Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
File: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft (raw, json)
Hash identifier: TmFpovzCiwYD8I2vda1U9PdyfxJ7NtVD+srU5SGgheU=
Subject key identifier: 02:04:A9:58:8F:1D:AE:AE:B9:46:50:07:0D:95:4F:0F:1C:54:22:F8
Authority key identifier: 9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
Certificate issuer: /CN=9b792de70f33b82882542bef23b18da97538ca04
Certificate serial: 019DA4C1E117ECD2499B8FF85B57BFC62064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
Manifest number: 16CD
Signing time: Sun 19 Apr 2026 08:01:02 +0000
Manifest this update: Sun 19 Apr 2026 08:01:02 +0000
Manifest next update: Mon 20 Apr 2026 08:01:02 +0000
Files and hashes: 1: G2OQOrRbStQFRQnBFH5JsZK3fzk.roa (hash: J+Ruik9jZ8APiFx+KnGjdD7/sHBg8DbjFfn6BOTSsX4=)
2: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl (hash: WG4GiPEr/L2mMdMXYcSYGgpQLYclAVDbx1KOUPEkOdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:e1:17:ec:d2:49:9b:8f:f8:5b:57:bf:c6:20:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b792de70f33b82882542bef23b18da97538ca04
Validity
Not Before: Apr 19 08:01:02 2026 GMT
Not After : Apr 20 08:01:02 2026 GMT
Subject: CN=0204a9588f1daeaeb94650070d954f0f1c5422f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:58:3d:98:d0:3a:eb:e4:be:0c:bd:7f:7f:20:
e8:57:38:e9:cf:53:25:9d:ff:75:6d:f7:ff:07:7a:
07:49:1d:4d:c9:bd:41:f9:02:56:aa:5c:f4:32:36:
c3:c9:ef:24:a0:ef:aa:af:1d:b0:eb:37:f2:01:24:
42:b6:7e:e3:bb:ff:dd:91:8a:55:4e:d9:d4:b7:b0:
bb:06:3e:39:b8:83:91:b8:d1:94:01:34:a7:ad:e7:
13:1c:bb:ee:f4:e1:47:19:25:8f:b6:11:ee:24:1f:
00:e2:2e:00:1b:91:9f:05:14:fb:e8:5e:26:47:70:
6c:76:7a:ab:23:2f:fc:7c:3d:91:c8:2f:30:27:5c:
85:0b:ec:8c:32:a2:18:75:e4:64:fa:ba:8e:ac:50:
cb:7c:40:b5:01:d4:d1:28:33:cb:6d:38:a9:6e:94:
84:32:58:02:9c:00:d0:ad:85:f5:d3:00:88:27:82:
80:e9:d3:6f:62:8d:cb:c1:a9:91:4d:82:4c:b2:18:
49:9d:50:3c:be:7e:06:05:35:33:c4:c5:ea:3d:8b:
99:8f:ff:06:83:76:94:fa:0d:8a:20:ab:7e:84:9d:
94:32:7a:04:3b:d2:25:93:75:69:7b:d4:17:a1:c2:
2d:4b:6d:77:76:e3:4e:49:3e:03:aa:5f:cd:b5:fb:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:04:A9:58:8F:1D:AE:AE:B9:46:50:07:0D:95:4F:0F:1C:54:22:F8
X509v3 Authority Key Identifier:
keyid:9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:41:be:56:f5:d4:69:3f:ab:fe:ac:f1:9b:08:ec:ad:d4:f0:
cd:81:11:24:6a:cd:44:8f:75:48:e3:27:7c:ec:e5:59:6f:4f:
45:90:05:de:23:0c:b5:4a:74:4d:2b:39:ed:cb:b0:4e:3c:ce:
8c:e9:fa:1e:82:37:06:0e:a8:d8:af:50:ba:55:4a:ae:33:97:
58:12:36:62:7f:72:ce:75:ad:a1:3c:3d:a9:9d:37:d8:7b:3b:
0d:2d:32:40:58:5b:7a:4e:bd:ad:55:11:a0:88:5a:49:3e:46:
7c:ef:05:da:9b:6f:34:d1:14:dd:80:6d:15:4c:97:4d:1b:d1:
e7:8c:90:53:16:c1:63:eb:56:78:58:a5:8b:c0:88:95:2a:c5:
a2:6d:f4:f6:c4:cb:82:85:f0:32:7c:f4:14:95:b4:c5:55:3d:
77:bf:a7:6b:2b:a0:dc:ff:5e:8b:71:36:55:69:55:59:c5:26:
90:42:67:e9:b0:eb:47:f7:d6:ee:e3:9e:d3:f8:16:89:f2:80:
23:8a:60:85:a2:1a:f4:17:21:db:8f:24:05:47:f7:40:1d:8e:
83:07:fc:a0:b1:f4:46:2f:44:6f:c4:db:39:5c:1d:18:49:a1:
40:97:d1:aa:9f:64:48:78:72:bc:2a:9b:e5:2b:c9:86:34:f7:
1d:04:0d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:32:26 2026 by rpki-client