Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
File: mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft (raw, json)
Hash identifier: IJmncwwN+d026Oek6fok6Omp9ukfXmVXq5L8JXyn9Pk=
Subject key identifier: A5:3A:34:DF:40:21:80:BA:ED:A7:8A:6D:4B:9E:EC:1C:E6:2B:8C:6F
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Certificate issuer: /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial: 019D3866154905CA2A1C9EB617692E4F06F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
Manifest number: 7F
Signing time: Sun 29 Mar 2026 07:01:47 +0000
Manifest this update: Sun 29 Mar 2026 07:01:47 +0000
Manifest next update: Mon 30 Mar 2026 07:01:47 +0000
Files and hashes: 1: mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl (hash: CqOxlb0DZBFgkIutmM895KQ+tQI2pZH/hbuX9gnpngg=)
2: vQIQ0hujisLLaE0FdKyN-US-jgc.roa (hash: HcBf/lSh/0W+uCeeNUF1qjopHzD07ezacPSk6j+nXRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:15:49:05:ca:2a:1c:9e:b6:17:69:2e:4f:06:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Validity
Not Before: Mar 29 07:01:47 2026 GMT
Not After : Mar 30 07:01:47 2026 GMT
Subject: CN=a53a34df402180baeda78a6d4b9eec1ce62b8c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:b0:5f:4f:23:6c:ab:a8:6a:0b:7b:4e:b9:
6a:61:d3:17:98:4b:f7:77:1b:38:de:d4:bf:dd:28:
29:97:1e:7e:b1:a5:20:75:49:47:16:9b:a4:e7:d5:
81:63:10:d9:4a:7c:69:70:85:68:62:d4:bc:d0:30:
d0:cc:59:e5:eb:41:58:43:ef:52:08:b5:2f:18:40:
bb:a7:2d:c3:8f:6e:b5:97:90:e2:58:42:02:ee:fc:
a7:d9:01:13:81:f8:d2:56:a9:a0:86:6e:92:85:da:
b5:08:1d:99:2b:38:1a:69:8c:b1:45:27:5d:3f:06:
b9:0c:7e:21:71:e2:ae:d1:33:db:37:3a:25:57:93:
e2:47:55:0b:99:b4:04:45:1c:e4:88:c7:83:50:ac:
1a:03:c8:a8:37:a3:7e:b2:ef:4f:b3:19:18:a8:10:
56:02:13:be:51:62:70:4e:e1:77:de:f8:a0:f6:01:
fe:f0:d3:35:ac:17:cc:ce:50:c9:02:5f:cd:df:88:
8f:e6:ad:ce:cf:7d:5c:1d:fa:3b:30:eb:7a:44:d1:
64:30:80:0a:f0:0c:b6:66:49:a0:38:45:21:98:04:
2f:14:b6:1e:15:f8:bf:a3:c9:e3:d2:8a:ab:f2:15:
06:44:14:41:01:6b:dc:9c:6b:8d:db:a0:0d:cb:1a:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3A:34:DF:40:21:80:BA:ED:A7:8A:6D:4B:9E:EC:1C:E6:2B:8C:6F
X509v3 Authority Key Identifier:
keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:70:d0:49:b6:37:97:c4:01:b0:ce:c1:17:f8:28:d8:a7:a8:
3d:7e:8d:9a:78:09:ce:84:c1:c5:63:e1:bd:39:eb:f6:60:d8:
ad:f1:b6:dc:95:d0:6e:c7:47:5f:a7:fa:08:c8:1d:07:f2:23:
68:ae:c9:2c:f1:ad:58:ec:c0:6d:83:54:8c:fe:a2:6f:bd:a1:
a7:21:0e:ee:36:21:2b:1f:cc:5e:d6:99:b3:ff:2e:e7:d1:28:
42:13:dc:1d:58:2f:e9:17:2a:39:9b:cc:0f:0a:a1:73:ac:c9:
d4:ad:cb:7c:39:23:2d:06:b0:bb:b2:15:e8:2c:51:b8:21:f5:
31:34:1e:fb:0c:42:35:1b:47:c3:aa:eb:b7:0d:c0:64:74:f1:
56:e6:9a:2e:a1:99:59:9a:2a:f1:b2:cc:b4:3f:65:7c:00:5b:
1a:13:bd:f6:c3:d6:08:ec:e9:e9:ea:e1:9b:a3:1d:93:1c:a9:
b4:25:54:1b:b3:30:e7:6e:d9:1f:e5:5f:a9:0f:bb:b5:a9:e9:
ab:28:2a:f4:35:ab:5f:3a:89:5f:93:2f:d0:28:b0:ac:0f:7d:
b0:d1:81:3c:ff:cf:f5:35:47:8b:d6:3c:39:ab:79:c2:8f:85:
de:7d:3f:f1:fc:18:5d:85:3b:25:fc:b2:97:d9:7d:a0:24:5f:
e2:72:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:53 2026 by rpki-client