sun 29 Mar 2026 05:00:39 +0000
Manifest next update: Mon 30 Mar 2026 05:00:39 +0000
Files and hashes: 1: fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl (hash: jLA85uE6rStqwQErv6ddV1XZTrr5dLwSJjV6fFsIMrY=)
2: luDoAnv_4CXwVbPTjgicT_NDBNY.roa (hash: ywVrOJWUkBy8UWblrL/w6CJGLJjV5uY9pOZQ4I0Nv2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2d:f8:ce:05:40:a5:c4:ca:6a:c2:0b:6a:c5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
Validity
Not Before: Mar 29 05:00:39 2026 GMT
Not After : Mar 30 05:00:39 2026 GMT
Subject: CN=1fe99c893427ed9ba3d9d54cbada68252c20c146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:95:27:e5:16:47:fb:c0:9c:d8:d2:0f:3a:
83:85:3d:05:cb:37:cf:9f:61:46:06:2d:95:5f:53:
9b:be:26:2a:dd:81:a2:52:97:8a:b4:3c:67:23:12:
2b:41:c6:cc:2a:36:e1:d3:0d:6d:ea:79:e7:8c:4c:
b2:fc:38:cc:d4:bc:e0:f4:6a:81:54:7d:95:df:f3:
2d:f2:3b:ea:bd:88:b4:05:5d:ef:c6:f5:c9:81:68:
42:0b:57:6e:56:58:48:5e:5e:be:90:d8:7b:44:d7:
87:57:8d:14:08:fa:10:ae:41:7e:95:71:49:33:bf:
fd:e8:96:e6:e4:73:f5:7f:16:eb:9a:bc:68:d5:fc:
96:7c:9d:3d:2f:17:78:f5:d8:13:d2:60:b4:b5:72:
d4:33:55:55:23:44:08:81:5c:ad:2a:ca:9f:63:98:
42:4e:d4:88:5b:8e:c3:6e:e0:19:f1:00:79:07:7e:
af:0b:4d:b0:47:09:70:71:03:37:09:cc:56:fc:cc:
d7:2d:4c:b3:99:c8:8e:a8:56:e8:d5:9c:7d:d3:4f:
aa:a1:30:1c:87:80:27:ca:26:fc:00:61:23:22:43:
c9:ae:57:61:0d:be:a3:c9:ae:c7:19:7f:34:a4:30:
ec:ce:39:31:98:32:20:16:4e:7b:95:2b:3d:1f:5b:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E9:9C:89:34:27:ED:9B:A3:D9:D5:4C:BA:DA:68:25:2C:20:C1:46
X509v3 Authority Key Identifier:
keyid:7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:26:46:96:03:38:ce:84:6f:6d:b5:5f:d6:30:51:53:db:f5:
b2:3c:88:a4:63:8b:e1:bb:80:f8:d5:18:aa:52:28:b5:2d:fd:
c9:1c:a4:fb:dc:ce:65:f7:36:05:a6:00:bc:50:17:b0:38:b3:
d4:9d:ee:ca:7f:92:b4:f0:8f:8a:c8:aa:0e:8e:fd:a8:f6:c3:
2f:7d:07:93:6d:6d:07:3a:a1:09:30:22:7d:7b:21:40:67:12:
9e:5d:b6:20:6a:0b:67:66:a8:07:e7:7e:54:b1:aa:dc:93:c9:
48:3a:41:16:25:ad:82:53:4d:d4:a8:5f:92:ed:41:24:ea:46:
f9:f6:c1:50:3e:3b:a3:f1:9c:2e:74:a2:25:47:eb:18:60:d9:
85:59:1b:c6:6a:09:f8:ba:40:53:25:df:b5:27:27:c5:af:70:
68:35:3a:25:77:e7:f3:c5:29:c9:8b:9e:74:f1:a4:27:38:3a:
40:16:a9:21:d7:e7:b4:91:dd:92:c6:92:f4:27:e1:53:e0:89:
b9:3f:86:99:9e:fb:3a:e9:46:06:b2:9b:66:a0:70:99:b4:4b:
ba:45:5f:88:60:d1:af:f6:33:bb:40:42:a3:03:f7:bb:3e:fb:
d8:42:29:b2:9d:3f:2d:27:65:be:5b:90:1d:b6:c1:6b:69:8a:
30:d2:aa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:00 2026 by rpki-client