Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: 72AR5MlIBew3a99UCEG07ZX6SRfiRoZEJujNEhiTS98=
Subject key identifier: EF:40:5E:E1:8B:FC:D2:D9:F2:4E:F9:06:2A:92:46:03:D0:51:1E:75
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 019D3909B8DA028079320E01A6750166ACF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 10:00:31 +0000
Manifest this update: Sun 29 Mar 2026 10:00:31 +0000
Manifest next update: Mon 30 Mar 2026 10:00:31 +0000
Files and hashes: 1: WHwPKWlS1MbhHwPa_EcSvzO973g.roa (hash: ZJla+7f5axXV/6uT6lJ/b0sWEBJptZZvhKtPIna394I=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: RrxWzftDoeG0GCPr+th18HCmxT3G5dMVKg0or/CsIVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b8:da:02:80:79:32:0e:01:a6:75:01:66:ac:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Mar 29 10:00:31 2026 GMT
Not After : Mar 30 10:00:31 2026 GMT
Subject: CN=ef405ee18bfcd2d9f24ef9062a924603d0511e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:25:42:a7:f0:46:22:fb:31:40:14:da:1a:
70:33:8e:ea:3c:ab:12:eb:f2:a9:98:14:e4:e6:4a:
5d:30:22:15:47:6f:dd:8a:85:36:72:29:03:a6:ce:
e8:16:52:0c:60:ca:cd:a0:05:b4:c4:b9:92:8b:de:
c7:94:11:88:60:91:63:03:23:b9:d9:7f:a4:c3:a1:
a4:35:4a:b9:53:c6:07:7a:49:4d:7e:ef:19:3d:d3:
ca:20:81:1f:e9:d1:e1:f8:fb:85:6c:e8:b0:3e:0f:
67:d8:b6:5f:4e:d2:f4:c8:d3:51:1d:42:c4:0b:a1:
c2:49:31:f1:4d:9d:9e:1a:8a:96:03:6c:7a:b8:5a:
be:3d:7c:8a:af:9d:07:36:02:b4:25:28:8c:69:06:
76:db:ed:85:c5:53:41:61:82:fe:47:54:49:fa:29:
2d:f5:d0:83:27:cc:b3:79:0c:a8:7b:4c:1d:f9:b5:
07:e0:74:1f:52:ff:a3:c2:78:f8:53:30:ee:24:48:
02:85:66:bd:e6:c6:1d:5e:37:54:d4:4d:5b:ce:cc:
94:5f:fa:b7:93:81:75:fa:84:b5:2f:40:eb:86:9a:
3a:94:d4:b3:93:0e:96:bc:b2:96:a0:f0:27:d5:b4:
d2:30:a4:8e:aa:a7:ef:fa:4d:36:18:39:1e:86:2a:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:40:5E:E1:8B:FC:D2:D9:F2:4E:F9:06:2A:92:46:03:D0:51:1E:75
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a2:67:26:18:02:98:0c:6f:88:3d:3e:a1:d1:17:79:9f:fd:
21:60:cf:7f:89:66:e0:e5:47:0f:35:2a:59:30:22:80:b3:01:
10:77:48:7c:d5:78:c7:a2:09:a1:9c:49:b5:f4:0e:84:c9:3f:
b2:76:78:ed:79:49:c4:ab:14:a9:45:1c:6c:37:0c:69:87:6a:
35:85:51:4a:8b:a5:64:17:c9:61:81:3b:f5:24:55:2a:04:9c:
82:c0:93:eb:48:4f:7e:2f:5b:d1:0f:39:b5:0a:c6:b9:f8:98:
3e:d4:8c:51:3a:ec:1a:0f:a4:46:9f:ed:a2:63:b5:9e:23:00:
17:a0:88:d2:90:69:0b:fc:ee:c5:b7:3f:73:35:ea:ca:b4:33:
6c:3a:0e:58:42:cd:c1:04:77:87:20:9f:7e:41:4e:ea:20:d1:
27:b2:95:6f:ad:28:b7:37:f1:ec:9a:1a:23:76:82:65:6b:b0:
b6:05:ef:c0:2d:68:a6:39:61:25:7a:a6:a5:34:d3:ae:59:b2:
3b:f5:ec:cb:67:76:4f:0d:01:78:5f:7a:be:a9:73:7e:4c:d4:
01:5d:ee:7b:61:48:a4:1f:8e:9c:b2:7b:b1:18:57:28:ab:e6:
9c:90:f9:ec:94:7d:33:1f:c1:58:6b:29:79:1d:32:44:76:37:
7b:cc:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:55:28 2026 by rpki-client