Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
File: mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json)
Hash identifier: GDZF+OOz/CYWaSpnN20YvygySqrkVXQbiEuSKq/O2ns=
Subject key identifier: E4:8E:CA:D1:FB:3F:7A:34:57:08:A8:B9:D7:C1:75:8C:A1:C4:99:61
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 019CB091E495EC2BF93B242D12ED7825C76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 22:01:16 +0000
Manifest this update: Mon 02 Mar 2026 22:01:16 +0000
Manifest next update: Tue 03 Mar 2026 22:01:16 +0000
Files and hashes: 1: 07lXNimrQBF3__ddGT3TZzLhskg.roa (hash: eoEGjhgMY6OcoxgLUe7rr3k+ew/IBEiDnKUPvz0TNYw=)
2: T3vBUADVziYVCPfMjFB5sh1dYd0.roa (hash: K9dDJUVzUK8TiZfC61uyK9tw2jY/KL9Z0G2brWNRTIY=)
3: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: SFkh52G7KYdXmVnX+6R2PtFjV6QMMfl26iuOhgmaW64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:91:e4:95:ec:2b:f9:3b:24:2d:12:ed:78:25:c7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Mar 2 22:01:16 2026 GMT
Not After : Mar 3 22:01:16 2026 GMT
Subject: CN=e48ecad1fb3f7a345708a8b9d7c1758ca1c49961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:45:2c:39:34:c3:96:49:31:87:cb:8d:b5:b6:
49:08:98:1f:de:35:14:fd:6f:52:20:5f:34:37:c5:
ea:1c:36:d4:af:42:5e:84:7a:78:6c:09:ec:42:33:
bd:0f:6c:a0:d4:96:68:07:7e:65:8c:73:6b:2e:da:
f3:7a:bb:dc:47:1f:10:47:69:8b:37:dd:63:9e:fa:
89:8f:86:2e:81:48:98:93:f4:9e:9b:e5:7c:12:a7:
c0:5c:43:c9:66:af:cf:49:4a:da:08:27:41:3e:13:
cb:fa:f6:97:2b:ec:cf:63:96:07:84:96:a9:39:09:
c6:5a:94:1f:9c:77:72:61:e8:fd:36:79:3e:6c:c6:
e8:d9:89:a1:ff:41:c2:c8:4a:04:02:c5:69:d4:2b:
68:71:6b:f4:a8:71:63:9b:76:48:5b:e7:40:22:52:
a8:dc:de:75:36:73:11:18:3a:14:8c:7a:b3:c9:de:
a7:8e:6c:21:c1:d4:b5:1e:bb:9e:1f:22:4e:d5:cd:
a4:45:1f:9d:7f:12:79:58:67:9b:b3:9b:d6:bc:1d:
69:c1:2d:80:a2:96:da:7f:17:18:15:93:de:76:5b:
a5:6c:d2:e0:40:83:b5:59:63:91:bc:a9:bd:17:e6:
64:6d:2d:2b:6d:d5:42:2a:9a:ef:f6:07:f6:07:c6:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8E:CA:D1:FB:3F:7A:34:57:08:A8:B9:D7:C1:75:8C:A1:C4:99:61
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:b5:34:5b:73:32:2e:df:a1:5e:66:68:5e:60:42:65:50:b1:
bb:5a:23:21:8a:a0:99:61:c8:9c:0e:6a:df:6e:31:bf:35:30:
56:59:3b:e5:07:bd:53:da:1d:7a:85:e6:ba:3d:72:54:4b:99:
51:1f:2f:6e:69:d5:ab:f2:05:2e:9f:13:39:84:f3:b1:1d:46:
fa:cc:3d:31:a4:bf:f9:23:af:06:29:af:49:16:7d:98:ac:f5:
5a:af:a8:99:ae:3c:4a:f7:d0:1f:07:c7:cc:2c:b7:e0:f2:61:
66:36:9b:5f:f1:0e:43:c9:f0:fd:23:de:a1:3f:6b:d3:7b:36:
c9:16:b2:a3:0a:39:d2:a0:e2:9f:c2:fc:a0:20:4f:02:47:13:
35:93:2c:c7:97:ce:28:4a:c8:6a:fb:30:3b:2a:79:a5:09:a4:
19:d3:b8:46:d3:ec:54:e0:b1:60:67:9d:8e:81:f7:be:6f:b0:
57:ae:21:0d:b7:1d:49:0b:b5:f4:34:4a:21:4d:43:12:b4:ad:
24:91:fb:47:99:14:92:7e:48:11:28:65:53:b9:09:5a:01:eb:
59:f4:11:1d:01:56:a2:02:a6:5e:6b:d4:91:6c:ee:80:71:47:
c2:c1:b9:40:75:ac:be:9a:03:f1:48:e1:e8:24:fe:b4:73:f6:
30:54:33:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:14:33 2026 by rpki-client