Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier: OugT3q7qH251GWV67igLVLin2MgVAEKnvhifxOMstlM=
Subject key identifier: 0A:87:8B:AA:5F:2E:F7:55:9B:9B:79:0A:88:44:E7:C5:39:74:0F:41
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial: 019D394178B023D5545B97A079F043545730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number: 1230
Signing time: Sun 29 Mar 2026 11:01:25 +0000
Manifest this update: Sun 29 Mar 2026 11:01:25 +0000
Manifest next update: Mon 30 Mar 2026 11:01:25 +0000
Files and hashes: 1: Ua0FvX2Mxp7XblXDKae0F_P3DVA.roa (hash: Gd0TE+m9XBYfCgcDLlJ0ZvcbYTgV+bDawl8hdljezh4=)
2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: M23RiSOW276WVElYDdYlS+HKwbbZUoMe+i3wMMUxtd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:78:b0:23:d5:54:5b:97:a0:79:f0:43:54:57:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
Validity
Not Before: Mar 29 11:01:25 2026 GMT
Not After : Mar 30 11:01:25 2026 GMT
Subject: CN=0a878baa5f2ef7559b9b790a8844e7c539740f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:a8:e7:33:62:1e:7b:f7:63:83:41:ee:28:
ae:58:7f:9e:45:2e:8a:56:2f:fb:f1:ff:60:a0:74:
ee:4c:b1:03:9d:4e:75:27:3f:10:2b:f9:2f:f8:13:
79:08:cf:39:b3:2e:f7:8d:a2:f2:78:8e:72:35:e9:
2e:38:be:bd:eb:63:2f:a1:55:55:e0:75:72:74:8f:
33:1f:b5:71:42:ba:3a:a1:50:87:42:d5:63:12:22:
9e:9e:2b:d7:10:e3:fe:ce:c6:8a:ae:05:af:e4:b3:
2d:d4:23:cf:0c:7d:f1:3f:9c:c3:ab:f2:56:5e:1b:
9f:02:fe:dc:ff:4c:13:ee:fe:38:ec:5a:bb:02:06:
fa:20:05:f6:a6:27:98:68:47:92:25:0b:8b:bc:fd:
11:48:50:28:d9:8e:6a:06:0c:a0:7a:f7:e2:a0:7f:
10:f5:f2:2e:30:d1:53:1c:16:eb:4b:d8:37:6b:64:
6f:dd:9c:11:09:99:47:45:1e:c2:0b:45:29:5e:dc:
ef:1c:38:cb:94:d9:4a:e5:44:29:59:3a:e5:47:96:
b9:9c:8d:d6:b1:7d:ad:f3:5c:02:51:14:8c:56:bd:
65:71:32:95:ae:53:0b:89:81:7d:ce:c4:1a:cc:8c:
c1:9d:b0:61:f0:2a:b4:8f:bc:0b:c9:c7:83:37:fb:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:87:8B:AA:5F:2E:F7:55:9B:9B:79:0A:88:44:E7:C5:39:74:0F:41
X509v3 Authority Key Identifier:
keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9d:c3:52:79:9a:e4:41:a2:09:13:0c:d4:9e:a9:44:34:b3:
ce:f8:22:ce:f6:17:90:be:3c:31:0b:0d:3e:d9:11:64:61:fd:
ce:7e:12:19:5d:b5:a2:a6:c0:a0:78:a0:08:9b:33:f5:5b:3f:
10:83:00:3d:a1:bd:d9:a5:2f:28:e6:13:17:61:b4:12:d1:02:
fa:0c:d3:15:2f:97:2b:26:5a:a5:60:c3:94:93:19:c1:82:56:
4a:a7:1a:44:18:13:d3:72:a0:db:26:3e:0c:49:51:57:b5:a7:
33:04:51:b7:a1:3f:41:1f:f4:d2:cc:42:6c:f0:ff:ff:f7:c6:
99:7b:6e:db:ea:d4:65:14:b6:d0:b9:f9:7d:0c:69:c5:b2:0f:
e6:e3:8b:78:69:98:2c:67:05:b8:41:02:58:0f:ea:5a:63:61:
a7:10:ed:9a:28:0b:34:78:f4:40:5f:16:d8:92:e8:6a:f4:45:
0c:ed:d5:9b:04:0b:40:59:81:64:c2:b7:44:73:65:70:ec:2a:
7e:3a:29:c8:84:df:58:43:04:26:4f:db:71:8f:56:25:34:a0:
3b:d5:02:79:96:f8:ec:ff:49:64:ba:12:ef:41:0d:9c:8c:37:
80:58:22:fe:7a:59:ac:4c:37:ba:cd:b9:cc:8f:08:4c:80:a9:
53:15:04:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:50 2026 by rpki-client