Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
File: m1iV5_am1KupyWH3E7LnlxXwIfA.mft (raw, json)
Hash identifier: h3Ed3iRtOHK2Jlh2oczJNAnkT3NRjrIkPBDrzZ0DJzQ=
Subject key identifier: 85:85:40:DF:A9:39:7A:58:F2:D4:7A:37:8C:F6:B6:07:4B:24:F2:76
Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Certificate issuer: /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Certificate serial: 019D3866A036F24F5E20AF5FEC01E3351ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:02:22 +0000
Manifest this update: Sun 29 Mar 2026 07:02:22 +0000
Manifest next update: Mon 30 Mar 2026 07:02:22 +0000
Files and hashes: 1: 6-UoC7qjsZof7IzKc6tiG0igP8U.roa (hash: MgBRI8BnXWIYwjh0iNOR+ruSjwdNX8aCAY7jF113WDY=)
2: m1iV5_am1KupyWH3E7LnlxXwIfA.crl (hash: SobKRLARu60iSqIvcID8Xm4fFpb2qvgLon24PGWI9sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:a0:36:f2:4f:5e:20:af:5f:ec:01:e3:35:1e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Validity
Not Before: Mar 29 07:02:22 2026 GMT
Not After : Mar 30 07:02:22 2026 GMT
Subject: CN=858540dfa9397a58f2d47a378cf6b6074b24f276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:72:28:f9:db:79:8e:a7:3b:3c:e8:a5:20:
b0:66:d7:0d:e7:7c:d2:bb:7b:21:4b:c0:4d:3e:c6:
7a:72:1c:f1:e0:81:e6:e5:f2:58:99:f7:77:55:2b:
88:1f:41:c1:47:12:7f:4c:47:31:01:7a:fe:c6:f2:
52:3c:23:a6:03:db:a7:95:bd:f9:82:cc:07:f0:bb:
d7:54:a5:b6:fe:5e:1e:3e:fd:f7:1f:19:1d:d9:c3:
27:d6:68:b6:45:59:96:c6:2a:32:d3:3e:96:26:ce:
33:21:d2:de:bc:cc:ba:0f:e2:d6:95:1d:cb:23:5a:
29:cb:5c:46:87:7a:88:d8:8f:a5:58:56:9a:34:82:
23:3b:ce:db:e0:c1:7a:30:05:a4:e9:53:c4:40:cf:
62:20:90:34:28:db:0a:45:13:e9:56:a9:58:4d:f6:
cb:89:b5:1e:7a:9a:d7:e8:ff:50:90:e9:36:f3:01:
91:3e:3e:26:1c:ed:ac:fe:e4:d1:2f:83:13:74:9b:
2e:08:b7:95:06:62:42:20:f8:48:6c:84:b6:58:fb:
43:94:e0:76:01:72:df:85:17:29:aa:a3:f4:0a:43:
82:14:5d:46:d2:61:cb:73:14:33:a8:c8:ab:f4:78:
60:71:d7:23:a8:03:ed:b4:05:bc:f5:b1:b5:8c:50:
04:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:85:40:DF:A9:39:7A:58:F2:D4:7A:37:8C:F6:B6:07:4B:24:F2:76
X509v3 Authority Key Identifier:
keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b4:9f:0f:d1:e5:1b:02:66:2e:ef:aa:9a:d5:90:bb:fe:53:
39:b0:2b:84:3f:4f:20:2a:80:27:d4:58:bf:20:94:ae:fa:06:
99:29:01:75:73:0e:1f:b9:ea:c2:db:03:c3:bd:77:9a:49:c7:
43:84:b2:c1:25:cd:55:68:12:ad:2e:df:4b:18:fb:d8:2c:a0:
62:8f:81:97:8d:45:c7:51:42:e6:be:70:6c:75:bd:3e:41:b4:
31:46:01:de:01:cf:69:b5:7c:31:63:b5:4f:49:fe:16:54:a6:
55:e3:e7:6e:47:8e:e3:52:05:88:2e:c9:1f:9b:75:c6:fe:2a:
66:06:f7:3d:d4:2a:12:e5:4c:0d:25:61:ef:f1:1c:03:31:1e:
e1:3e:ff:1a:aa:79:1d:65:fd:95:76:83:13:e5:61:63:4d:49:
31:f3:b9:3d:1f:00:d3:17:69:d1:22:58:68:91:af:d6:46:b4:
fc:ff:bb:d5:91:88:20:0e:09:f1:8e:2a:97:7a:5e:a3:96:88:
0e:da:55:2c:26:aa:10:3c:c7:f5:c3:5b:be:21:44:35:1e:c7:
a5:2f:0a:72:f9:87:d3:20:c5:cc:39:47:3e:f2:ad:bb:a4:21:
3b:45:40:e7:3e:76:4b:f4:56:af:a6:6f:09:0d:53:93:3e:21:
39:90:33:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZqA28k9eIK9f7AHjNR7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTg5NWU3ZjZhNmQ0YWJhOWM5NjFmNzEzYjJlNzk3MTVm
MDIxZjAwHhcNMjYwMzI5MDcwMjIyWhcNMjYwMzMwMDcwMjIyWjAzMTEwLwYDVQQD
Eyg4NTg1NDBkZmE5Mzk3YTU4ZjJkNDdhMzc4Y2Y2YjYwNzRiMjRmMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqRyKPnbeY6nOzzopSCwZtcN53zS
u3shS8BNPsZ6chzx4IHm5fJYmfd3VSuIH0HBRxJ/TEcxAXr+xvJSPCOmA9unlb35
gswH8LvXVKW2/l4ePv33Hxkd2cMn1mi2RVmWxioy0z6WJs4zIdLevMy6D+LWlR3L
I1opy1xGh3qI2I+lWFaaNIIjO87b4MF6MAWk6VPEQM9iIJA0KNsKRRPpVqlYTfbL
ibUeeprX6P9QkOk28wGRPj4mHO2s/uTRL4MTdJsuCLeVBmJCIPhIbIS2WPtDlOB2
AXLfhRcpqqP0CkOCFF1G0mHLcxQzqMir9HhgcdcjqAPttAW89bG1jFAEYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWFQN+pOXpY8tR6N4z2tgdLJPJ2MB8GA1UdIwQY
MBaAFJtYlef2ptSrqclh9xOy55cV8CHwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzRiODItYmNmYi00NDVjLWJkNDIt
ZmMyYTk3YjdkNTNlLzEvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMzRiODItYmNmYi00NDVjLWJkNDItZmMyYTk3YjdkNTNl
LzEvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrSfD9Hl
GwJmLu+qmtWQu/5TObArhD9PICqAJ9RYvyCUrvoGmSkBdXMOH7nqwtsDw713mknH
Q4SywSXNVWgSrS7fSxj72CygYo+Bl41Fx1FC5r5wbHW9PkG0MUYB3gHPabV8MWO1
T0n+FlSmVePnbkeO41IFiC7JH5t1xv4qZgb3PdQqEuVMDSVh7/EcAzEe4T7/Gqp5
HWX9lXaDE+VhY01JMfO5PR8A0xdp0SJYaJGv1ka0/P+71ZGIIA4J8Y4ql3peo5aI
DtpVLCaqEDzH9cNbviFENR7HpS8KcvmH0yDFzDlHPvKtu6QhO0VA5z52S/RWr6Zv
CQ1Tkz4hOZAzdA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:13 2026 by rpki-client