Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: X36LXNcdeds1D6tiBekqrZSGWrSz5+8+vD15T19oR+w=
Subject key identifier: D0:87:F3:2F:39:39:6B:6C:89:8C:80:FC:44:35:52:3E:E1:C5:C3:47
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 019CEA13B05C216358452519747061406D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 17BE
Signing time: Sat 14 Mar 2026 02:01:24 +0000
Manifest this update: Sat 14 Mar 2026 02:01:24 +0000
Manifest next update: Sun 15 Mar 2026 02:01:24 +0000
Files and hashes: 1: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: WFsRuZsf8QSuPjzgtIVHF4Oheju+nG1HRL6gdKPt/Ls=)
2: jO9rf4-cCHZRF2KoiLta2NyAQgU.roa (hash: UwmPs36c2ef9tHjcukHaPVItxdtDMmpbGOtpHRoCvf0=)
3: xn4i-fiHxOz0VUsB8YhWKLghbLs.roa (hash: Ptihx8qc04YVHI7Uz+aNOpCGFom4Sx5jCTJsyxvgVYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:13:b0:5c:21:63:58:45:25:19:74:70:61:40:6d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Mar 14 02:01:24 2026 GMT
Not After : Mar 15 02:01:24 2026 GMT
Subject: CN=d087f32f39396b6c898c80fc4435523ee1c5c347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:f2:0d:79:79:19:78:01:8e:71:45:d9:01:
7f:ae:9a:95:de:c9:a7:d5:63:86:2c:8e:02:51:79:
24:cf:fb:af:0b:42:52:8d:48:b9:54:6a:df:4c:19:
db:fa:dc:a0:d4:ef:1c:cc:c5:36:91:ef:9d:1f:32:
15:7b:29:4b:dc:38:60:31:c0:3f:36:54:bd:45:34:
97:2c:b7:01:73:c8:11:cd:71:49:0e:a1:f7:90:ee:
1b:93:de:68:56:f2:0c:93:69:ea:6c:4f:3a:ad:93:
47:29:b8:08:9f:28:e5:88:82:98:e4:02:8b:49:b9:
d8:5d:02:d2:c4:e4:35:ac:d1:4c:ca:fe:d7:a9:8a:
22:eb:5d:e9:00:9d:8f:3d:42:08:7b:5d:70:d2:f6:
7b:e7:f3:d4:11:54:62:fa:b4:ac:38:f0:88:fc:36:
d8:b9:76:36:de:6a:c4:4e:ff:a8:a8:8d:4d:7d:1f:
4f:7a:a4:47:dd:3c:88:64:a9:20:66:75:43:eb:59:
19:4e:83:33:04:99:f0:90:e7:83:0b:6f:d5:2d:89:
94:7b:8f:a3:19:b1:55:be:f3:ef:84:26:b5:de:db:
8e:68:36:46:7a:ce:e5:02:ee:ab:f3:0b:e2:6a:02:
53:43:7c:3c:70:89:1e:0f:ab:9d:00:8e:c3:ce:ad:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:87:F3:2F:39:39:6B:6C:89:8C:80:FC:44:35:52:3E:E1:C5:C3:47
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:38:8b:ca:a0:7e:a9:4c:63:2b:8c:00:a6:12:16:11:e3:7d:
4b:b6:d2:58:46:05:56:71:d6:ac:e8:9b:a3:27:39:61:f5:5a:
4b:03:0c:f2:af:c2:93:71:f8:7e:eb:0b:1e:fb:ec:0d:90:33:
0d:64:f4:c8:03:4c:46:a5:6d:77:07:4f:1f:7d:20:56:cc:b4:
48:69:23:69:31:4b:c7:2d:0d:99:cf:0c:b5:00:29:9c:dc:9c:
55:35:f9:7c:24:31:ac:cf:b6:55:0b:4e:7e:6c:d0:2b:e9:1f:
cb:b8:ce:32:7a:0e:ee:1a:a1:67:b4:84:cc:6a:33:dd:32:7f:
6e:94:52:0d:4e:b0:83:65:14:c1:23:d3:fb:cd:61:51:e2:6c:
a9:58:13:19:c1:35:75:92:85:98:a5:e2:4c:0f:7a:af:c4:3b:
d1:68:28:77:8c:17:b0:c9:c6:b6:71:50:bc:15:9d:85:7b:27:
6d:95:56:5d:ac:9a:e4:29:a8:2f:ff:0f:53:2b:12:d0:ba:43:
ed:47:6e:33:cd:f6:6e:56:13:73:d3:98:52:bd:c0:09:3f:6f:
b5:c9:39:56:a3:5c:b4:b0:90:84:10:4f:7f:77:40:ff:d4:0e:
ff:be:76:37:b8:d1:d1:f9:62:07:11:83:75:19:d9:1f:44:e2:
4a:7f:54:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:44:29 2026 by rpki-client