Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
File: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft (raw, json)
Hash identifier: jbH9+FQLQW1kVhkoe+brT1uIlr2jUX1PdJtylTnPE68=
Subject key identifier: 68:96:9A:31:BE:00:A8:69:2E:AB:30:95:3A:57:4A:CD:96:97:86:20
Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
Certificate issuer: /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Certificate serial: 019CAD22C884D38CA6900B562C73525A5874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
Manifest number: 115D
Signing time: Mon 02 Mar 2026 06:01:03 +0000
Manifest this update: Mon 02 Mar 2026 06:01:03 +0000
Manifest next update: Tue 03 Mar 2026 06:01:03 +0000
Files and hashes: 1: JY_xv27BSE0PmJzxtxeH3ELGERo.roa (hash: 7ZqKA1QkpMvfCfkiUQ38tlesyzt3GalUpSbgM/pSlcA=)
2: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl (hash: ktG1COh9HypB03+MdhKF71I6jr8WymjkPlodJ4sxGz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c8:84:d3:8c:a6:90:0b:56:2c:73:52:5a:58:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Validity
Not Before: Mar 2 06:01:03 2026 GMT
Not After : Mar 3 06:01:03 2026 GMT
Subject: CN=68969a31be00a8692eab30953a574acd96978620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:3b:ef:60:a0:c1:77:68:f7:09:34:71:64:
91:2d:0e:2a:ca:5d:06:18:03:76:22:6d:c3:f1:12:
f5:64:50:5f:fd:11:11:d0:e6:2d:0b:8e:d8:c2:33:
5f:4b:12:06:ee:87:4f:ae:c3:de:63:db:9c:6c:d9:
32:76:86:dc:39:00:07:8c:bc:a3:ae:18:40:a9:40:
85:35:f9:56:db:9d:92:c4:00:a6:b2:d9:44:46:13:
9f:a8:ee:11:d1:0b:f8:24:36:4d:c3:5e:b2:b5:8d:
04:22:d5:a9:cd:18:89:41:10:32:2c:b4:7b:47:1f:
fb:e2:91:ae:22:80:14:f9:73:6f:e5:44:e0:6e:11:
63:1e:63:19:6b:32:60:4b:98:10:e9:50:f3:e7:66:
76:ba:74:cb:7d:77:05:a3:6c:b8:15:d7:61:0f:61:
5f:dd:2f:4d:2c:fd:d2:4b:a6:90:4c:87:b5:db:c4:
e7:5b:ad:5d:80:bd:8c:fd:5d:33:83:bd:19:97:36:
8d:ad:ac:a8:e1:4f:ad:64:e8:93:ed:9a:75:cc:61:
37:63:ff:f1:a7:6a:77:12:c3:c2:a6:ce:1c:b0:e2:
17:23:da:03:d1:33:1c:90:2d:2b:c0:89:76:5b:93:
94:7c:b0:fb:26:ad:6c:da:ce:8b:cd:2b:f4:df:69:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:96:9A:31:BE:00:A8:69:2E:AB:30:95:3A:57:4A:CD:96:97:86:20
X509v3 Authority Key Identifier:
keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a0:a5:ed:b6:c4:4c:22:d6:bd:66:69:45:0c:de:7a:94:c5:
71:f0:e2:ff:35:73:9d:ac:34:f1:df:37:69:c4:72:9a:25:2c:
1c:98:a7:fb:18:42:33:55:25:00:fb:9d:f8:85:26:21:34:27:
29:8f:09:9e:35:06:2b:21:31:cc:58:e1:9a:f9:26:f4:3e:f8:
0c:7a:9c:f0:70:70:72:1e:ce:83:07:73:92:81:ec:f5:64:be:
5d:bc:42:d5:9d:89:03:cd:22:fc:7b:3e:86:31:44:33:96:72:
bf:d4:ea:5d:04:a9:99:ec:7d:ed:8d:3f:a2:b7:b7:8d:b3:33:
bc:1f:21:2e:e6:55:80:87:2c:99:5d:46:4a:a0:c8:6d:e0:a2:
6a:3a:e8:1e:69:52:01:23:6c:b9:1b:b0:1a:b0:20:73:7a:01:
e7:9f:ce:72:99:73:d3:4e:43:16:1a:f7:43:4f:e6:26:02:21:
d8:23:e8:1e:ea:eb:af:ae:54:c0:0a:a8:e8:4e:06:57:4a:05:
41:59:aa:63:3f:4c:83:7b:c2:b7:99:59:5b:67:a4:46:d8:58:
ca:b1:04:fd:8f:e0:a2:b8:7e:b2:c0:5f:8f:07:11:9b:06:34:
37:98:6c:d9:0a:1b:d9:5c:18:f1:1d:82:90:ea:44:05:2a:16:
95:03:07:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:40 2026 by rpki-client