Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File: M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier: w9DC5N4yicclQdcUgHrpKjvRty943ue7u35eCTeZNzs=
Subject key identifier: 16:1B:37:79:B4:FA:AC:40:52:22:66:55:E3:97:C4:02:40:6C:29:52
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial: 019CAC7E65A9371515F12C6B28204E627489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 03:01:30 +0000
Manifest this update: Mon 02 Mar 2026 03:01:30 +0000
Manifest next update: Tue 03 Mar 2026 03:01:30 +0000
Files and hashes: 1: FL9A-Wc7z5VMCe364E-fjxzBfRE.roa (hash: ICmFI8eTAGCEVNybXrRIRxi+lptZELNrevDuYYLtLB8=)
2: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: BJk31c5i7BUXMy7TOBHMHFZHxpzzujRODEBT+NpEp00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:65:a9:37:15:15:f1:2c:6b:28:20:4e:62:74:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Validity
Not Before: Mar 2 03:01:30 2026 GMT
Not After : Mar 3 03:01:30 2026 GMT
Subject: CN=161b3779b4faac4052226655e397c402406c2952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:4c:a9:00:9f:1a:8a:12:23:81:df:08:69:
24:ee:a0:0c:46:c8:c3:02:66:9e:1b:68:63:ec:79:
4d:86:6e:0b:22:3b:6e:25:bc:7e:b6:26:fd:93:b8:
dd:9f:71:d8:b6:e7:bf:8e:54:61:64:2a:38:94:90:
0a:aa:9d:82:8e:6d:92:1a:ad:56:4e:e2:7c:0c:3e:
c8:0f:c9:14:d3:a0:ef:5d:6f:82:bc:9d:fe:d9:91:
37:2e:42:e1:ec:16:61:73:3a:14:21:50:52:20:53:
9f:1f:d6:f1:b2:bc:0a:39:84:74:ae:b0:96:50:21:
32:a6:f5:28:7b:d5:8c:4c:c9:e4:6d:bc:e9:c1:ee:
82:c2:16:48:3a:61:5e:2d:50:0d:07:14:72:7c:e1:
10:89:e0:00:70:67:f7:2c:70:e1:a5:1d:0b:00:b0:
e9:15:c2:92:89:ae:18:89:c8:6a:9a:ab:89:bf:c2:
aa:7c:3b:2d:52:91:e0:04:61:79:84:87:b2:93:25:
96:5f:10:12:a8:95:03:51:f1:06:bf:c7:c7:48:4b:
06:c2:97:55:ff:5e:59:8c:46:11:96:ad:98:29:20:
bd:48:81:2d:2d:70:76:bc:8e:c8:7f:43:99:86:b0:
93:e2:83:de:2d:da:d2:dc:4f:34:9b:84:d9:59:e4:
3f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1B:37:79:B4:FA:AC:40:52:22:66:55:E3:97:C4:02:40:6C:29:52
X509v3 Authority Key Identifier:
keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:26:ce:7f:1f:4c:1c:a3:dd:8c:0b:c2:24:78:93:d9:31:36:
45:27:d4:2b:4a:55:8d:37:5b:90:50:a4:4b:33:e6:db:82:d8:
d3:bf:b4:57:ac:fc:11:ff:27:c2:5e:17:74:3d:92:0b:9e:8c:
90:cd:04:21:33:4a:7b:03:76:b6:aa:92:43:9c:eb:0c:29:9e:
88:68:16:e9:ad:b0:67:e2:8b:04:e2:20:aa:85:fe:72:cd:30:
37:20:89:89:a6:8b:1d:af:a7:3d:48:04:81:e7:f6:0f:b9:cc:
71:a1:2f:bd:16:88:27:9f:30:6f:ce:1b:4f:e1:fb:62:1a:89:
5a:fa:a8:e8:4f:95:aa:b2:db:58:6b:11:3b:d3:89:34:e0:26:
90:e4:16:5f:6d:44:fc:46:0d:68:b1:ef:e1:99:82:f1:3b:c6:
cc:d8:e2:72:47:2f:e2:4d:f1:b6:01:b1:0a:a6:2a:b1:05:a5:
44:d8:46:9c:e9:af:cb:df:48:26:a2:22:d5:6a:91:9b:d7:f3:
d0:8d:fd:cc:ac:19:9a:5e:f8:24:96:e2:05:4a:5c:aa:42:87:
f6:53:26:bd:a6:37:37:83:f7:67:43:28:6f:b8:33:75:62:2c:
73:20:99:fc:ce:d3:f5:88:0d:5c:90:22:56:f0:f2:c0:16:f2:
58:ba:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:16:19 2026 by rpki-client