Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: L3CgqH5YQXHZUOWH1SAJQLKh/0vY3N9ZFoTE6/vDtOw=
Subject key identifier: 77:EA:81:5D:5C:F5:0F:0D:03:35:D8:F8:B1:E8:C2:E6:A9:B8:5D:2B
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 019CACB54EA29600281828F212C92EED3A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 13DB
Signing time: Mon 02 Mar 2026 04:01:29 +0000
Manifest this update: Mon 02 Mar 2026 04:01:29 +0000
Manifest next update: Tue 03 Mar 2026 04:01:29 +0000
Files and hashes: 1: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: zlgsV9C79GAQ/xdg9QPUETfnzZCnOvyemrFLXL+cyfs=)
2: ru9Lv6OqB7V-7WaM7CY9CuYMU9U.roa (hash: pn31EwFoa+kLu5aisTeRHil2IKacpnZCCu4FI8vc0Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:4e:a2:96:00:28:18:28:f2:12:c9:2e:ed:3a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Mar 2 04:01:29 2026 GMT
Not After : Mar 3 04:01:29 2026 GMT
Subject: CN=77ea815d5cf50f0d0335d8f8b1e8c2e6a9b85d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:69:b5:62:bc:2d:3f:6b:44:34:51:cc:06:
79:5d:25:e1:5c:65:6d:b0:a7:6d:20:af:22:46:a3:
1c:7c:7c:3e:e8:4f:b6:61:88:b8:b1:8c:4e:27:5a:
11:92:d5:42:b1:de:7a:f3:e5:9d:66:97:60:43:42:
88:c7:5c:9e:be:4d:c7:98:2e:5e:f8:65:bb:0b:96:
8a:9b:15:0b:e5:7a:82:bf:7b:4b:02:33:41:63:40:
88:3f:89:ac:b7:61:eb:ef:bc:7e:d8:2f:08:9e:f5:
06:cc:ab:a9:4e:ee:f7:f1:e2:a0:3f:00:70:b0:53:
f3:1e:56:8f:06:4c:6a:f7:a7:4d:7e:64:21:55:88:
7d:9f:b6:12:23:51:af:e7:e4:86:46:68:51:e3:ee:
78:d2:44:bc:1f:6e:77:0d:33:aa:2f:6b:b2:03:e0:
02:d3:31:47:03:a0:94:f3:4f:a4:ee:2b:7d:f9:f5:
3b:29:58:71:12:28:96:ce:2b:ed:82:f8:b6:1e:c4:
a9:e6:61:9d:0f:bb:11:50:1b:e5:70:fd:c4:c2:67:
27:86:f3:f7:4b:37:dc:13:fb:63:3a:85:cf:74:8c:
87:b3:00:73:61:df:50:f3:44:30:63:c2:8a:5d:5e:
25:ec:35:a1:e3:d3:95:9f:12:16:03:f3:2c:4b:57:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:81:5D:5C:F5:0F:0D:03:35:D8:F8:B1:E8:C2:E6:A9:B8:5D:2B
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:84:6c:3e:5c:83:14:33:65:f3:29:3a:6e:77:f9:39:34:ee:
27:0a:74:1b:f6:0d:af:c6:46:db:aa:41:ad:94:cf:9a:fa:cc:
fe:43:77:6b:31:69:16:b1:d9:fb:52:5d:76:ab:63:c4:2f:b0:
81:a7:ee:2f:68:41:05:0c:c3:a6:5f:34:10:24:cc:2e:77:ed:
e3:1a:00:e8:1c:38:e2:68:99:55:c2:12:8e:c1:29:b1:94:ba:
06:a7:af:a4:79:20:31:19:c9:8e:fa:7c:83:f4:37:1f:c3:10:
f1:60:86:d5:ad:92:93:04:bf:c7:45:b0:de:41:e6:28:67:a7:
98:55:a2:f9:69:44:9e:c3:92:07:19:f7:d7:fb:6e:75:5d:f1:
95:ec:16:ca:2c:14:0d:09:30:1a:bc:e9:8c:3f:30:08:41:f1:
92:17:de:5b:7e:3a:10:6b:ae:f9:21:45:f2:d9:be:32:93:f9:
b1:c3:7b:51:1d:36:68:d1:cd:f5:5a:a7:67:38:8f:05:8f:d2:
90:f1:64:5d:fa:41:2f:b2:e9:e9:1d:0c:eb:06:de:74:0f:02:
a2:70:e5:c9:e6:90:25:e6:43:71:31:4c:9f:fb:1c:a8:77:77:
0c:b2:a5:70:3f:21:f1:2f:84:19:c7:75:8b:4f:c5:c2:7e:81:
b5:32:0d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:12 2026 by rpki-client