Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: enTE+wB1uEoEvsf7UBk66auu3cIA5crXaiX0BFTXjDA=
Subject key identifier: 6B:36:86:FE:45:E4:BF:B9:E3:A7:85:83:8B:C9:B8:C1:2B:4C:FD:E9
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 019D38D2DDE8DE76FC02F6F2E354AF3C011D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:00:36 +0000
Manifest this update: Sun 29 Mar 2026 09:00:36 +0000
Manifest next update: Mon 30 Mar 2026 09:00:36 +0000
Files and hashes: 1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=)
2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: HgzFX9yKB0r/W/JT+1Sfp37KUM0lmUCHytIL5mZkuP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:dd:e8:de:76:fc:02:f6:f2:e3:54:af:3c:01:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Mar 29 09:00:36 2026 GMT
Not After : Mar 30 09:00:36 2026 GMT
Subject: CN=6b3686fe45e4bfb9e3a785838bc9b8c12b4cfde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:d8:1b:d6:17:6c:87:5f:98:10:c3:61:53:
58:f9:a0:21:2b:7d:02:06:34:d6:37:fb:59:cf:6a:
fa:c7:76:62:6b:00:a9:ab:76:52:15:1a:32:0a:34:
9c:af:d8:98:a9:d2:a7:81:96:8c:23:15:ab:08:05:
06:5e:f6:7f:28:65:60:70:90:73:5b:86:7e:ee:e9:
b1:91:8a:6d:37:8a:cb:30:37:12:21:14:2f:ef:00:
7a:2e:68:c0:9d:46:33:a7:79:43:68:10:02:e6:39:
aa:23:54:c9:9e:c0:9b:f2:55:e0:69:74:a6:e3:c2:
0f:76:06:67:89:2a:56:b4:8b:4d:6d:41:5a:10:b5:
52:6a:66:d2:6a:0c:71:15:13:dc:e3:94:3e:3f:a8:
d4:77:b9:e0:af:15:f3:00:54:ab:37:e9:29:c0:ab:
d8:e8:80:39:11:e9:fd:c0:10:bd:6b:19:f0:8f:72:
bd:87:d7:a5:72:65:95:ba:ac:d6:a5:6d:0f:67:b4:
a1:c2:06:69:02:ec:1a:63:7b:97:88:c6:de:10:b5:
ef:b6:60:b4:7b:2f:9e:24:cc:fe:be:72:32:2b:3d:
d1:fd:a8:c3:50:86:76:05:da:42:2e:35:d6:99:bf:
dd:34:a7:28:6f:4d:c0:7d:ad:7f:ce:08:97:04:31:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:36:86:FE:45:E4:BF:B9:E3:A7:85:83:8B:C9:B8:C1:2B:4C:FD:E9
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2c:37:45:3b:50:cc:80:4f:06:6e:58:e4:83:cc:7e:da:84:
f2:c7:b5:24:3c:98:44:8b:c5:d9:a5:4c:1d:a0:ef:fb:2b:c1:
73:17:71:3a:b9:bd:65:1c:9e:25:cd:27:71:80:ec:ab:1b:9b:
e2:9e:00:f0:a4:86:cd:5f:59:ba:53:1b:0c:0d:cc:3c:f0:92:
ad:53:59:4c:fb:18:c5:a1:aa:b9:fc:56:04:da:84:e0:54:a7:
00:4e:5e:b5:08:54:04:ba:94:57:21:ec:45:a0:1c:6d:e5:8f:
e6:1c:13:cf:5e:50:4d:2b:84:8e:c4:a7:dd:44:a4:d5:db:3c:
e2:aa:81:cf:6d:f2:b5:e0:4c:0b:b7:d5:99:aa:68:89:90:bf:
ab:b9:5d:a5:e6:2b:26:24:d9:04:a9:47:45:fb:45:fb:c1:4f:
0c:26:6c:ba:e2:15:7a:60:53:5d:20:76:00:a3:49:f7:26:d9:
04:2d:a5:02:c4:13:e5:9f:ce:bd:e9:2f:23:ed:9a:dd:f1:b6:
90:97:8d:f2:58:fa:16:ae:90:ce:aa:c0:33:14:53:31:1d:a3:
8e:1c:5d:db:11:58:34:43:2d:ec:78:83:fc:d7:2f:a0:49:78:
a8:d9:ce:06:81:5b:84:e6:8d:5f:dc:bb:f2:c4:cc:e3:2b:7e:
a7:ae:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:58 2026 by rpki-client