Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
File: m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json)
Hash identifier: gU5XjAECUYDzVdGJwxH0JS44PLbsu/hYyqOF09t62k4=
Subject key identifier: 47:60:A1:FD:6D:85:03:A4:B3:EC:06:1C:91:78:1F:E4:8F:FB:2D:AC
Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
Certificate issuer: /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Certificate serial: 019CACB4FD7E023A131F5E9DB1DB2E9AB71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
Manifest number: 13DE
Signing time: Mon 02 Mar 2026 04:01:08 +0000
Manifest this update: Mon 02 Mar 2026 04:01:08 +0000
Manifest next update: Tue 03 Mar 2026 04:01:08 +0000
Files and hashes: 1: 3M-I49wkG4qtVUQtqTf_KmrWNvA.roa (hash: iXuHTvqfqDOn3nAH4lrOfDQTC+bw79xI1HWf+6YE6Ng=)
2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: z9OwATwngqt3V9PG1Pc84TFgXTtaEnYdajggJLfy/so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:fd:7e:02:3a:13:1f:5e:9d:b1:db:2e:9a:b7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Validity
Not Before: Mar 2 04:01:08 2026 GMT
Not After : Mar 3 04:01:08 2026 GMT
Subject: CN=4760a1fd6d8503a4b3ec061c91781fe48ffb2dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:c5:ed:8f:d6:7c:31:a1:0c:81:47:5f:12:
a1:93:1a:f8:d2:04:ff:e1:5a:3b:8b:2c:e5:a0:22:
91:c5:9d:87:05:35:ce:d8:05:96:c8:6b:e6:30:88:
6a:9c:bf:e2:c4:66:66:9b:35:34:f8:0d:0d:a0:9e:
d4:d5:8c:26:3d:c0:91:85:87:bf:d5:bc:b2:66:ea:
6c:a7:c0:bf:bf:18:3b:a2:1d:70:74:f4:c9:f1:1c:
05:25:d2:ad:e7:3c:4a:4b:14:45:8e:9b:08:bd:e4:
db:fc:ab:91:0c:ab:0d:31:e9:f0:de:51:35:57:de:
50:7f:66:86:d5:bc:0d:01:8d:6e:3c:75:7b:3c:e1:
4e:fd:7e:ad:fc:7f:59:0b:71:54:6f:22:17:8f:15:
bc:d8:da:11:c1:a5:ad:1a:6a:36:dd:52:b6:09:eb:
18:7c:8c:b6:df:b1:f9:03:94:6d:9a:54:01:95:41:
45:d6:22:bd:a6:32:90:70:aa:49:cd:fb:0e:22:3d:
30:f2:ee:f7:c4:3a:04:f0:32:25:3b:14:b5:1e:7a:
eb:e0:5b:10:a1:d6:a2:30:71:70:43:ab:e5:3c:bb:
2c:a9:29:a4:ca:1f:48:98:f8:d1:df:15:71:c4:b8:
7a:79:e8:0a:d4:49:d6:d0:55:5b:ea:0e:2a:fc:b3:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:A1:FD:6D:85:03:A4:B3:EC:06:1C:91:78:1F:E4:8F:FB:2D:AC
X509v3 Authority Key Identifier:
keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:06:59:43:aa:0c:27:6c:63:4c:2f:c2:b8:f5:1b:3a:81:bd:
26:2d:d9:6f:a7:2b:cc:cf:54:d7:7b:b3:00:55:0b:88:8a:7f:
d4:08:21:ea:5f:57:81:26:ae:65:6c:42:6d:17:91:65:56:5f:
b5:06:ec:e2:53:36:e9:ea:e1:a8:42:f8:8e:be:b5:96:96:3e:
8e:1c:3c:f0:62:db:56:43:c5:ba:77:25:dc:c9:88:54:66:0d:
c9:e4:64:a8:1f:51:37:85:2c:9b:f7:34:1e:98:6d:83:ad:75:
75:b8:2b:9a:61:54:53:f5:cd:b4:0a:ef:ff:4f:25:5e:f8:17:
a8:eb:da:0b:24:6c:96:4f:01:f3:5e:5f:ee:8f:5f:cb:47:68:
2d:17:55:ec:a6:9a:fa:f2:2b:42:2f:fd:bd:e0:aa:9f:72:b1:
77:3e:93:b0:58:c4:bf:6f:49:b7:d7:58:09:97:d6:63:49:7c:
93:8f:87:f6:da:8e:ab:53:28:2f:7c:94:23:c0:b3:38:b3:b0:
b2:46:94:ee:b1:d5:f4:14:d6:f4:34:3e:b3:ec:48:e0:72:1f:
2c:32:2f:d7:c1:b6:8a:f2:b5:ed:89:69:34:f0:b7:29:81:e1:
ae:bb:b2:95:f7:a0:f1:7a:b5:71:f6:87:bf:d4:22:4a:5a:62:
82:1b:eb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:21 2026 by rpki-client