Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
File: mNZvua2ttqkFe_YKqj_1LGZUBBg.mft (raw, json)
Hash identifier: Yg2XhwtiC9MvYxTvyezZQU7YyFThjlis2wiGEwIJNLA=
Subject key identifier: 7C:39:10:EF:25:3B:C8:91:A0:57:58:3B:69:8C:2B:74:6B:39:E5:2B
Authority key identifier: 98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
Certificate issuer: /CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Certificate serial: 019D3865E5B9E3572342A3DE22DACFA9FAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
Manifest number: 0DE8
Signing time: Sun 29 Mar 2026 07:01:34 +0000
Manifest this update: Sun 29 Mar 2026 07:01:34 +0000
Manifest next update: Mon 30 Mar 2026 07:01:34 +0000
Files and hashes: 1: mNZvua2ttqkFe_YKqj_1LGZUBBg.crl (hash: zN+WUt967wzeLnzUDn5SZKpB8CWlf2Q3hgYSFlJQVMs=)
2: yl0eDZjur4I6T_pOkjcamXDbAOU.roa (hash: 03g8niCNoaSntJSjiSHpf+bPzeoFe8eHF/PalLWvuyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e5:b9:e3:57:23:42:a3:de:22:da:cf:a9:fa:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Validity
Not Before: Mar 29 07:01:34 2026 GMT
Not After : Mar 30 07:01:34 2026 GMT
Subject: CN=7c3910ef253bc891a057583b698c2b746b39e52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:bc:eb:45:e9:1b:20:4f:42:ef:35:df:92:
20:44:1b:f2:d6:01:af:b2:cc:10:c8:9d:47:11:76:
fb:45:09:05:38:06:65:6c:70:9d:d4:7f:3f:8e:8c:
7e:58:bd:b8:ff:5d:cf:5c:1e:e7:8b:60:0e:18:44:
ef:1c:31:24:c4:9c:e4:d6:42:a8:e4:1f:4b:7f:d0:
61:47:71:24:d3:38:6f:ea:90:0a:41:30:f9:26:1d:
95:86:ae:0d:10:d8:52:d8:55:5f:5e:de:89:f6:1d:
01:71:46:32:23:a9:79:ac:c9:fa:05:ca:f7:d9:aa:
73:9c:3f:78:45:7c:23:79:43:10:4c:0d:9b:fc:b2:
24:cb:af:d3:56:d0:d4:b4:79:1a:9b:ca:b5:8d:e6:
b9:c0:b5:d9:86:1d:5f:0b:7e:97:50:4d:3a:13:d1:
27:32:43:e4:d2:fa:37:c0:8c:cb:55:c0:18:56:bf:
3f:b4:25:e0:7c:da:4d:89:19:4b:08:0a:64:f2:00:
8f:2c:51:18:a9:1b:4b:56:82:f6:c3:d9:9a:37:8d:
42:5e:f4:1f:7f:c5:e0:cc:cd:e9:04:26:2d:b8:70:
b5:6c:24:43:de:40:c5:ff:b0:dc:f6:2d:1f:a1:b8:
c9:7e:99:6f:25:0d:ea:8a:bb:5a:86:72:95:c0:96:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:39:10:EF:25:3B:C8:91:A0:57:58:3B:69:8C:2B:74:6B:39:E5:2B
X509v3 Authority Key Identifier:
keyid:98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0a:8e:93:31:ad:32:77:5f:79:b6:2d:75:88:e6:cf:fd:7e:
78:2a:21:49:a5:0d:0a:15:df:cb:f4:c1:8c:84:84:c8:63:88:
d6:5c:86:1f:16:f4:69:80:38:e3:7a:9a:7a:8c:8c:54:e2:1f:
25:eb:47:0a:3c:95:70:2e:11:0a:07:0f:ff:71:62:2b:ab:c1:
ce:b7:06:6c:c2:ae:37:ff:dd:dd:e4:42:c5:29:f1:c8:50:11:
41:7f:e3:4e:aa:46:23:d3:72:dc:e1:6e:93:78:e1:45:f0:b7:
76:2b:b0:6a:de:0f:ad:cb:1b:d1:42:db:30:a7:13:27:9c:f0:
01:2d:19:29:90:d3:5a:c4:1e:81:c7:66:4f:bd:dc:23:51:88:
8d:3b:5f:6a:1a:fb:a6:60:04:d8:f0:37:70:62:f2:b2:60:52:
49:0a:07:a5:eb:80:31:6b:5e:77:9c:f7:e9:b3:d1:37:88:ca:
8d:ca:2d:56:22:b2:a0:67:6b:97:f7:97:ca:18:4f:19:5b:89:
9b:d2:a7:1a:3e:e7:ee:7e:a3:ff:c2:1d:6c:2b:f6:89:04:17:
6b:fb:89:3d:d1:fb:8d:4e:0f:51:c0:58:4a:b8:3e:0b:68:dd:
e7:92:52:fc:b7:75:8c:aa:40:ba:9d:6a:2f:5a:7e:27:f5:2d:
88:9a:7c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:56 2026 by rpki-client