Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
File: meh9VkzLhhHhQKeyvyYMSiIrWdY.mft (raw, json)
Hash identifier: M4Dp6/8lklPTBLwd/a4ZI/s1DQjkgoJNUzZa7G8iOT8=
Subject key identifier: 7D:C6:C8:AA:71:11:1B:E4:26:6D:16:6F:50:06:2B:03:52:55:63:BE
Authority key identifier: 99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
Certificate issuer: /CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Certificate serial: 019D382E57F8746C52844235D2095173D22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
Manifest number: 08AC
Signing time: Sun 29 Mar 2026 06:00:54 +0000
Manifest this update: Sun 29 Mar 2026 06:00:54 +0000
Manifest next update: Mon 30 Mar 2026 06:00:54 +0000
Files and hashes: 1: VqtWffeEI3gFa2JxkIrr6uKyEHQ.roa (hash: 49h69eiCv9MsxP2gN+eJBOZr+EudlWoVpdEDAOKpTcI=)
2: meh9VkzLhhHhQKeyvyYMSiIrWdY.crl (hash: ZCpqBrsB6Hv/9fTNfC3ANRDKGdJi70AndXHf3aFz3U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:57:f8:74:6c:52:84:42:35:d2:09:51:73:d2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Validity
Not Before: Mar 29 06:00:54 2026 GMT
Not After : Mar 30 06:00:54 2026 GMT
Subject: CN=7dc6c8aa71111be4266d166f50062b03525563be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:83:23:74:74:c0:48:af:ea:57:a5:3e:1b:
ac:3c:4a:62:aa:e0:37:97:ff:ea:e0:7e:5f:b9:e3:
b2:b1:2b:ef:ca:f5:4d:20:d0:7d:af:9f:50:94:8a:
74:c0:74:14:ac:69:cf:ed:d3:6a:5f:5c:3e:44:03:
c1:67:6a:86:6b:b4:e6:46:a1:38:dc:79:c2:d0:33:
b6:04:66:15:5c:3e:a1:2b:52:4c:bc:b0:63:80:92:
08:97:26:c1:4a:d3:a5:2a:e7:5a:af:5a:f6:f2:27:
37:a5:ad:97:2e:14:c9:54:2c:94:17:d4:02:93:ad:
8f:71:2d:65:44:5a:62:45:81:dd:bb:70:06:8a:38:
0e:da:3b:65:3f:35:62:c3:c7:3e:cb:fd:cd:81:ac:
a1:82:23:f4:77:0b:49:cc:67:16:9d:ce:e2:be:2c:
ab:fe:9a:9b:72:22:c0:fb:a2:55:32:d9:35:ad:c9:
91:a1:02:a3:98:04:19:c8:84:12:8c:f2:2b:87:d9:
21:31:c8:9d:88:c0:86:17:85:53:0e:d5:4e:40:96:
36:3f:e6:90:33:ac:fe:f8:d6:b4:6d:2a:3e:72:e2:
7d:3d:64:fb:52:e2:4e:ae:91:65:13:25:9f:77:65:
44:3a:07:5f:d7:4c:da:eb:bb:f7:f3:be:81:b2:51:
7e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C6:C8:AA:71:11:1B:E4:26:6D:16:6F:50:06:2B:03:52:55:63:BE
X509v3 Authority Key Identifier:
keyid:99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0b:01:b8:64:d9:65:05:b9:49:a4:8e:8a:ac:38:00:02:b2:
88:07:29:1a:3b:27:77:95:9d:38:b4:94:1a:91:7b:4d:f9:bc:
ea:23:9f:9d:1d:05:2c:7a:de:df:f6:a3:e1:31:58:64:91:55:
3a:df:38:2f:20:c3:38:1d:39:8f:06:62:5e:29:98:ff:63:3c:
dd:01:de:8b:a0:39:9f:91:92:73:fb:7f:af:6b:92:79:e4:3d:
5f:bf:13:53:bf:99:ff:32:f0:8a:1a:c4:7e:09:24:f5:9a:0f:
0d:16:46:d3:56:09:9c:e5:df:2e:71:6e:02:b0:78:23:54:c2:
8e:e5:b6:30:da:27:45:27:1b:2b:70:3a:fd:53:f0:35:02:9e:
fe:c9:bb:04:c7:e7:60:a4:b1:e7:76:b5:0b:e7:1a:0a:3f:ee:
e5:df:9d:66:80:ee:2c:3b:49:e5:03:c0:fe:b8:62:60:02:76:
4b:16:50:73:eb:fd:d1:09:1c:b8:a2:86:8b:e2:d5:a4:d6:55:
f8:9f:a4:a7:f2:82:a2:b1:c4:7f:81:ed:9a:3f:ff:aa:a0:52:
d7:10:e4:75:86:b7:6f:d3:4f:aa:ce:eb:4a:07:f2:6e:84:78:
8a:fb:1d:d2:4b:a7:be:79:b1:fa:06:45:72:88:31:16:fc:9d:
12:ac:84:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:08 2026 by rpki-client