Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: IKp8BbwOsAGn9H+K6sJQn68VAMgAaqXr4vjU0TK0tCg=
Subject key identifier: 50:36:3B:F7:FA:43:39:27:E4:5B:92:6D:45:92:CA:CF:F5:27:07:8C
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 019CFB07CE1B63528A0F50AAD74C356DE19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 1871
Signing time: Tue 17 Mar 2026 09:01:58 +0000
Manifest this update: Tue 17 Mar 2026 09:01:58 +0000
Manifest next update: Wed 18 Mar 2026 09:01:58 +0000
Files and hashes: 1: KaT0sW3jh_PPKcDRHkAr_6LGbFg.roa (hash: 4tEmgwJp5TqeJVAPv5jHwB4A533Y/KCzgRQwAZ4AUmA=)
2: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: fGdEnhSYUfghrIttQPobObulpYqZofgpgAkHTXRq/vQ=)
3: YpeHyUrRfHsUTh5A1_lsn9ecLdI.roa (hash: 54/I0U+2gsfxDHjTGitToFh36OuJx0rhyc8ObFsTIiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:07:ce:1b:63:52:8a:0f:50:aa:d7:4c:35:6d:e1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Mar 17 09:01:58 2026 GMT
Not After : Mar 18 09:01:58 2026 GMT
Subject: CN=50363bf7fa433927e45b926d4592cacff527078c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:35:e3:d3:e6:b0:2d:0e:5c:34:e7:47:3f:
31:90:97:77:f9:fb:0a:b2:fd:5f:bd:35:2c:36:57:
03:6e:54:de:fa:cf:ea:5f:19:a7:8c:1d:f4:1d:ea:
32:9b:91:3e:8d:5e:ad:62:56:03:b0:d0:52:fc:30:
55:7a:32:97:cb:db:e1:77:4c:4c:ec:4a:2a:58:2a:
b0:5a:31:2d:e0:61:a7:b4:de:4b:3c:9f:02:1d:c2:
e6:89:8b:81:5e:18:88:a7:83:ce:43:50:1e:35:b8:
50:f2:26:54:47:63:fe:97:a2:61:46:99:fe:4d:a5:
df:bc:22:34:db:c5:43:5d:aa:b2:7e:f8:9f:f4:73:
b5:0d:0f:b7:9d:42:e5:1f:7a:e8:8d:d1:c4:8a:4a:
81:2e:b9:9d:4e:fa:d9:ac:8c:ba:a1:a5:c3:32:dd:
4c:32:ef:42:28:39:98:9e:f1:f6:cb:00:58:3d:aa:
31:29:57:31:e6:aa:ba:69:28:c2:9c:94:5d:a1:9b:
7b:58:42:88:51:e3:6d:25:5a:8f:b3:38:24:b1:27:
7f:2c:74:76:17:6b:ff:d0:2a:20:8e:df:69:71:64:
c3:ca:c0:59:86:7e:0e:70:e2:91:79:91:3a:f9:c1:
ae:a2:eb:b5:10:77:15:a6:f7:6d:1f:dc:db:ee:2f:
b5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:36:3B:F7:FA:43:39:27:E4:5B:92:6D:45:92:CA:CF:F5:27:07:8C
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cc:d6:2b:89:2a:81:d7:c7:9b:fd:dc:86:84:1a:38:6c:6b:
d6:39:14:97:08:c0:1a:bf:cb:75:3a:8c:f1:f5:87:bb:2d:9e:
5c:ce:bf:ab:06:e2:61:54:ef:48:6d:0d:23:52:34:e5:f0:82:
2a:4a:75:cb:f9:bb:4d:17:dd:f2:19:0c:a7:a3:c4:36:b2:0b:
2a:24:7f:56:5f:80:26:1a:f1:08:d5:40:e3:97:d3:38:d9:1f:
09:69:3f:42:03:75:da:f6:81:52:e9:b1:14:a2:ee:0f:92:b1:
7a:b3:0f:0d:51:97:99:09:84:6d:a6:1a:a7:01:3c:ae:42:9f:
f7:fd:b3:f0:d4:a1:c7:07:f6:38:ab:df:47:ae:57:b0:f2:3e:
d1:62:72:24:5e:ce:c2:52:3f:4b:71:c8:3e:5b:77:83:03:89:
dc:41:c3:52:21:34:37:64:ff:af:46:8d:6b:8c:60:99:d8:f2:
af:17:0d:b3:fb:33:70:a6:32:6e:37:c5:8c:f9:3e:39:3e:0c:
6d:7a:b0:d9:36:6f:74:94:ac:f5:9d:de:3c:1e:8c:42:91:bb:
5a:0a:f4:cd:56:61:9c:fe:df:b2:c7:05:93:52:de:e9:90:c7:
ce:5b:f4:00:c5:11:70:1e:b2:a7:82:b0:df:c0:e2:c5:21:01:
36:33:ed:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 15:24:14 2026 by rpki-client