Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
File: mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json)
Hash identifier: MIOUdjwRqnrGkBm8yXQhJbOjC2EDh1rcp4EilRY2uIo=
Subject key identifier: 2E:E9:2B:17:77:66:62:84:66:DD:30:BE:C1:F0:69:AB:5C:C6:F0:24
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial: 019CAAFD4AF7C00C20EE00F97F66C05F2FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
Manifest number: 0CB0
Signing time: Sun 01 Mar 2026 20:00:52 +0000
Manifest this update: Sun 01 Mar 2026 20:00:52 +0000
Manifest next update: Mon 02 Mar 2026 20:00:52 +0000
Files and hashes: 1: MB_fxyRovNDE1Ao_sqXvMCyvsHs.roa (hash: 1RlOpJPGUwPySnoc4bJ92X2BUeJ9PgaVyLOke+PwpWY=)
2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: quV7x60+G13Vqy957yyZPhV/Au2iZu4ni14EnVVNXt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4a:f7:c0:0c:20:ee:00:f9:7f:66:c0:5f:2f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Validity
Not Before: Mar 1 20:00:52 2026 GMT
Not After : Mar 2 20:00:52 2026 GMT
Subject: CN=2ee92b177766628466dd30bec1f069ab5cc6f024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:b3:0a:d2:82:82:e1:48:e5:84:db:d1:57:
87:e8:36:c2:65:82:e3:1e:e4:50:4a:68:c0:fb:30:
a5:9d:d5:1a:41:ca:7f:67:fb:4e:f6:a5:e0:7b:04:
68:d8:9c:3a:e0:62:ca:31:33:57:cd:2a:fa:71:00:
45:6e:3e:9b:65:40:66:5d:cd:22:6b:92:e0:cf:30:
a1:84:c1:d2:f4:f4:a6:2e:28:6d:91:73:be:92:ff:
66:90:e5:ae:47:27:11:1d:83:48:19:60:3a:f5:5f:
a6:11:42:26:02:9d:36:83:c8:49:8d:52:f4:0b:51:
93:6c:32:d3:2e:56:d3:6c:73:ce:47:19:62:95:80:
e8:89:9a:15:72:02:60:47:85:10:38:da:9d:be:27:
42:97:78:77:1e:f5:b8:b4:98:f0:36:1b:dc:9e:e7:
b7:c7:9a:cb:bf:85:2d:70:09:3b:78:04:4f:77:01:
9a:93:89:2b:81:d0:14:86:fb:d5:ef:c1:10:a6:8d:
28:da:71:0c:eb:25:6b:27:d1:64:79:67:a5:5f:73:
03:14:68:5d:33:d1:9b:12:5a:8e:d5:aa:48:66:b3:
8b:8a:ac:95:8a:68:ec:02:32:76:81:eb:2a:f1:a2:
05:29:cb:9c:54:66:32:07:e7:43:74:91:03:1d:6b:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:2B:17:77:66:62:84:66:DD:30:BE:C1:F0:69:AB:5C:C6:F0:24
X509v3 Authority Key Identifier:
keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b8:d8:b3:ae:a9:57:7f:64:5c:3e:80:41:f5:c1:8b:be:a3:
8a:3f:f2:b5:17:e9:bf:17:43:67:8a:5d:37:16:a4:33:a9:54:
76:5c:8a:28:06:57:ce:56:df:50:27:30:85:11:17:e2:f4:27:
cd:79:15:36:90:d7:da:d2:eb:4a:62:7f:78:99:d9:f4:5d:06:
a6:7f:5b:1e:2b:2b:e7:79:f8:0d:ed:39:ff:93:b3:21:07:f9:
97:fe:7e:63:b5:01:7d:4b:2b:d5:17:5a:06:5c:1d:6e:a8:2d:
6a:6a:28:8b:3d:98:00:0f:74:4f:f5:f9:51:63:ad:28:fa:ef:
1f:48:fd:cb:20:09:d0:2a:98:6b:fd:ff:9d:8a:eb:6f:e6:1d:
a4:8c:43:18:b9:a8:7a:e3:e8:9c:dc:89:f0:a4:5c:27:b3:1f:
ee:62:3d:d4:d9:25:8d:8a:d0:07:41:9f:9b:7c:44:11:d7:33:
02:66:14:26:16:59:10:79:29:21:65:87:e0:98:85:14:0b:1c:
e3:ee:df:c6:db:0f:6f:af:7a:ca:d4:48:fa:34:bd:3c:26:cf:
d3:08:51:cd:26:c9:fa:19:eb:d9:d7:f3:7e:b3:f1:3b:32:d0:
86:04:0a:84:19:98:fd:60:4b:a1:e2:fa:ee:b6:b0:ef:17:2c:
d7:b6:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:52 2026 by rpki-client