Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier: xReDIxNqoe7gImUhJQml7U5jZxqNP920GKg5iFXoPdE=
Subject key identifier: 7E:41:F5:71:2F:F8:19:F6:B1:F5:EB:C3:CD:FB:A1:83:47:48:83:3A
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial: 019CB02428D126CCA26DD75F249FB341E6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number: 0219
Signing time: Mon 02 Mar 2026 20:01:25 +0000
Manifest this update: Mon 02 Mar 2026 20:01:25 +0000
Manifest next update: Tue 03 Mar 2026 20:01:25 +0000
Files and hashes: 1: cAKVqYBd9IcAL6r2ZvxM_Qj1ndI.roa (hash: XqFaKsdiSRNsnwScS0QPlL53huZcp/xfhEBOIjWXbkk=)
2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: Hiu41kir1kvatk0Ag9BVzPB6NqVLipuG8TWnc/tNeNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:28:d1:26:cc:a2:6d:d7:5f:24:9f:b3:41:e6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Validity
Not Before: Mar 2 20:01:25 2026 GMT
Not After : Mar 3 20:01:25 2026 GMT
Subject: CN=7e41f5712ff819f6b1f5ebc3cdfba1834748833a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:70:65:86:c7:99:9b:ce:08:45:10:d5:05:
76:98:d8:d4:71:5c:60:4c:11:36:21:ec:0f:58:11:
d7:b1:77:58:03:05:6a:57:d2:a5:1d:2d:7d:24:3f:
fe:91:c3:6c:7e:30:92:50:91:16:ee:8b:ff:ab:91:
4e:e1:ee:d6:8b:7b:2e:75:49:ec:8c:fa:53:da:c8:
8b:9b:fa:1a:16:34:b8:8b:4b:27:aa:5c:ad:95:85:
18:a6:9a:37:16:b0:bb:9e:11:a1:16:c0:8d:b0:9a:
81:69:9b:88:47:7b:f3:bd:2b:95:9e:50:47:27:8b:
97:d2:45:15:77:c0:2f:6b:86:96:50:cd:39:7c:e7:
98:7f:51:69:ac:11:b7:a7:d8:c0:79:95:90:d3:84:
d4:c1:fd:26:f7:33:25:16:c9:56:65:bc:2c:50:2a:
7a:59:76:a6:7f:25:1c:0c:b7:a0:9a:df:00:8f:dd:
87:f2:04:09:61:3c:92:e1:dc:2a:f6:49:02:3c:34:
87:1e:27:68:93:8b:8a:e7:43:36:0f:5e:af:99:cd:
96:ed:23:a5:e3:86:db:63:d5:de:e0:44:e2:4e:96:
09:71:1c:61:9d:44:1a:ec:2c:81:72:c8:e0:46:bc:
ca:54:ff:1c:e1:75:c3:e6:98:0b:05:7e:f7:f6:b0:
67:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:41:F5:71:2F:F8:19:F6:B1:F5:EB:C3:CD:FB:A1:83:47:48:83:3A
X509v3 Authority Key Identifier:
keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2e:66:6a:91:3e:d5:47:78:1d:26:a1:70:e9:a1:99:28:34:
f2:08:82:e7:7d:e6:24:7f:b0:76:6f:a3:51:5b:45:31:f4:3b:
6a:f1:b2:0b:b3:04:1a:21:93:30:f5:29:17:92:fc:47:f9:09:
eb:6d:cd:18:f0:81:6b:6a:37:e5:62:9d:f6:0a:ee:94:3a:c7:
26:74:87:42:aa:21:60:0c:c6:21:8e:65:e1:56:2c:a6:77:17:
ef:5d:b0:51:ca:c7:d6:84:38:f2:1e:47:36:fa:9f:57:bf:a7:
9c:2d:0c:fe:f7:d1:f9:74:bf:2f:f6:80:f6:bb:1a:3d:1c:18:
27:5c:ee:3c:00:32:a0:17:41:da:6c:78:33:95:2a:d7:10:95:
53:7b:36:9e:3e:aa:58:4c:1b:86:20:fe:4c:fd:0b:29:7e:9d:
e4:73:06:4c:b0:06:0e:d9:9c:7c:bd:6d:5b:40:98:73:ee:24:
46:24:d7:94:80:46:d4:ab:07:d9:ec:f6:5d:4a:14:df:47:bb:
80:14:ce:f6:12:31:f1:39:e8:79:fd:9a:9d:c2:bf:de:75:6c:
6c:3a:a4:92:94:fe:2b:f0:6a:46:6a:24:ea:43:57:d8:69:8e:
9c:ec:d2:39:6c:c1:aa:a7:61:28:be:99:85:0f:97:b4:b9:90:
fd:c1:df:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:31:21 2026 by rpki-client