Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.mft
File: mmLEo5rOzN4eeB5-zC8CKU8MIT4.mft (raw, json)
Hash identifier: j/NciUUDwL2aTGFUjoeXOiS55EtXWZleHtxyh1HusuA=
Subject key identifier: CA:13:65:D6:2B:F8:B0:6A:0C:C6:9A:DF:56:1B:29:01:79:83:3E:F1
Authority key identifier: 9A:62:C4:A3:9A:CE:CC:DE:1E:78:1E:7E:CC:2F:02:29:4F:0C:21:3E
Certificate issuer: /CN=9a62c4a39aceccde1e781e7ecc2f02294f0c213e
Certificate serial: 019D389C0859765C66C1AD0661F7202F3D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLEo5rOzN4eeB5-zC8CKU8MIT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.mft
Manifest number: A7
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: ejhx-gadggmweDD7LTvGkXuubDk.roa (hash: qceFGO0N3SsqKOwEV1zGkAfuEl6PCwI7cu5tB/f/1Ak=)
2: mmLEo5rOzN4eeB5-zC8CKU8MIT4.crl (hash: d0sIqCqiskPBtGQpgnwEMo2k6PN95UMysDo+wes+yc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmLEo5rOzN4eeB5-zC8CKU8MIT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:08:59:76:5c:66:c1:ad:06:61:f7:20:2f:3d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a62c4a39aceccde1e781e7ecc2f02294f0c213e
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=ca1365d62bf8b06a0cc69adf561b290179833ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:7d:e8:26:9f:3e:4e:e9:fa:18:9e:0e:56:
d8:a2:3c:2b:d7:7a:96:d9:2c:78:26:8d:5f:cc:d1:
27:c2:f5:e0:fe:bc:b1:11:c2:ca:04:24:ab:19:7e:
e9:a9:40:dd:b3:fe:a6:82:51:9a:9b:4d:d3:ca:63:
9a:45:8c:af:fd:9c:e0:fa:44:dd:11:15:8b:1f:b0:
c1:43:ba:cf:39:1f:35:0b:a1:eb:78:18:06:8d:62:
db:ab:36:e4:29:f0:3d:26:2a:05:bb:a0:dc:16:fe:
4e:ae:70:cf:25:c0:86:54:95:1a:72:b9:2b:f3:30:
86:59:36:e2:9c:a4:7a:54:51:6e:f9:21:42:e8:c4:
19:d1:dd:af:8d:1c:3b:26:61:00:95:31:f6:5c:e2:
3a:7a:b7:97:dc:31:f4:2c:00:a5:77:53:bd:b1:69:
67:4d:3a:a8:f2:7a:d3:a2:3c:1b:58:b6:3d:20:e1:
c4:ab:22:47:c0:6e:4d:cc:b7:e2:6f:97:7d:f9:52:
9c:0c:7d:f4:a5:ab:c0:c5:cc:74:7d:eb:50:95:d3:
ae:ae:6f:31:85:a6:5c:3c:ed:e2:5e:9f:f5:a0:a7:
7d:8f:1d:f9:79:4d:fc:89:c6:f3:d5:49:c4:71:31:
45:e3:bf:15:6d:ae:eb:c2:70:53:b2:24:2a:c7:96:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:13:65:D6:2B:F8:B0:6A:0C:C6:9A:DF:56:1B:29:01:79:83:3E:F1
X509v3 Authority Key Identifier:
keyid:9A:62:C4:A3:9A:CE:CC:DE:1E:78:1E:7E:CC:2F:02:29:4F:0C:21:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLEo5rOzN4eeB5-zC8CKU8MIT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a9:02:90:83:24:4a:68:71:63:a1:82:6c:66:c6:f1:cb:5f:
5e:10:f5:31:08:f4:c8:c4:7d:9e:80:ed:35:e5:08:31:5e:fc:
da:c2:76:67:55:72:43:4e:62:00:f3:71:de:11:20:0b:d9:21:
8f:82:db:33:00:fa:44:fd:13:11:b4:e2:38:50:5f:82:13:91:
0c:3e:df:cf:a8:75:5a:73:0b:1b:68:69:67:b5:2c:57:62:fb:
89:8b:99:a0:96:db:da:ab:84:c3:76:58:4b:17:38:3b:22:36:
b9:e0:6f:20:a2:9f:dc:fe:3e:5b:04:45:81:91:a3:bd:d0:2c:
9f:94:d4:2b:7f:ec:11:bc:73:5c:cd:43:59:a4:62:88:b4:74:
56:8d:c9:3e:7c:41:cb:85:e7:e1:7f:ae:fc:d0:f4:5c:97:25:
ad:6d:be:a5:c4:db:56:ca:c9:0b:74:bf:58:ff:15:10:d5:71:
63:40:af:1f:80:50:c7:cf:01:e5:70:62:3a:61:1c:9b:21:1b:
5b:b8:dd:4b:03:a6:4d:2e:fb:1e:39:38:c0:d7:0f:13:9e:82:
72:bb:f2:be:50:d4:18:38:d7:ac:5f:b0:ec:9c:8f:58:5d:53:
d0:01:f6:24:d6:a9:39:07:b7:73:de:e0:52:75:03:ec:ec:67:
cd:43:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:31 2026 by rpki-client