Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: wLwg906m5b+r2l/8k68sP+drYaYcVlX8zXzINpB4crM=
Subject key identifier: E5:A2:73:E9:95:53:03:F3:35:3D:F3:32:9C:59:60:F1:0B:FD:C9:A7
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 019D39416F10ED62A5B34C2C771BC67A572B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 11:01:22 +0000
Manifest this update: Sun 29 Mar 2026 11:01:22 +0000
Manifest next update: Mon 30 Mar 2026 11:01:22 +0000
Files and hashes: 1: 2P1GYD166nihkwScz5T2PnxUNBc.roa (hash: kpyKepByfDU6eMI6BwB2mHLR2Ws+hOGxFPcFrKdltdw=)
2: 3C-MFf4CxJMdsuA2xUMbeT95cFQ.roa (hash: l72WNVI7l9ZF7eo8/aRUo3EuE6KrjKZ6m4xqm9jc1jg=)
3: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: puvSR5FEpjz/bXaaAbNtD0uCyW3im24pEQEGdHH1k9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:6f:10:ed:62:a5:b3:4c:2c:77:1b:c6:7a:57:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Mar 29 11:01:22 2026 GMT
Not After : Mar 30 11:01:22 2026 GMT
Subject: CN=e5a273e9955303f3353df3329c5960f10bfdc9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:da:92:c2:d5:96:f7:96:a3:93:a8:d1:71:
46:14:e7:97:e1:b8:5b:ab:c7:88:19:91:aa:8b:17:
e0:bf:fa:4f:3a:a5:cc:6e:f0:c9:ff:c2:e3:30:d8:
0e:3d:c0:7a:29:dc:c3:ed:a1:4b:c9:b0:a2:7b:2e:
cb:ba:99:12:e3:02:85:92:a5:34:bb:db:53:30:03:
5e:80:72:32:e3:29:c8:a7:07:4c:11:50:3e:8f:1d:
ab:0a:3b:f3:25:0d:7b:75:24:fa:db:3c:ba:fc:66:
98:c0:36:ea:ed:3a:90:70:af:f3:85:39:32:57:41:
4d:da:f8:91:e4:2a:dc:63:4e:63:91:8e:ec:96:4c:
3b:47:9c:90:b2:6a:0a:d6:43:f6:57:2a:f4:21:1f:
8a:bf:06:d8:7d:8e:b0:df:9c:df:44:c3:51:2f:9f:
f7:d7:84:61:71:a3:35:2a:bf:0f:93:2a:77:4a:18:
5c:44:73:90:35:3e:86:1e:5a:25:02:6f:8f:f4:9f:
fa:6b:a4:d9:5b:37:5a:1f:5f:6c:5f:3e:11:48:be:
ed:84:fe:89:a3:b0:07:fe:5d:05:18:54:a6:7f:c5:
e9:73:31:63:91:05:97:4a:05:53:cb:be:d7:cc:93:
ce:39:80:11:5a:d4:17:cf:17:ed:b6:56:31:76:11:
fd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A2:73:E9:95:53:03:F3:35:3D:F3:32:9C:59:60:F1:0B:FD:C9:A7
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:db:64:ac:cf:63:63:f1:af:ea:3f:b9:bd:8a:87:af:47:42:
42:33:41:79:af:3a:ec:13:88:76:f1:d2:16:a0:f0:f8:91:da:
88:2d:c9:74:5c:47:4f:1f:41:4a:97:3c:07:6a:d7:14:0f:0f:
55:3f:7a:96:d9:4b:9f:da:fa:cd:58:92:9a:76:b3:21:02:8e:
27:80:95:b1:8b:7d:14:db:6e:cd:ad:f7:ea:4d:85:e7:46:8f:
0f:af:a6:54:08:6b:2c:3e:38:7e:18:71:bd:b9:69:9d:08:95:
1c:b7:ec:26:42:ed:41:70:27:24:cf:3a:e1:f3:ec:3d:b9:be:
cf:b0:0f:ce:3d:de:c6:64:6c:35:98:49:20:e2:ac:e4:bc:0e:
56:13:d4:36:64:67:f5:6b:84:d5:69:c0:cf:a4:16:03:a1:08:
3c:dd:9f:ee:65:fa:1d:8d:9c:36:ba:d4:f2:52:cd:6f:0c:80:
6f:7a:0e:92:d9:a0:56:ed:db:93:51:4f:f2:d2:3c:dc:90:a0:
24:bb:32:ae:0b:aa:a7:6a:84:ef:8a:68:a1:3e:7c:55:97:75:
b9:99:e3:0a:06:91:3a:7b:08:75:8d:69:8c:f4:05:19:59:46:
d5:47:1c:34:f9:2a:a1:69:e4:0e:2f:b9:5b:d2:7e:45:ab:f7:
c1:f7:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:06 2026 by rpki-client