Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
File: m4Me6Uw3ubEVnH13MpNhgatUHYA.mft (raw, json)
Hash identifier: TZOx/ShSQ8AsWPHIM4G7lj2/uo85cXnOtDp2BMV7nZI=
Subject key identifier: 2F:B1:A6:86:E3:C8:46:30:D7:4C:56:9C:B9:7A:98:E3:5A:4E:E5:2A
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Certificate issuer: /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial: 019D389BEDD5720613A2574CD9EA55FCAA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: MlOfNk7Q3shUXI9a3n1KJjtXLCU.roa (hash: AIXKvNEgmoHFwpe6ZZaU57lVrd3l/1EtmwOvF6+bSNc=)
2: m4Me6Uw3ubEVnH13MpNhgatUHYA.crl (hash: QVSg0Qu+hqrmrvaH5p0u96NFVx2eE70hIdGP6lnPk9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ed:d5:72:06:13:a2:57:4c:d9:ea:55:fc:aa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=2fb1a686e3c84630d74c569cb97a98e35a4ee52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:45:6e:6c:61:3b:15:c9:4c:8b:bf:a0:b1:
cc:54:5b:ee:f6:f8:d8:d3:5f:6f:37:af:00:6e:ca:
5a:7f:07:9d:f0:07:8c:af:3d:c6:b9:9c:fd:66:aa:
41:59:89:87:9c:f1:ab:00:20:1a:a0:3e:1a:72:ee:
23:51:78:f3:a6:56:07:1a:a5:41:e4:1a:3d:a1:4c:
6b:05:cb:d8:4c:6c:4a:4b:bc:88:98:7b:46:63:f7:
88:cc:8a:43:96:89:f3:56:0c:fd:f7:45:55:40:bd:
83:86:92:8e:8d:2e:cc:40:4f:31:a6:e3:60:fd:ba:
20:3c:cc:fb:7c:4b:be:e6:55:02:ba:1f:25:dc:cd:
7a:b3:7f:c7:9e:84:dd:25:1d:1c:47:16:9b:66:19:
69:ec:4a:0e:48:d7:b5:66:f9:e6:81:68:9b:e6:a8:
42:fc:08:85:d9:5e:2f:6a:9d:69:13:c4:42:36:fd:
bb:f9:83:90:12:32:43:55:d9:a9:58:c4:5c:3d:ea:
aa:49:3f:ef:f4:3e:52:13:aa:21:7a:79:e5:a7:f4:
37:57:c0:9f:0a:be:d7:02:5d:03:fe:ad:04:77:90:
8b:84:6d:da:b9:e5:2e:47:61:58:86:1d:dc:0b:e2:
dd:82:91:0d:d7:4b:12:ab:27:f7:96:b9:ca:10:60:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B1:A6:86:E3:C8:46:30:D7:4C:56:9C:B9:7A:98:E3:5A:4E:E5:2A
X509v3 Authority Key Identifier:
keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b9:82:87:18:8c:97:53:e0:08:21:28:57:ac:9d:10:25:83:
06:5f:85:2c:4c:ea:8f:65:04:03:fd:8f:9b:95:3d:1f:e6:f3:
d2:db:ea:30:e1:23:1f:42:8b:e2:40:3a:1f:f1:bf:7e:27:ad:
b5:03:9a:75:0a:35:e5:05:ab:f9:62:3d:5c:74:9c:b6:a9:cc:
1e:59:ca:8e:56:ac:38:3e:19:b6:a9:28:0b:fb:ba:44:64:69:
5a:b8:3a:ab:34:49:d5:c5:64:4d:b0:94:8b:05:33:59:d9:3c:
98:fa:79:42:f8:3f:cb:34:53:92:4e:e4:5a:9f:11:72:7f:49:
07:7f:62:03:35:c4:b6:27:de:ac:a8:08:31:61:e1:45:d3:bb:
3f:17:6b:1c:9e:9e:5e:44:ee:c9:f2:cd:0a:5b:f0:ed:f2:4d:
7b:c5:65:60:41:01:67:7d:76:d2:29:3a:ff:8d:53:2d:9f:20:
81:27:4d:34:a7:a7:f1:64:9c:40:93:b9:8e:c1:c8:36:e4:bd:
27:7a:89:02:2b:ec:ee:dd:b3:f4:01:69:96:2a:cb:12:95:73:
6f:92:c6:bc:66:80:41:2a:29:b5:49:2d:dd:f4:69:2b:fa:db:
c0:6f:2b:98:9f:1a:75:b4:f4:db:df:d7:e4:d1:ab:f9:a5:b6:
4b:e3:6e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:20 2026 by rpki-client