Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: FgbyJcVVVhMv5txjiiNgc+R/PtgrnSQ12URH/VfjlIg=
Subject key identifier: 68:27:3F:53:97:B3:A1:6C:B5:75:1C:A3:56:71:8E:05:E6:DC:02:A9
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 019D390A21B5D03637FED11EF7EF0A379EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 157C
Signing time: Sun 29 Mar 2026 10:00:58 +0000
Manifest this update: Sun 29 Mar 2026 10:00:58 +0000
Manifest next update: Mon 30 Mar 2026 10:00:58 +0000
Files and hashes: 1: 2pSmfbphSDb9Cqxh8NYcKQtlp1o.roa (hash: maKyyaI7uWNQa13JatdDTrRmvHHlkhB9HEz590CRzd8=)
2: lNntVwqmP1g050CVm9YpSl35H2U.roa (hash: dV1Mh9n/uRu+yXT900FgqLc47Mey+zbCu4y2cZxScc0=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: +Ph2Vevmv+QpamDpZxVi9Fpowarf8st+6Ky+cyoMHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:21:b5:d0:36:37:fe:d1:1e:f7:ef:0a:37:9e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Mar 29 10:00:58 2026 GMT
Not After : Mar 30 10:00:58 2026 GMT
Subject: CN=68273f5397b3a16cb5751ca356718e05e6dc02a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:68:d2:c5:a2:f8:fb:07:79:41:53:f4:95:
0a:95:e5:2d:96:29:a0:ed:41:d1:45:9a:6d:da:8b:
09:f0:f9:af:00:7f:99:98:c8:ec:14:f1:62:38:d1:
24:da:e6:00:a9:9a:d2:9d:54:17:c0:db:7c:3f:59:
f6:22:f9:b5:c7:cc:ce:55:ab:2b:2d:e2:83:53:1f:
72:da:f5:6e:cb:09:1c:8e:ba:df:1d:4e:f5:2e:35:
33:54:da:f6:5b:5e:40:7c:29:0c:b8:dd:a8:7b:2d:
18:29:c5:56:97:ba:2b:d2:bc:37:ee:e3:d1:a8:f8:
0c:8d:5c:1b:d7:8c:d4:cd:f0:45:21:6b:b4:15:5c:
bb:d9:43:99:7d:c6:e7:46:bf:d5:0e:39:e4:f6:db:
7a:d8:e5:e8:9d:d3:c0:0d:61:52:3d:fd:00:16:79:
e3:57:6f:86:57:e8:77:0f:b2:a2:77:65:65:87:26:
46:08:62:70:3c:a2:bd:0d:23:c9:49:e6:e4:07:7c:
76:bb:2f:38:b4:3f:8c:01:56:2f:58:4f:1c:d1:32:
35:16:d9:79:a8:af:2e:ec:0c:70:1e:3b:74:9f:87:
e3:66:4f:54:9f:7e:10:61:33:4a:60:c8:dc:50:f6:
85:c2:68:3f:2f:fb:c3:38:d3:b6:4c:42:59:d8:e4:
21:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:27:3F:53:97:B3:A1:6C:B5:75:1C:A3:56:71:8E:05:E6:DC:02:A9
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8c:a1:c5:6a:0c:e9:24:c2:92:62:a8:f0:cd:5b:a3:66:23:
77:4f:b9:31:d9:13:6c:86:0b:1d:3f:56:b2:1c:6e:5d:0e:37:
2b:94:61:d6:ee:73:5f:1e:e6:23:79:5a:0b:c5:35:cd:da:5f:
f5:35:2e:8e:0e:96:0c:78:02:fb:bd:d0:50:f5:e5:4b:a4:1c:
8b:19:9d:19:b0:b1:7b:8d:23:b0:15:07:4f:62:cb:f5:15:f5:
e0:72:ca:21:37:4b:e4:49:9f:90:f3:43:77:af:bb:74:da:0b:
72:7f:4b:d5:39:52:2e:c0:41:de:33:2f:3b:89:a8:54:35:1f:
82:ee:77:8c:db:3e:3f:d3:38:2c:ab:d8:13:5a:91:d4:db:0e:
4e:a0:91:ce:ed:e8:8c:73:df:88:7a:fb:76:a8:31:11:ce:7f:
4d:cd:0d:6e:a7:3a:9e:d4:bc:05:d7:5e:71:a3:13:63:eb:3a:
fe:65:2d:58:de:1a:b6:d4:c7:72:02:6a:73:1f:22:d1:54:92:
99:b5:17:9a:28:86:27:78:06:6a:94:e0:64:2a:ca:c9:cf:e9:
09:32:88:3f:17:dd:dd:a0:53:7c:99:54:41:3d:b1:4a:dc:16:
5a:cf:77:9b:81:8a:1f:a1:f5:a7:5d:28:e3:d1:e6:cf:3c:a7:
85:d3:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:47 2026 by rpki-client