Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: lExIiiBwDT99lRBQ1tdcK2Qpg7YMC2eq7HrzdYPeV78=
Subject key identifier: AE:1F:FD:2C:40:4F:0E:D3:8E:CD:E2:D8:F7:34:28:1E:7B:23:D0:52
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 019FA304A11A97A6D71831F4F1923CDB0943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 10:00:17 +0000
Manifest this update: Mon 27 Jul 2026 10:00:17 +0000
Manifest next update: Tue 28 Jul 2026 10:00:17 +0000
Files and hashes: 1: WHwPKWlS1MbhHwPa_EcSvzO973g.roa (hash: ZJla+7f5axXV/6uT6lJ/b0sWEBJptZZvhKtPIna394I=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: l4cgfhxZq29a5al2ZT2PCq58Aw84N9Y2QVlSZ7cH/rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:a1:1a:97:a6:d7:18:31:f4:f1:92:3c:db:09:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Jul 27 10:00:17 2026 GMT
Not After : Jul 28 10:00:17 2026 GMT
Subject: CN=ae1ffd2c404f0ed38ecde2d8f734281e7b23d052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:cd:5e:05:a3:f7:50:73:c6:ce:54:80:c9:
9f:b7:31:78:3a:88:ac:fd:29:01:18:a6:ca:0a:bf:
c8:9c:df:5a:7e:35:5c:38:ba:a7:b9:2b:a8:4e:c2:
39:e3:74:3d:3d:2a:0a:52:f9:f1:08:7d:8d:18:3f:
6c:59:ba:bf:ef:3a:4b:17:d7:64:43:d9:cd:28:27:
ed:5b:e3:ce:df:ea:f3:cb:7f:69:27:ca:a6:62:b9:
89:4f:bb:a0:e6:5a:5f:c8:2a:87:4e:fd:be:f7:65:
e4:3b:ac:52:85:c9:ed:13:a4:15:3d:fd:cc:b4:36:
c5:a0:82:41:b4:fa:b3:ad:72:d2:bf:36:c6:9d:38:
21:0e:ea:a7:5c:ba:a4:f4:fc:41:1a:91:d6:79:77:
9d:7d:ff:12:b6:4f:da:13:54:92:ec:16:af:53:28:
4f:57:f9:b4:2e:1a:84:c4:74:5a:4f:82:5b:6d:be:
c2:bd:8b:4d:7c:e1:f6:a1:9a:5a:c1:7f:29:d2:c8:
f7:d2:b2:fe:48:91:39:95:af:28:e7:b2:f0:4d:78:
0d:3b:87:b1:da:ba:a5:f4:66:a2:74:a2:bc:d1:5e:
7c:e3:e7:ce:4c:7f:f6:7e:ab:cc:a5:32:0c:b8:3d:
ee:02:e8:36:77:dd:57:0d:1b:76:9c:a3:38:db:93:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1F:FD:2C:40:4F:0E:D3:8E:CD:E2:D8:F7:34:28:1E:7B:23:D0:52
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:88:e1:37:bd:ee:cd:3f:d0:94:2e:47:02:47:15:c1:7a:f5:
a5:5b:0f:83:dd:8c:c6:9c:8d:f0:c4:c9:26:37:87:ab:f6:96:
82:54:45:c0:e7:d8:a3:f1:8c:7a:9f:9e:70:cb:a7:8d:e5:f0:
da:15:96:14:ec:bf:89:ef:18:61:d4:e7:05:e3:86:d3:4e:b1:
29:c4:ee:ea:ca:46:ed:42:af:bb:7b:4d:ab:51:10:b4:53:f2:
b1:72:0f:05:ea:03:f9:7d:66:20:77:6e:05:54:b4:ce:ac:09:
4c:34:ed:33:99:a9:6e:e5:c2:d0:04:2b:81:24:38:dd:a8:16:
9b:ec:9a:28:6c:78:73:8c:ec:49:27:d1:b4:35:59:66:7d:dc:
e4:15:18:3d:d4:6d:7e:67:2f:36:c2:05:fa:be:9e:24:37:d0:
6c:20:08:0e:51:8c:03:18:16:4d:5e:ba:a3:9e:48:63:14:77:
f3:dd:8f:66:8e:8f:b4:2a:38:14:fb:e8:05:f9:60:fe:d1:5e:
7e:ea:8f:bc:3a:34:b9:9f:1a:61:8e:22:83:73:8b:89:e2:e8:
7c:20:f9:4d:1d:d3:fe:f8:3f:d4:14:6b:ce:cf:2d:3d:6c:e6:
22:4c:8c:2c:16:88:bc:d1:3c:af:4a:59:cd:49:38:80:3c:ae:
07:b4:92:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:11:19 2026 by rpki-client