Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json)
Hash identifier: 8jpru23TCwRpZgSGjVBRkAFS7REy/lFj73tZSC53GXA=
Subject key identifier: 0F:55:2E:99:85:23:B0:5B:C5:74:28:05:D4:87:DE:54:E7:E0:E3:52
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial: 019D0D0D45217B059A26D5AFBF524629707D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
Manifest number: 0A3F
Signing time: Fri 20 Mar 2026 21:01:06 +0000
Manifest this update: Fri 20 Mar 2026 21:01:06 +0000
Manifest next update: Sat 21 Mar 2026 21:01:06 +0000
Files and hashes: 1: 2ZJ5kTbDkQFVGBUeLd0y5apLGk4.roa (hash: ZODc+kCP5UyKJRVzZyQVG4BaAWWyOIufRaMmAMzRM8g=)
2: 8MOBBqAqf18FTqoFJD2CeKB_s6A.roa (hash: SJzDzENNLFTCkG0xRq9XVOdikvbwmssmU54q+OJF0sw=)
3: 9dGHInAQI-j4vyLy3UUNRAYsuCY.roa (hash: Q9ame2KwxdqQfHrlASmNDuZYejwWS5cB+ic/WNNh4SE=)
4: Duy_rM8zgDjySYe4ZSDOg73tPCE.roa (hash: X8/ksNeJf+bfGjtKgbxWuhpWvkDUusV0gttXbiXMo/w=)
5: R8X5AbpjXigqoDLQcs2jZb0art0.roa (hash: 6tLBQj47sZHpt2bBLVz4/BKKuOKu1jSSpYa6awOZikM=)
6: iCTaAMs05oLhbwtXWXpZQJoU3k0.roa (hash: usJINLMRL56l8UXnLdaOyblHK8idpM1v2JOHfQZdpJo=)
7: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: HC0wz76FdS4ifZi7sy/DyJDq0bfrhjU1GJEmNdTUN8o=)
8: tkLKI36bEE_d9mFrnpG75Jz1duc.roa (hash: GQR5CqcIcifEV/UVBCebbmLSOnvxcbQORub4i3S8oOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:0d:45:21:7b:05:9a:26:d5:af:bf:52:46:29:70:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Validity
Not Before: Mar 20 21:01:06 2026 GMT
Not After : Mar 21 21:01:06 2026 GMT
Subject: CN=0f552e998523b05bc5742805d487de54e7e0e352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:10:98:fa:9a:e6:b3:71:8d:23:d7:0c:b5:
2c:df:d3:ed:e6:39:cb:86:6e:d1:b4:94:f9:ec:17:
71:47:62:c6:15:2d:d1:ac:f8:f7:39:06:e0:6a:5b:
2d:d7:be:4b:6b:d1:b5:ea:8b:86:b4:ec:1f:ab:d5:
76:cf:00:33:b4:32:ea:80:65:91:3b:bd:9f:25:68:
af:e1:0f:d4:43:6b:4d:d7:0d:b4:19:ed:9b:69:20:
1d:36:89:54:6f:f5:d2:e5:f5:dc:4b:bf:d4:1b:0b:
65:ac:5a:57:15:ed:b6:66:f0:ce:df:b0:b5:50:d8:
bd:7e:8c:b1:d5:43:2f:dd:c3:8b:46:d4:a4:ff:5d:
32:f7:39:0a:65:a9:1e:79:66:11:6f:a1:d5:21:67:
71:b7:ca:9c:34:ee:c1:bd:ac:35:d8:62:7b:02:09:
51:8f:97:19:a1:1a:a4:65:be:2d:5a:f4:1b:eb:39:
0b:95:cb:b8:e4:da:b2:24:7d:01:20:6d:db:af:c1:
8e:eb:6d:3f:c0:d0:23:f2:cd:cd:fe:17:f2:fd:66:
46:9e:60:45:46:02:10:94:23:fd:ed:74:c6:41:9a:
aa:9e:8a:d4:3a:fa:23:b3:b1:88:15:67:36:70:5d:
59:01:1f:57:47:34:c7:0f:fa:56:79:66:78:92:4b:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:55:2E:99:85:23:B0:5B:C5:74:28:05:D4:87:DE:54:E7:E0:E3:52
X509v3 Authority Key Identifier:
keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c7:d9:21:69:d9:14:60:c8:16:44:1f:89:a2:b1:ce:b2:13:
30:3b:4f:46:97:86:86:b5:8e:fd:e4:6d:da:2d:92:b1:92:5b:
17:4b:2a:f1:29:6b:af:44:f7:bb:b3:83:fa:34:4d:58:87:c5:
bc:99:1d:8f:05:33:7c:bc:74:81:79:34:a1:b2:a2:60:d2:74:
0b:be:38:db:8e:1c:d1:eb:98:dd:19:39:8b:67:47:b8:67:81:
2a:3d:6b:56:d5:a9:02:52:ab:45:92:b9:83:51:e4:0c:ae:48:
85:3e:26:aa:cd:39:37:80:ca:34:36:71:17:66:33:cd:c7:6c:
67:9f:cd:d3:87:81:3a:58:9e:8f:fe:63:40:b2:ce:90:51:3c:
18:90:a6:52:7d:2c:22:92:b2:2b:9d:98:8e:b3:2a:76:43:1d:
ca:67:e4:64:48:93:26:28:52:03:17:d1:a6:62:bb:03:96:4e:
f1:df:0d:77:dc:45:9c:77:cc:4e:23:a7:80:82:13:c9:c2:b8:
39:30:ec:78:86:10:2f:74:0a:2b:d0:40:b6:1d:9e:c9:a4:c2:
8e:e9:8b:07:31:58:b3:bf:58:45:39:7b:af:aa:ca:34:7b:87:
b9:80:e2:c8:32:d4:31:cc:50:fd:d3:a9:59:0e:c5:86:93:46:
2e:0d:bb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:12:03 2026 by rpki-client