Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
File: mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json)
Hash identifier: Ut9/ut0OCdZH3f0aF8CyadjluNBqap9ElzN3Wz6l7bI=
Subject key identifier: 20:F1:F9:61:6E:53:BE:F4:77:CD:22:67:26:98:88:0C:CB:A9:46:9C
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Certificate issuer: /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial: 019CAD59BB282B9A91B4099CC3F3C04068B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
Manifest number: 17DC
Signing time: Mon 02 Mar 2026 07:01:04 +0000
Manifest this update: Mon 02 Mar 2026 07:01:04 +0000
Manifest next update: Tue 03 Mar 2026 07:01:04 +0000
Files and hashes: 1: ii2y3_3OasAT5vVqpy7EkID9V2Q.roa (hash: eHIEjyO4o7PMmo5LxlNBD9RVF/znC0lnkJD1jokxFWo=)
2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: HbXPRSO2hFxBPIn4sOKnK1+8DWh2EflO9dYw8tKaE/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:bb:28:2b:9a:91:b4:09:9c:c3:f3:c0:40:68:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Validity
Not Before: Mar 2 07:01:04 2026 GMT
Not After : Mar 3 07:01:04 2026 GMT
Subject: CN=20f1f9616e53bef477cd22672698880ccba9469c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:a9:14:69:6e:bf:31:66:c3:4d:21:15:7b:
e0:ba:fc:8d:ed:68:9b:5e:d0:e4:1e:f8:23:a8:3a:
d9:a4:31:32:d6:6e:c0:11:97:15:1b:e6:3f:cd:40:
8c:cc:ec:f1:03:00:73:e3:94:11:0e:18:d3:b9:ac:
cd:af:5a:48:7a:8e:9c:62:ff:6c:1a:05:39:9b:41:
9c:85:82:fd:ec:b9:c8:c1:ce:ba:94:68:d2:10:f2:
19:e7:d0:29:23:64:05:b9:6b:95:ec:d5:5c:2b:4e:
56:48:2e:d7:8c:24:fe:04:15:63:12:8c:ea:50:69:
0c:6e:6c:aa:cc:8a:e0:9a:63:f2:bc:68:98:db:a5:
7d:28:86:da:0c:f8:64:11:a7:54:99:8d:cd:9c:2f:
af:b2:4a:33:74:3c:8e:9c:84:7b:0a:49:98:cb:9d:
2e:52:f9:7b:5f:bb:25:96:25:21:2e:c0:3a:c1:17:
c4:99:32:17:8b:d4:cd:5b:90:8e:a3:5c:a1:84:60:
df:3f:04:c8:c2:97:97:7a:9d:f6:65:5b:60:66:67:
2b:dc:24:71:ca:1b:6c:b0:0a:ba:84:72:ea:88:8e:
5f:ce:e8:7d:42:a3:10:17:b9:5e:fd:b6:c8:83:dd:
0e:cc:cd:cb:0c:8f:ec:08:b9:a8:be:8e:d3:59:37:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F1:F9:61:6E:53:BE:F4:77:CD:22:67:26:98:88:0C:CB:A9:46:9C
X509v3 Authority Key Identifier:
keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d5:f3:db:b3:df:27:4c:1f:c8:60:21:62:1c:bc:9d:5b:a8:
a3:4e:11:6c:52:03:32:62:e7:4a:2b:7f:f6:c8:ef:8c:68:ad:
eb:6f:66:65:04:a1:18:99:92:a1:b9:4c:cc:a3:58:ec:d4:be:
5a:11:ee:64:c6:20:d2:8f:1b:77:9e:50:b6:58:2c:e8:9a:55:
4e:94:2f:2a:a6:7a:40:1b:d4:f4:e3:aa:1c:32:b8:9e:df:ce:
57:84:64:24:df:ca:ef:bc:d2:42:e2:90:27:ef:15:98:11:55:
17:93:42:3e:2a:7c:05:ad:a4:4e:b3:0d:82:35:69:59:7c:28:
00:25:4c:29:4f:dc:72:a9:c5:68:38:07:cd:a6:1b:b9:7e:66:
b5:20:75:d3:0d:3a:ac:f0:c3:8e:ff:f5:58:46:32:1f:1e:90:
47:e4:b7:9c:25:28:54:d0:a3:91:9a:66:69:3b:3c:f4:ac:81:
f9:57:e8:41:c3:fe:d1:12:27:2f:81:67:fc:7d:c6:3d:d0:91:
0b:36:ca:1b:9a:3c:6d:07:92:46:2f:63:88:ee:f7:40:5a:33:
67:c8:62:ac:f5:97:4f:90:91:07:29:de:41:7a:34:74:84:65:
3b:09:c8:35:fa:02:9e:bb:40:c1:43:51:60:23:03:c8:60:63:
81:99:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:48 2026 by rpki-client