Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: KIOR5KhQAiWjoGccigoGxnLy6e5uTqd/07SZOEtbjqg=
Subject key identifier: 05:32:40:7E:B2:F3:DF:8A:2D:F7:F9:3B:60:CD:DE:BA:B1:67:D0:CB
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 019CAA21886DEFE3366C4AE940F2201026E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 16:00:50 +0000
Manifest this update: Sun 01 Mar 2026 16:00:50 +0000
Manifest next update: Mon 02 Mar 2026 16:00:50 +0000
Files and hashes: 1: UlgMubvL0b05NPo0OYBZNNMYbpc.roa (hash: 5BRGLDe+CLca7bIM6Jp7/JjKHJiwcAuqklCH8T20ndI=)
2: WaF459Cc2uKlfeZQW71nNqM2m1o.roa (hash: INQ6UPfyYeMJRdxCsd5oJRH61VvqzRfFQEhDkUi1R2A=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: aUClap1mLZbHJ5fCYKNkXAtYPboJatLee/qiEIT0DXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:88:6d:ef:e3:36:6c:4a:e9:40:f2:20:10:26:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Mar 1 16:00:50 2026 GMT
Not After : Mar 2 16:00:50 2026 GMT
Subject: CN=0532407eb2f3df8a2df7f93b60cddebab167d0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:1f:c6:34:c5:13:2b:7c:8e:64:38:a9:b9:
9e:2d:b9:c5:25:35:f5:69:54:1a:55:7e:04:f5:47:
af:62:b2:4e:a9:e4:31:c9:dd:14:6e:3b:ab:14:88:
73:87:a6:f8:e1:43:1f:71:99:41:11:5f:fb:b8:bf:
ae:9c:5e:97:46:07:bb:f5:2f:c6:8a:37:02:85:9d:
1d:8f:7f:ed:16:43:65:77:52:55:08:10:4a:f3:a3:
4e:6b:83:16:54:3c:61:d0:b7:6f:f9:dc:d7:1a:fe:
22:d2:f5:63:a7:2f:ec:f9:b7:93:58:60:79:37:51:
82:56:25:b6:5a:1c:68:a1:bf:44:0b:57:75:f4:46:
11:f1:38:b1:48:cc:bf:e9:70:73:d5:2e:66:01:84:
db:fa:09:91:6d:07:92:76:45:0b:80:44:d2:3f:6c:
60:9d:62:30:f9:d4:e2:ed:85:03:1f:6e:ab:f9:9c:
73:7a:03:4a:56:af:4c:29:c7:8b:0e:8d:9b:dd:1c:
32:39:c0:82:2c:e2:66:95:f8:ab:89:38:95:cd:35:
9a:85:89:be:a7:29:94:12:e5:c7:e2:e5:ee:b9:be:
13:3e:b1:c5:5c:17:d2:22:cf:f4:d5:90:cc:94:db:
99:5f:66:a9:3a:36:de:9a:f7:8e:13:cf:b1:78:5b:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:40:7E:B2:F3:DF:8A:2D:F7:F9:3B:60:CD:DE:BA:B1:67:D0:CB
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:55:40:2b:70:63:4c:2e:9c:6d:28:2c:55:73:13:10:0f:dd:
18:2f:e6:aa:70:de:71:5d:06:f9:3b:48:0a:f5:56:de:c6:5e:
cc:b0:ea:4a:aa:bb:44:69:3f:eb:15:ba:f5:0c:bf:ce:8a:e6:
99:dc:94:f0:a0:93:7e:cc:ca:b2:40:13:7e:08:53:e4:1c:18:
7c:f2:32:c8:23:87:84:6e:57:a1:75:26:6f:b2:70:a8:fa:31:
c9:df:48:da:8e:2a:94:50:72:46:68:67:7b:cd:8a:93:95:eb:
8b:ee:3d:22:38:b4:29:6a:47:60:ad:2d:a8:6a:1a:66:a8:ba:
89:36:ee:2d:e0:9a:ce:27:c9:66:36:5d:44:59:1b:4b:37:b7:
cc:8e:91:60:00:01:d3:45:c6:a7:49:c0:d3:41:e1:ab:12:33:
64:e3:0d:3e:39:02:91:54:50:72:a8:46:1b:9e:4b:01:6f:54:
98:99:9c:00:68:23:02:ee:ae:01:5c:68:89:87:9f:19:e6:97:
f2:3f:f8:5f:67:dc:5e:06:5a:90:1c:68:2e:29:4b:2e:ce:f8:
a6:4b:49:a7:57:2a:01:98:ec:e1:1a:b6:66:1a:0f:3b:b3:a1:
6c:3d:59:3f:67:d8:0d:9f:a8:cc:d7:e9:a1:d4:92:bc:d5:0a:
57:5c:11:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:26 2026 by rpki-client