Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier: gBcWKu7EaDqpI/X33Nwv/OWyDXrJuYUVDybppw8dhjs=
Subject key identifier: EA:A8:27:89:0F:33:04:79:F4:BC:8F:EA:B6:3B:74:27:18:2B:E8:B2
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 019D390998788FCAA540C9B1A7CD212E5BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number: 158D
Signing time: Sun 29 Mar 2026 10:00:23 +0000
Manifest this update: Sun 29 Mar 2026 10:00:23 +0000
Manifest next update: Mon 30 Mar 2026 10:00:23 +0000
Files and hashes: 1: 6gns6SXWZHRNUOeXxrnaYPt2iPI.roa (hash: 2K/ErF0fBlInTkrCVmgWybpgbKNM5gwfUM6rQZ6+hmo=)
2: 8nV4vFfsDdbYHG_8dhnhA4saFx4.roa (hash: yK23USlyZ4ypyu72ZSS+wzmBEI3NT4eQI2K3BvZ7Rr8=)
3: H0WuN-evx28DphAbnO4rgqyNUII.roa (hash: Z7/OMFG5EnjIGx0KFxCCkYkOVMTzdARLKHmfYN06UUo=)
4: cCEk2ZBKCpMVhF8SRJgY9iNKU4U.roa (hash: mXYq5QS9xnl4sRFedgWj9pBtcqZFgiaHE6J/4WbD9rw=)
5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: BXN5MJZndKP9ZRmZeE23u3dvRiM7h3YckQgCJ9oYwgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:98:78:8f:ca:a5:40:c9:b1:a7:cd:21:2e:5b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Mar 29 10:00:23 2026 GMT
Not After : Mar 30 10:00:23 2026 GMT
Subject: CN=eaa827890f330479f4bc8feab63b7427182be8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4e:f6:8d:61:ea:b2:c1:fd:af:e5:4f:b7:f6:
39:ed:6d:29:67:2d:b7:ea:3a:ce:13:2a:e6:8e:e0:
b2:73:04:74:c5:5d:7d:c0:52:07:17:c8:f7:4b:4d:
e1:03:ae:8b:14:0f:64:dc:35:9e:a8:60:b7:d1:66:
d5:a8:b1:25:1f:d2:fe:24:0c:68:13:64:04:40:a1:
d8:4a:cc:74:5f:23:2b:90:5d:db:5f:cf:b6:1a:f5:
49:9b:8b:70:67:4d:11:fd:a4:45:ec:96:87:9c:15:
c5:dd:f2:1d:63:7b:93:e0:27:21:1a:66:e4:ae:f3:
16:6e:90:d3:4a:27:f0:73:fc:93:63:6c:5d:16:8a:
81:d8:ad:d7:b7:83:b6:e5:71:39:e3:6f:27:97:50:
78:d0:93:cc:95:e4:b9:40:14:0a:77:64:b7:a2:65:
6e:17:e2:32:56:e5:41:c9:c8:63:ef:5f:0e:cb:9b:
d6:79:df:64:d7:88:ce:3a:27:c7:63:bf:b2:cb:dc:
ec:ab:91:5e:b5:6c:f4:87:1c:9e:ab:35:0a:22:de:
a7:d4:4f:a2:43:aa:fb:78:74:0d:9a:b2:fa:89:36:
36:c7:f2:59:2f:19:78:8e:8c:99:12:f4:05:a0:c0:
30:16:20:93:ff:2c:7c:a4:62:ad:de:c2:85:74:63:
17:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A8:27:89:0F:33:04:79:F4:BC:8F:EA:B6:3B:74:27:18:2B:E8:B2
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:41:6d:55:d6:b8:4d:44:17:86:20:76:92:51:f3:fb:56:45:
e4:26:ae:f9:ba:95:52:73:a5:ee:a2:47:87:b5:78:86:2a:18:
6a:24:76:90:7a:c6:3e:af:84:fa:99:a1:2a:03:2d:3e:9a:13:
39:69:71:bf:81:fd:b9:55:ce:b0:0b:83:27:4c:68:16:b5:48:
10:4e:ae:c4:0f:98:d7:78:a4:82:b1:e7:8f:17:28:b2:5c:9e:
7a:4e:94:00:46:b8:3e:c0:01:0b:60:54:c9:10:16:8e:4c:09:
3c:d8:34:a5:8f:3e:9d:2d:c6:34:b4:79:ee:1d:d1:b1:3b:06:
bd:a1:13:37:15:3a:ed:0b:88:9a:8d:c2:5a:3c:06:7c:98:27:
eb:3a:fc:55:8b:db:e8:1a:e7:f6:fd:90:1a:a6:14:c7:81:df:
25:8d:8f:42:f5:35:77:7f:33:27:fb:73:02:e2:40:75:6c:b4:
fa:13:a2:2d:d1:26:f5:68:f5:7c:e3:a2:5c:00:63:a6:a9:7e:
51:8e:8b:c9:b2:8b:fb:c4:c7:f1:f6:8a:b9:ab:ec:b0:9d:8f:
38:28:8b:6d:09:68:d9:94:e5:8d:2f:65:14:ab:39:36:be:04:
a9:3f:4d:97:d3:75:21:78:2b:a9:b2:4e:78:ab:b6:d1:fa:a6:
39:6b:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:33 2026 by rpki-client