Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: FSF3bStZqOW5O5WBzIBA23NrIjXNrovElwHcwlV6xrE=
Subject key identifier: 80:D6:4C:60:3B:3E:B6:FA:7F:24:72:02:DF:F3:A9:43:FA:C0:6F:EA
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 019CABD92D15879F52A4178B076504B5FCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: dE6SPGrptH3d9QCEnooEUOhEcCR7zgleipE4QqIEico=)
2: s3PhyUwOeXidBN-bO1cXle0zxkc.roa (hash: m1yCoIslCCFawVsviGgtGHxVd9skui2ny3tBhKLzDTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2d:15:87:9f:52:a4:17:8b:07:65:04:b5:fc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=80d64c603b3eb6fa7f247202dff3a943fac06fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:2b:61:4b:c0:b3:e1:57:5a:00:ca:0c:17:
c2:8b:b4:1c:22:0e:8a:41:68:09:39:ac:46:19:18:
e9:26:fd:71:42:76:2c:ad:5c:c3:51:03:eb:a9:aa:
e7:52:2c:e5:c2:08:9f:e0:11:1f:52:b3:f9:bc:bf:
4b:94:cc:67:1e:f8:f7:4b:ca:38:01:03:3b:f5:25:
96:6b:34:3c:20:d9:8c:f9:b2:30:ca:68:67:c6:53:
b4:f3:e8:b7:b5:30:11:cd:eb:49:bb:2e:2c:b0:80:
80:46:18:96:c5:ec:7d:43:3d:60:6f:33:a9:29:9d:
ff:d6:04:32:9b:b9:9c:9d:68:80:b2:16:67:3b:18:
0e:a7:f9:4e:d7:8a:db:23:24:05:bf:f8:f0:42:92:
ed:cb:e7:56:7c:e3:18:7e:1b:62:d1:83:f5:31:77:
9a:22:99:62:49:4e:50:a8:2e:19:79:e5:8f:c3:55:
82:79:90:34:56:9f:15:6a:a6:7c:d3:a6:1b:c6:09:
07:c2:95:a9:b7:c5:ae:be:99:3c:48:bc:90:d3:66:
4f:36:9d:b6:53:51:d8:98:13:85:68:d8:6d:fb:51:
a9:49:85:03:1a:c7:11:73:88:cf:68:ce:21:4d:b5:
d9:1c:5c:26:c3:39:28:c5:87:b9:f2:8b:65:67:90:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D6:4C:60:3B:3E:B6:FA:7F:24:72:02:DF:F3:A9:43:FA:C0:6F:EA
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6a:a9:6e:ee:1a:be:68:63:c6:3c:c6:c3:cc:86:04:d9:e5:
a0:bc:23:c6:39:95:15:e3:d0:d1:b2:17:e4:4a:e4:e7:5c:f1:
78:7a:70:6b:78:19:6e:dc:9c:ae:28:cf:2b:96:6e:4c:6a:b9:
ed:f8:75:ea:97:e1:e5:d9:5f:d3:cf:c8:56:58:79:26:f1:24:
4b:f6:a3:17:cc:0e:7b:29:89:2a:1f:7e:f0:c5:e3:b1:df:97:
93:9b:45:ff:38:ba:3b:2a:41:f3:1a:42:69:22:8b:b2:c7:4e:
02:b5:6b:ad:d7:60:82:3c:e7:ea:99:15:a3:b1:e2:56:d7:bd:
79:13:97:2b:99:44:67:21:1d:8d:9a:7b:28:ce:2c:75:21:a4:
6b:36:ca:29:d1:17:a0:17:e4:4d:b6:4d:c1:ba:cc:c9:c0:f9:
7f:a2:02:c0:b0:b8:e1:fa:22:2b:d2:32:95:4a:05:d7:b2:db:
f4:e7:c8:b0:76:12:46:07:76:ce:ba:c0:13:d3:b0:09:a6:8b:
6c:d8:9e:ba:f5:4d:10:85:ff:aa:57:65:67:2d:50:3f:37:be:
46:b1:78:ef:f1:41:05:20:3a:d7:4e:71:13:ee:1b:23:62:21:
b4:d8:60:64:f3:a2:e2:ec:db:ed:1f:0a:50:dc:07:0f:3d:ca:
c4:52:a2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:05 2026 by rpki-client