Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File: mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier: 6R9t11WJV7YRv1yTnYus+RZxWat6Zt1051TbzUZGg48=
Subject key identifier: C6:3A:8E:6E:6D:8E:C2:ED:20:2F:7B:AD:FD:7A:4D:63:E0:3A:59:0D
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial: 019CAD902D774295C57EE13E2FCD5031A892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number: 16D0
Signing time: Mon 02 Mar 2026 08:00:32 +0000
Manifest this update: Mon 02 Mar 2026 08:00:32 +0000
Manifest next update: Tue 03 Mar 2026 08:00:32 +0000
Files and hashes: 1: HMeFeWtw9N7rk3aYVC_VTWXgzMM.roa (hash: iTEJqDydJmTzPI0AxKyGiy/lzp+8Axti0R4ZxzfqlZo=)
2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: BqiOBnaavJOuNQlSEEEVFaZ/wb1WP/rzb0WCX3gWJ4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:2d:77:42:95:c5:7e:e1:3e:2f:cd:50:31:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
Validity
Not Before: Mar 2 08:00:32 2026 GMT
Not After : Mar 3 08:00:32 2026 GMT
Subject: CN=c63a8e6e6d8ec2ed202f7badfd7a4d63e03a590d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:a6:cb:16:67:31:2b:6a:71:86:80:38:51:
e0:97:55:4f:4b:13:80:57:1a:60:96:cb:ec:14:85:
8a:63:84:2c:b6:c4:1a:e5:7e:03:14:18:c7:c9:5a:
ee:d1:28:7b:13:56:44:0d:16:82:b6:31:aa:9a:52:
57:f2:b2:bc:b9:69:65:45:56:5b:fd:62:40:fc:c5:
67:03:a7:7d:48:ec:87:61:0b:fd:9b:f8:54:6f:61:
b8:37:52:8a:6e:36:7e:09:e3:d7:b9:8c:15:0e:4d:
b0:7c:42:f1:c0:26:d2:ea:dd:69:9b:0b:51:13:30:
84:ae:b7:8e:a4:77:92:b3:32:f6:f5:1f:95:21:89:
2e:8a:9c:b7:73:c7:46:cd:c5:c3:84:a3:f3:d8:0f:
3c:8a:50:59:78:53:61:2c:3b:94:2b:43:a9:8f:89:
91:1c:d2:af:dd:34:8e:9e:a2:02:a6:c5:26:45:40:
f6:d3:26:4e:52:1b:57:f1:9d:61:41:85:e2:22:b8:
ef:a6:cb:02:f3:6c:80:ae:5b:b4:e0:d9:a4:2f:ae:
4b:c1:aa:f5:d2:f2:db:f2:99:ad:68:b4:90:78:f9:
67:e0:77:ae:23:b5:84:d8:e8:ae:bf:46:b1:d4:b1:
76:35:42:64:b0:e4:5d:36:21:61:f0:2d:25:9e:51:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3A:8E:6E:6D:8E:C2:ED:20:2F:7B:AD:FD:7A:4D:63:E0:3A:59:0D
X509v3 Authority Key Identifier:
keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ab:77:a3:bb:a1:af:b4:79:77:b8:e8:77:f8:f9:02:db:38:
26:8b:a4:f9:b0:a2:e4:83:84:c4:51:fa:23:f0:08:fb:cc:a4:
ef:77:38:e6:3d:3a:28:43:fb:4c:41:f4:32:a5:b2:d6:71:6a:
d0:78:74:06:99:8a:66:3f:a8:3f:b2:b4:cc:ba:e5:7a:c8:50:
e8:85:a1:93:89:8c:3c:6b:bc:c6:a1:93:e6:c4:8e:1b:3c:29:
75:6e:b0:e5:1c:6e:a7:0a:54:30:2d:56:3f:42:81:d3:da:69:
33:41:d8:76:92:4a:0a:09:ae:ec:31:d2:ad:cd:ca:2a:e1:1a:
e8:bd:78:d7:63:c8:3a:50:18:6d:1c:66:2c:27:62:c3:2a:84:
02:9d:44:f5:67:90:d6:0d:56:fd:5c:6e:2f:70:3a:3d:00:f5:
37:4a:c1:bc:a4:1a:70:75:fc:af:53:30:ec:8c:c6:d6:1f:02:
bc:e5:56:cf:96:b4:1f:b6:b3:f3:af:c1:3a:c6:09:80:9e:17:
24:03:97:a5:82:60:08:6a:e2:5f:07:1b:96:e4:d9:b1:8e:7b:
a7:ac:1c:23:c7:56:20:f0:44:1f:9c:03:e0:5c:d5:f0:e8:40:
d9:cc:be:8f:9d:d9:33:6b:fa:44:17:ed:ea:4c:af:ac:4c:99:
90:42:aa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:52 2026 by rpki-client