Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: SFp+VDFQIssHwOQmZgLlvo8Wj1YzSmNUGVt1joeHo/A=
Subject key identifier: D4:0F:80:9C:A9:52:18:84:65:D6:28:CA:8D:0E:64:77:C7:03:FD:DD
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 019CAB343AC3FBB1B6DAB2EE9602C5992E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 186E
Signing time: Sun 01 Mar 2026 21:00:52 +0000
Manifest this update: Sun 01 Mar 2026 21:00:52 +0000
Manifest next update: Mon 02 Mar 2026 21:00:52 +0000
Files and hashes: 1: 0ihzHauFogznBZ4D95qRfmh5DWY.roa (hash: pm2OFW8n3jM91O28PWSYiZEPtxsO4IG0tuEGJsYy+tw=)
2: aXqn4kbdTiISCg3qjch21kWiAS0.roa (hash: fWTEPBg8GhRwpF6veTh6PUPLm3Q1obhdo3c/16/83Z4=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: sCMY6E5ML12bn7EFKw640XZUyXz0Umrnq9wp+9QamoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3a:c3:fb:b1:b6:da:b2:ee:96:02:c5:99:2e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Mar 1 21:00:52 2026 GMT
Not After : Mar 2 21:00:52 2026 GMT
Subject: CN=d40f809ca952188465d628ca8d0e6477c703fddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:a9:76:dd:72:0a:01:8a:2c:5f:2f:de:9c:
4d:bf:fb:bb:64:7f:cb:d1:bd:9d:f7:bf:f2:4f:ff:
dd:1a:02:51:93:ab:9d:e6:ec:b5:a1:48:e4:b9:2c:
93:b2:76:f1:ad:00:9e:25:1c:9f:fd:13:3d:fb:e8:
10:d2:9c:ce:2d:8b:07:18:18:60:d7:f7:9c:da:18:
4f:29:df:f5:26:b7:cf:83:ee:19:8f:22:2b:62:4b:
ce:d3:bc:cd:3b:f4:ad:df:30:cf:04:0e:74:74:ad:
cb:0a:a2:19:e3:b0:16:40:71:e9:27:ac:5f:5e:77:
5e:19:86:c7:3f:96:9d:f1:47:e7:df:52:43:53:35:
d1:0b:59:6e:da:b7:46:86:47:14:27:4a:2c:2c:f5:
a1:b3:3c:9a:66:b1:a3:46:69:ba:20:ff:a3:80:14:
64:66:f4:22:d0:6e:4c:28:af:ac:4f:d1:30:61:0d:
23:fd:3e:ee:ee:c0:92:74:47:fe:99:6d:b6:c0:ef:
c4:bc:d6:67:c2:1c:39:fc:03:b8:08:16:eb:7d:85:
94:91:cc:fb:bd:a7:ea:00:f4:76:05:3e:3e:ca:a0:
47:c2:46:ec:cc:51:83:ea:8e:09:25:49:05:bf:21:
94:d0:2f:be:e4:d5:04:b0:af:84:2d:49:08:22:a4:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0F:80:9C:A9:52:18:84:65:D6:28:CA:8D:0E:64:77:C7:03:FD:DD
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8b:37:ff:26:b1:67:d1:fc:d0:b7:12:76:d6:37:b1:93:e0:
7b:9f:75:50:81:7b:00:81:d7:ce:b6:be:01:bd:bf:89:7b:5e:
90:d5:18:2b:b0:e1:d4:94:c9:ec:ee:cd:d8:76:48:f5:12:03:
20:18:0c:9b:a4:64:38:56:de:76:10:0b:52:06:3d:49:1c:02:
e6:77:39:f4:04:19:c7:61:76:2d:b8:09:34:85:83:b6:1f:7a:
f2:cc:23:a8:00:5f:09:4f:46:66:01:1f:f3:40:14:ff:62:0f:
67:a6:53:50:44:da:3c:b4:9b:79:fa:98:09:15:80:14:74:3b:
2f:eb:77:ba:da:d6:51:b0:12:6f:dd:36:b6:4e:dc:e2:d0:83:
df:f2:dd:32:29:68:fd:be:7f:7b:97:2f:67:1d:c6:66:7e:cc:
13:49:00:73:4a:eb:6a:be:e3:3d:0c:c9:78:d3:f2:c8:1f:fd:
2b:c6:cc:87:4c:d6:82:8e:7a:a9:89:3a:f3:96:25:20:30:5f:
8f:36:ce:25:20:fe:f2:82:6c:7a:d4:e1:09:db:94:6a:d2:55:
60:d0:8f:e9:b1:dd:a8:f4:80:b4:60:49:64:9c:3b:c1:07:9e:
66:05:45:cc:48:63:db:48:fa:50:24:86:01:70:0b:4a:83:46:
15:fc:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:57 2026 by rpki-client