Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
File: mWpflIQ1rLESpm4lY3kiY-yLZX4.mft (raw, json)
Hash identifier: ysCYvZqNw35CRU03713L3Qajua4pCYfssKNNoLUjGO8=
Subject key identifier: 56:3B:87:A4:B5:4F:E1:2B:DA:DE:D3:52:97:B0:E8:54:3B:42:56:A3
Authority key identifier: 99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E
Certificate issuer: /CN=996a5f948435acb112a66e2563792263ec8b657e
Certificate serial: 019D38D2A6DCB2AC21A0F97BD0A6528790B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:00:22 +0000
Manifest this update: Sun 29 Mar 2026 09:00:22 +0000
Manifest next update: Mon 30 Mar 2026 09:00:22 +0000
Files and hashes: 1: mWpflIQ1rLESpm4lY3kiY-yLZX4.crl (hash: P8ZRKBrb6Lj6OuibpZhpfhwEmnbiScR/h8XnQSCu8K8=)
2: ncf5noc6Z3jN3uxBgN10gB_Iu9Y.roa (hash: hkuknMaOvCmMOe16dyHeXBmenOlWRRHOVtQ/LOPxqys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a6:dc:b2:ac:21:a0:f9:7b:d0:a6:52:87:90:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996a5f948435acb112a66e2563792263ec8b657e
Validity
Not Before: Mar 29 09:00:22 2026 GMT
Not After : Mar 30 09:00:22 2026 GMT
Subject: CN=563b87a4b54fe12bdaded35297b0e8543b4256a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:1c:1e:62:5e:2b:0b:1d:21:9f:94:24:26:
49:39:fb:7e:9d:25:f3:54:d4:77:61:14:67:4b:b2:
f7:63:b4:fb:62:e3:e5:70:dc:76:8d:ba:d5:2c:c8:
46:eb:c9:af:84:5b:ce:d0:f2:f0:3c:84:a9:63:35:
ee:62:d9:05:ad:06:b7:e8:10:45:b9:fb:88:79:4a:
55:ec:98:e0:e0:2b:88:13:64:af:af:f3:ef:bc:c2:
a7:b1:1e:e6:e0:e7:b1:15:b7:42:d4:34:e9:a2:30:
c2:41:dd:58:f6:c0:f0:b1:10:2c:c8:cc:1e:33:67:
1a:df:03:9d:6d:5d:07:fc:f6:88:ae:54:25:fd:0f:
0c:d0:36:26:d8:ab:70:80:69:44:a1:33:9a:69:42:
d8:33:c4:0a:7a:ea:7a:93:e7:85:84:98:40:1c:cc:
a0:f8:fc:d4:17:cb:e1:15:0b:aa:51:d3:22:ee:87:
c5:ca:35:91:ba:df:95:a9:30:9e:3a:68:f9:7f:76:
64:fa:7a:7a:1f:b0:33:9c:2f:ba:2c:69:cf:79:8f:
fd:34:74:b1:70:79:06:76:3b:5a:58:34:a8:94:37:
78:78:37:df:f3:e7:4e:72:9e:32:be:d8:d8:41:cc:
97:ab:44:e2:20:30:6a:52:b0:a7:55:60:b7:e4:c7:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3B:87:A4:B5:4F:E1:2B:DA:DE:D3:52:97:B0:E8:54:3B:42:56:A3
X509v3 Authority Key Identifier:
keyid:99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1e:b8:be:ce:d4:10:2d:8a:8e:eb:84:d1:e6:5c:e7:51:36:
6c:19:32:ab:d0:50:44:1c:9b:ff:8e:86:50:f8:e5:a2:59:c0:
25:ed:53:19:93:99:cc:ce:0f:d0:48:46:46:31:94:97:d8:ba:
2e:f4:af:31:6b:05:f2:79:d7:23:91:7f:65:19:97:0e:d1:5c:
d7:39:31:5c:ba:ab:64:67:58:d7:5d:d3:95:1a:13:d2:99:af:
41:dd:e7:e8:99:15:19:1c:6f:e1:8c:47:54:7a:d4:1c:bb:de:
23:2c:4f:27:1e:a5:49:3e:15:e7:25:b9:4b:b6:0c:cf:74:e4:
36:45:c7:0a:d6:b1:26:26:9e:70:50:6b:5d:bf:6e:4f:a2:c9:
6b:3d:de:36:f1:32:e7:03:c2:ea:5e:bb:82:25:42:4f:65:3e:
ea:b1:7d:fe:70:e5:1c:cb:18:34:d5:52:8e:f3:78:45:d9:19:
69:94:9c:fc:f3:2a:0f:35:85:71:88:2b:e8:87:0c:c2:13:6f:
8d:3e:ca:21:80:23:4f:d8:f3:be:78:1b:89:77:00:fb:9a:62:
a2:5c:40:50:8e:6a:a6:84:e3:5e:11:92:35:99:d6:75:bd:41:
3a:c7:49:d5:88:08:3f:f2:60:8d:e9:c3:50:a3:de:c0:f3:fe:
83:39:e5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:10 2026 by rpki-client