Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File: mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier: FQRpx59Ns7on49YcQq/2wc2YI3jA3uHwg4nMi306MeY=
Subject key identifier: D8:44:97:BC:6C:C6:50:46:4E:32:57:8E:42:35:C0:CC:80:A0:DA:97
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial: 019D3977853C4B07B530F80834647B9607D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 12:00:27 +0000
Manifest this update: Sun 29 Mar 2026 12:00:27 +0000
Manifest next update: Mon 30 Mar 2026 12:00:27 +0000
Files and hashes: 1: G9j4sjTeWzLExGQLke1RPswI0EU.roa (hash: Hiz7NVerTeUMvhHieLj4YdPxQvNl9jDBd3ik+M6E8jI=)
2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: KXfvigmfr6nrgFD2ewFy63SlqwlY9luNk2agrRCWVOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:85:3c:4b:07:b5:30:f8:08:34:64:7b:96:07:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Validity
Not Before: Mar 29 12:00:27 2026 GMT
Not After : Mar 30 12:00:27 2026 GMT
Subject: CN=d84497bc6cc650464e32578e4235c0cc80a0da97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:4e:98:a0:41:5b:d9:43:c9:83:d2:57:74:
30:1d:dd:a1:88:7d:d5:ea:a1:ee:a8:dc:4d:8f:ad:
9a:6d:a8:b0:b6:45:9b:57:bf:33:1f:76:72:bd:99:
8e:6f:1e:a8:19:8e:7b:7f:08:fa:b2:d2:30:db:a7:
af:26:d0:e6:6d:2c:1f:6a:6b:a9:af:1f:63:3b:40:
79:d4:96:64:ef:b5:95:89:53:4f:db:26:60:48:e0:
16:75:15:a3:c2:d9:30:29:2c:76:75:a9:24:43:5e:
85:31:75:6f:c8:51:8e:16:73:58:4b:90:6d:b4:ad:
48:1c:55:87:ad:b6:1b:de:aa:d4:90:17:d8:30:7b:
e3:54:8c:5c:b4:7b:96:61:aa:45:79:f9:82:eb:4e:
38:5a:53:b8:c6:be:e9:d4:f0:0a:64:42:2e:9c:ea:
89:63:25:cd:1c:42:d0:c1:00:7d:8d:df:8e:42:86:
3c:14:49:fb:47:24:4a:d4:71:28:92:3b:08:83:ab:
f6:23:15:0b:70:c0:cc:d2:81:10:15:85:e2:57:43:
05:59:f8:ae:e4:f9:d1:aa:6e:db:83:89:cf:1e:09:
e7:c1:7d:63:7d:dc:f1:40:f0:c3:53:24:fd:40:85:
79:f0:b2:aa:18:ea:03:4d:72:8a:f2:b6:89:2d:53:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:44:97:BC:6C:C6:50:46:4E:32:57:8E:42:35:C0:CC:80:A0:DA:97
X509v3 Authority Key Identifier:
keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:8c:98:0d:56:51:f9:b0:e0:1f:c6:3f:6b:fb:36:e6:0d:b7:
14:9e:50:fc:d2:a1:1f:ab:55:0f:41:8f:04:0c:78:a8:e3:8d:
48:da:6d:df:f5:c9:00:a2:6d:14:eb:10:6e:ea:73:4c:3a:32:
c0:94:3c:03:0b:1b:43:ac:52:6a:1b:a9:5c:12:02:7b:d6:2e:
fd:87:b0:2f:25:32:ab:bd:e8:78:80:a3:89:23:8e:e6:f9:3d:
9b:16:10:58:74:cd:4d:72:dd:9b:55:9a:e2:32:b7:97:53:b3:
36:6d:5d:52:af:a9:0e:6c:fa:74:0b:16:e1:bd:0b:26:49:fe:
a4:7d:ae:7e:9f:2d:dd:d0:98:69:2e:20:48:6b:97:95:7b:e0:
c3:e8:75:4f:1e:ae:9b:74:9e:a1:96:cb:bf:c7:97:df:10:9f:
ac:69:87:29:b9:16:c4:3d:56:1c:67:10:a1:0e:b9:ef:19:ef:
ed:31:5f:e6:bd:a7:62:3a:5e:e2:b0:ec:04:1e:ff:22:33:d4:
1a:2c:01:f2:f6:6f:41:31:17:9b:8f:9e:b0:50:e5:f0:40:48:
66:0c:b9:49:d6:a1:b7:b0:a5:12:26:65:d4:69:2e:7c:89:95:
96:95:cc:7e:fe:07:c7:15:eb:02:63:78:36:76:88:a3:60:d4:
6a:bb:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:42 2026 by rpki-client