Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: mmvU3AvKYvcU0hekexpuGG8eSu0LgcOMTrME5q0HeQ0=
Subject key identifier: DF:A5:70:05:A9:71:FC:B4:52:96:DC:6B:C1:93:E7:6C:12:44:0F:F9
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 019FA116EC6FFFDF072AB6B75E0F99EBD94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 01:01:01 +0000
Manifest this update: Mon 27 Jul 2026 01:01:01 +0000
Manifest next update: Tue 28 Jul 2026 01:01:01 +0000
Files and hashes: 1: WHwPKWlS1MbhHwPa_EcSvzO973g.roa (hash: ZJla+7f5axXV/6uT6lJ/b0sWEBJptZZvhKtPIna394I=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: Cc2F47uY91Xg8uMGZ/mv/76ONLPBjJ1gOfps01TYHPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:ec:6f:ff:df:07:2a:b6:b7:5e:0f:99:eb:d9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Jul 27 01:01:01 2026 GMT
Not After : Jul 28 01:01:01 2026 GMT
Subject: CN=dfa57005a971fcb45296dc6bc193e76c12440ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:34:7f:c3:fc:0c:95:0a:bd:29:58:7f:eb:
f4:5a:7d:3c:96:4c:bc:5d:8b:f5:3a:2e:57:d5:e0:
4e:cb:4d:a0:dd:d2:96:0c:ac:c2:ce:02:f7:29:f9:
20:80:a7:82:af:15:de:04:0d:e5:eb:aa:bb:0f:54:
c6:13:0b:ef:7f:78:8d:9d:9c:f4:f4:4e:e2:37:fd:
cc:e7:de:1a:33:7f:2d:95:c2:5a:c8:34:09:84:8a:
82:87:4f:6e:fd:53:69:90:1e:c2:70:8d:ab:91:67:
8d:bd:87:be:a7:2f:98:46:33:63:30:b4:c3:a0:f4:
05:13:37:5c:33:76:b4:96:bd:d2:c1:ab:8e:a0:94:
0b:1d:b7:b8:00:02:98:04:8a:3e:bd:80:87:41:49:
65:65:52:dc:f1:8f:93:38:80:26:ad:88:dd:c1:38:
67:ed:21:46:0a:52:3b:88:fd:36:d7:05:2b:36:6c:
fe:05:c1:5a:c7:f6:62:97:4b:78:24:d5:9a:c6:8c:
76:c4:50:9a:db:85:d5:49:be:1d:db:5b:8f:6c:7d:
20:f3:42:e3:16:0a:3e:f0:a5:f3:59:41:9d:6b:0d:
bb:c4:f9:03:1d:56:d7:29:5f:01:94:6e:53:b5:f0:
f3:f1:e0:53:53:7d:f3:c0:e3:9c:12:c0:a1:ad:51:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A5:70:05:A9:71:FC:B4:52:96:DC:6B:C1:93:E7:6C:12:44:0F:F9
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:10:9a:f1:07:f3:ad:3a:a6:8d:a1:5d:1f:51:37:e0:6f:a9:
93:ef:ac:fe:12:1d:dd:a5:1d:c2:32:c4:9a:06:e7:a2:d5:21:
50:0f:41:d1:a4:1c:1a:97:4d:7a:94:1a:83:08:45:bd:1d:d1:
75:5a:08:06:a4:99:47:13:dc:ce:1d:78:39:42:93:8a:34:49:
fe:94:89:57:4a:70:22:9d:75:76:34:08:e9:0d:d4:35:42:a3:
89:a2:46:29:ce:b1:31:1e:e7:f5:a9:02:9e:04:aa:e6:59:8f:
8c:42:53:cd:fc:d9:00:cf:64:9a:dc:f3:9d:48:00:48:24:7c:
af:c2:f3:8a:2e:f9:bc:17:9f:e5:5f:db:87:98:bf:62:02:41:
2c:d6:74:d2:61:cf:77:85:54:49:57:51:89:6e:66:47:0c:ed:
b1:b6:88:e8:29:7c:31:57:4f:3a:33:c0:c0:b7:ab:20:ba:8c:
4a:a3:5b:db:80:ae:e5:47:17:ae:51:98:db:50:86:7d:eb:b9:
65:9a:46:87:3d:56:2c:b1:d5:c4:0a:35:70:8c:81:1e:95:8f:
f8:17:70:e7:ed:e5:3a:44:4c:f2:c9:8e:8b:53:d4:4e:83:15:
62:a8:b8:d9:39:f7:98:37:6f:a6:30:f0:9b:5a:65:41:12:27:
ee:97:f3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:57:56 2026 by rpki-client