Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: 3tzYSoMElwz2z1DYV87BgC6Gq6etA0MssnfksYdYxc8=
Subject key identifier: 9F:A5:05:1D:E1:A3:74:6A:F4:E1:5F:CD:CE:2C:29:59:6D:DA:5F:CA
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019CACEBA8C61C472DB3A6F991A403A66246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 1852
Signing time: Mon 02 Mar 2026 05:00:51 +0000
Manifest this update: Mon 02 Mar 2026 05:00:51 +0000
Manifest next update: Tue 03 Mar 2026 05:00:51 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: tbCF4kFypr0Sw74Lkqa/vGR6TdMpdS/D4TVDc/iKwhc=)
2: 48XlQQk7zLyObitRBott5O0TEZc.roa (hash: 0iveZkv2QdOfuGHu5qZcDP2k1JFUITllYLIt0mS1hLw=)
3: JXkrwkvLZXqvLpWo6GIqE9djHow.roa (hash: pvxp7edBiYpg9R4WGN/sBmyvZQpHSdt5YdDqPGYyoLU=)
4: Jb48XUzprHRQSa7zDmEwkm8bHB8.roa (hash: UeQ11+qXjfNfzNk6IX1DTTmTHuYUChCRYnGGfuhQmW8=)
5: M4MI8IskioFX_GL9An1slOnzOXk.roa (hash: +6v5Ea5o3E61ySsVOGY9En91TXxPv4H1t9U0YnMleQI=)
6: cFUEIWQu7qe64nrzejsq3hzv3fw.roa (hash: Y5DG1bnBMtUo7Z76/zjvm84VdL7RwBfBAjPP2M8PD/c=)
7: hkFrsNhiq0TnoVB5lv6ukrym9kU.roa (hash: Lpo1dIydhWwC2a6odejRAjq7zYy9EyLkYPWh1THs0As=)
8: svxysR0fryYPn1ckppavIVkehYU.roa (hash: 8MNRRTqy3XlQo1M7+GUmMiXWjPTZpOon/19BgW0t8Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a8:c6:1c:47:2d:b3:a6:f9:91:a4:03:a6:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Mar 2 05:00:51 2026 GMT
Not After : Mar 3 05:00:51 2026 GMT
Subject: CN=9fa5051de1a3746af4e15fcdce2c29596dda5fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:16:2f:12:e9:52:f8:33:c3:e1:ec:73:cd:
f6:02:15:22:d8:93:eb:fc:b8:1f:85:fa:06:d9:52:
ec:65:c8:4f:13:0c:ab:b7:6f:92:fc:c9:63:50:e5:
ab:6a:f4:d1:e1:56:84:68:84:25:27:32:48:f8:0f:
78:31:bd:a3:4d:47:24:9a:0d:9e:d3:e6:49:f7:43:
de:8b:e1:36:86:a4:26:25:48:e8:90:0c:03:08:65:
21:a6:5a:10:ea:9f:57:84:9f:b2:29:88:58:19:14:
84:b0:8a:05:93:dc:0f:67:42:57:7f:ef:11:ef:c5:
df:af:a2:7d:50:d3:fe:a2:51:75:31:e2:b6:72:ac:
97:a0:24:d4:2f:42:44:c4:b6:e6:fc:10:e8:3d:e9:
45:72:e2:14:17:40:f4:52:b4:2a:e1:56:7b:2f:38:
61:72:5a:42:f6:60:1b:cf:c3:96:80:93:5c:07:f5:
6a:7a:62:c7:93:d1:da:e8:d0:a8:c4:ad:11:88:c4:
ac:bb:29:cf:da:4c:72:65:98:81:48:9e:19:5c:27:
c3:bf:1c:0f:a7:60:30:d3:7f:21:b9:19:12:50:66:
6f:3d:b5:5b:48:d5:e9:75:4f:0b:a4:ab:06:7a:8f:
2c:13:bc:89:76:54:c3:6b:0a:26:7d:5d:dc:b6:2d:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A5:05:1D:E1:A3:74:6A:F4:E1:5F:CD:CE:2C:29:59:6D:DA:5F:CA
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c5:5a:a2:b6:b7:e2:e0:b8:22:42:6c:e5:05:82:ba:c4:c6:
c4:e4:b5:3a:27:bd:83:51:14:d5:d0:25:ce:cf:c9:3d:6f:09:
cf:aa:a5:27:37:22:56:f0:c9:f0:26:c3:a6:ae:77:35:62:d3:
7d:e8:a7:b1:71:56:37:9f:6a:24:02:19:b9:8f:99:58:fa:de:
5d:4a:7f:af:93:fb:d0:d3:a8:46:63:74:e7:f3:54:6f:a3:02:
a8:a3:56:dd:01:4d:95:de:3e:f3:dc:a6:e8:46:cc:c0:b2:3c:
06:31:c7:c5:b9:b6:a6:91:99:fc:8e:12:a3:3e:4f:c9:37:a6:
2c:80:1f:14:cc:37:05:5f:9b:46:99:a2:06:6d:8d:5e:c9:2b:
61:3e:81:d6:d2:cd:b1:18:62:55:05:68:14:6a:ad:f8:6b:a7:
59:48:6c:18:e9:67:56:30:90:e1:8a:d1:40:51:de:20:49:bf:
3e:2f:04:4a:09:c7:50:c5:4f:cd:94:d6:7f:b8:b8:a2:cb:12:
60:ad:ec:d2:5d:48:62:54:95:64:ec:6e:4e:55:8d:d8:ba:6d:
cc:0d:2f:dc:be:9c:79:0d:90:50:85:60:29:03:32:92:66:c4:
b4:a2:21:1a:f0:bf:1d:a4:8f:36:cc:3c:05:c3:7a:1d:1b:cd:
1c:d5:49:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:29 2026 by rpki-client