Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
File: mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json)
Hash identifier: rQVXh58Jcxq21isl4UpkX0VSHPB37uoVzJK7CKm17BU=
Subject key identifier: 5A:B1:07:5F:31:0B:8F:96:23:DE:06:19:6B:A7:EB:B0:25:BD:50:D1
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Certificate issuer: /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial: 019CAD90AF380093434A6EDBC80157900A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 08:01:05 +0000
Manifest this update: Mon 02 Mar 2026 08:01:05 +0000
Manifest next update: Tue 03 Mar 2026 08:01:05 +0000
Files and hashes: 1: celudLIkwqQs5BVcabVek4AUA_8.roa (hash: Z6ja4JJYaOm0UOAS7DT4QbK0buCK6md62bjvBxBcr0o=)
2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: mQZf23kXLP6it+aK/+rIn58PwE7tTwLatcVAhYzjotM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:af:38:00:93:43:4a:6e:db:c8:01:57:90:0a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Validity
Not Before: Mar 2 08:01:05 2026 GMT
Not After : Mar 3 08:01:05 2026 GMT
Subject: CN=5ab1075f310b8f9623de06196ba7ebb025bd50d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dc:29:e0:52:9a:b9:9c:ca:25:c3:cb:f7:2a:
3d:39:bd:76:1f:79:bc:38:c5:88:b1:74:6a:ae:ac:
e9:b8:9d:6a:30:23:cc:53:97:07:13:11:76:b8:9f:
5f:56:f5:c6:37:f1:50:1a:26:c9:4b:e2:00:b0:d6:
47:d3:a1:1d:67:57:7b:9e:45:3b:fa:6b:c4:dc:6e:
fc:05:29:53:3b:68:d0:ac:61:6a:79:34:f8:7b:86:
d5:2a:4c:93:a5:64:e9:35:ae:38:ba:db:89:77:1b:
aa:3b:e2:78:28:56:0b:89:ba:f9:fb:fa:d8:69:fb:
3a:49:45:e8:fd:3c:16:77:ba:23:0a:ca:ca:9e:5d:
fc:b6:6f:62:d9:28:b4:1b:38:cb:a9:ca:cf:c7:41:
97:ce:7d:86:c3:cf:d0:38:3e:96:1d:a0:0b:34:d3:
cd:a3:18:0b:b5:83:b7:2c:f1:0f:3f:7a:0b:b7:03:
a1:12:97:5f:d5:6a:a4:eb:40:28:a8:e0:dd:2c:da:
00:15:3e:4e:d4:98:71:c8:8f:c6:f7:f3:a7:5f:6e:
30:1d:9b:11:16:d4:19:3c:47:15:17:64:8c:6e:a7:
18:55:7f:4d:77:23:4f:91:0e:1d:48:15:bb:46:6d:
aa:78:22:75:0a:76:37:67:ea:58:8c:dc:aa:ed:9f:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B1:07:5F:31:0B:8F:96:23:DE:06:19:6B:A7:EB:B0:25:BD:50:D1
X509v3 Authority Key Identifier:
keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b7:fb:2d:4b:cb:58:39:85:9e:0f:3f:5a:07:6f:e3:63:0c:
e8:5f:d3:3d:da:ee:5c:51:3b:16:cc:71:01:de:a6:4a:72:24:
33:15:a8:57:00:09:b3:8f:38:98:f2:b6:39:ff:49:cf:bb:2b:
b1:57:5f:4b:26:52:4c:70:23:2f:6a:22:87:c3:14:5f:7b:34:
c8:8c:6b:7a:f0:60:6b:f9:d2:80:87:35:d8:7f:e4:69:c6:74:
0e:be:de:a9:77:b6:33:9f:2c:c1:88:d6:81:59:fd:5e:37:b8:
ee:2b:ca:33:34:33:31:9e:b0:4c:23:d0:20:27:f5:90:8c:cb:
ae:49:3c:f8:5d:45:87:37:72:12:15:fe:fb:92:4e:2a:48:35:
f5:23:ab:6a:86:94:b4:85:95:a3:04:4f:b9:ed:f1:3a:d6:94:
a5:dc:01:8d:65:f8:8c:ac:b3:50:e7:71:dc:36:9e:5b:96:ac:
d9:1d:bd:54:d5:bb:ef:da:06:2b:ec:eb:f3:65:ae:d7:31:94:
cd:ec:45:7d:ca:4e:db:0a:82:7e:0c:63:86:bb:9d:7e:0f:73:
c6:f8:6a:af:68:e9:41:90:4c:dc:30:ae:64:b7:39:b8:ef:03:
29:ed:9d:f6:e7:8d:20:fd:9b:26:62:f6:8b:50:31:f9:47:b6:
fe:b5:7e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:39 2026 by rpki-client