Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
File: MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json)
Hash identifier: lCNH9d5bjrMzhmUSpuekEaRAMVREXvlFO7n/3gzBx8s=
Subject key identifier: 83:5A:3E:EB:52:61:3E:01:82:EA:AB:2B:2E:49:DA:27:39:42:3F:5B
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial: 019D416804E1CB36A1B3517A8ADDB1EBAF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
Manifest number: 0704
Signing time: Tue 31 Mar 2026 01:00:28 +0000
Manifest this update: Tue 31 Mar 2026 01:00:28 +0000
Manifest next update: Wed 01 Apr 2026 01:00:28 +0000
Files and hashes: 1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: VudXy8iKHjwISxfZz1BWOQfce/4xux925NldO6z4AOw=)
2: fpLIbJHijuX4TKgTAyoHnBJ9FNk.roa (hash: gQJgoj/tjnQ3iGvuvLFVs4DZHdJmjGfyDkoOcNA2s6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:41:68:04:e1:cb:36:a1:b3:51:7a:8a:dd:b1:eb:af:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Validity
Not Before: Mar 31 01:00:28 2026 GMT
Not After : Apr 1 01:00:28 2026 GMT
Subject: CN=835a3eeb52613e0182eaab2b2e49da2739423f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:41:07:65:ed:3c:e7:58:49:81:34:a8:4d:
25:a3:7a:5a:3a:ee:71:04:3b:f3:eb:44:58:93:9d:
f5:f2:7a:d6:cb:09:1c:a2:b6:94:53:2b:bc:b3:a0:
4f:02:58:c5:36:ea:c5:99:01:a0:11:c8:26:84:62:
50:cd:4a:d3:18:b0:0e:32:ff:c3:72:97:31:3b:c8:
7d:3d:3e:90:49:90:ff:f2:94:24:4e:84:66:9b:30:
81:43:b5:35:4b:7e:27:53:aa:66:41:e8:8b:cb:c6:
99:a3:11:8c:c0:4c:a5:53:94:85:51:c7:62:29:d5:
56:a4:18:03:3a:13:16:68:12:d3:af:c0:9b:20:4a:
e7:54:10:19:d7:50:db:d2:d6:07:a2:6f:e9:72:39:
16:5d:8e:60:97:ee:a9:eb:55:06:f9:a3:0c:4e:0b:
e4:15:dd:fe:2f:c2:00:f3:62:29:a4:f5:52:aa:9a:
42:5e:45:8e:93:51:50:fd:6b:66:85:6c:32:f4:6c:
00:6a:74:11:0c:ad:f0:64:71:78:12:16:8a:e6:0f:
6c:09:9d:5b:89:b3:46:f0:16:7a:c3:59:73:73:c8:
22:66:2c:6e:7d:b0:f1:99:1c:d2:c9:26:35:f1:4c:
1a:6b:d5:82:71:43:30:09:0f:d1:81:d9:07:cd:f2:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5A:3E:EB:52:61:3E:01:82:EA:AB:2B:2E:49:DA:27:39:42:3F:5B
X509v3 Authority Key Identifier:
keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b6:e2:ae:c1:d9:6c:ff:b9:f8:d2:5b:9e:1b:8d:b6:28:cf:
ea:a7:9e:b8:33:9c:ab:c7:42:da:b9:44:8b:15:22:ed:37:cb:
13:89:2d:e4:56:fc:23:44:7a:d0:96:0b:e6:90:70:0b:6b:96:
ce:8c:f2:50:f3:c0:51:00:39:80:48:82:69:b4:01:52:c0:dd:
ba:4c:51:f4:0a:c2:e7:df:ef:00:0e:be:35:b5:1f:d7:48:ee:
c1:fa:08:d1:4c:ac:91:2c:ac:6d:d5:ff:a0:46:16:61:94:7d:
6f:42:b8:c0:72:7b:5f:f5:69:ef:4f:fe:f9:e2:f4:b5:b7:0a:
60:a5:f9:5c:00:2f:7a:de:3a:67:e8:3c:5e:44:23:e5:d0:f9:
1e:ed:f2:5c:37:31:63:0c:0d:8f:88:19:cb:b3:f4:6a:ef:6d:
27:1c:41:4b:e4:b5:cc:e3:ad:f7:0e:94:60:f7:de:63:e9:2f:
2e:ba:3c:1a:77:a2:01:b8:49:0c:3c:db:c9:f4:dd:bd:73:10:
b4:10:8c:76:93:1e:a5:69:ba:d6:46:9b:04:3c:ce:b1:1a:70:
f0:63:d3:96:ef:b5:fd:c5:4a:8e:af:a6:c8:40:e6:66:b6:5e:
10:87:ba:80:a1:0c:b1:a3:c6:01:7f:94:d0:65:c9:69:dd:d3:
41:67:03:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:15:39 2026 by rpki-client