Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: XHrCHElbEVsPqEZ+W1GmrxaX2W4VOWGvea7k+HxnqQg=
Subject key identifier: 8E:FE:8F:31:B1:7E:3A:37:7C:65:5B:C9:AF:8C:FF:CD:99:0D:0E:D1
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 019CA7FC5C288B7D936E02808AFA37BA9B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 06:00:59 +0000
Manifest this update: Sun 01 Mar 2026 06:00:59 +0000
Manifest next update: Mon 02 Mar 2026 06:00:59 +0000
Files and hashes: 1: 1-M17FsedROaF_Kne-5Hqf60_ZF0.roa (hash: dEdEroRDmqUptgIx5X9EfWXuPhIB2SKqFgAL57TKHAs=)
2: WMPpPZf121FGb5nB2wRyHO8v-RI.asa (hash: mKLFbSlwYIzmMfnFA89CJdrlniFC0Y+HVLJcXPAW800=)
3: iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa (hash: 853t8WhJ4kw5HbkYp7EUF9CdroSNYLBypKw+/lvJndw=)
4: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: 5UYboGSpZghL20ns+1rPfJd/T4azJmuQTpzk8GANRjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:5c:28:8b:7d:93:6e:02:80:8a:fa:37:ba:9b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Mar 1 06:00:59 2026 GMT
Not After : Mar 2 06:00:59 2026 GMT
Subject: CN=8efe8f31b17e3a377c655bc9af8cffcd990d0ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:d1:14:e0:6f:4d:01:80:2c:ea:49:e7:2d:
2f:9e:ea:8d:08:04:4f:00:5b:66:82:b8:25:d2:2f:
00:11:39:d6:ae:9e:cf:93:a5:4c:fb:5e:dc:1c:f3:
83:20:05:c4:6f:bb:0c:e8:38:86:69:d8:c3:b8:2d:
db:b8:97:c9:51:11:b3:cf:81:65:26:d7:2b:4a:ba:
ea:2f:d4:22:23:f4:a9:cd:5e:9e:24:ce:70:31:f1:
3b:bc:f3:fd:d5:83:96:d0:94:8d:b5:fc:95:7d:2f:
42:79:8f:ef:ee:fc:48:8e:26:56:89:d0:0c:13:ca:
49:05:b7:12:9f:ce:ae:9d:72:d1:0e:fb:67:47:c7:
a3:c5:c9:98:da:f8:46:80:b3:17:db:90:b7:f8:c0:
b8:c2:d4:1f:48:0b:56:f7:3e:3e:3d:8e:35:b9:fd:
14:c2:84:d7:35:77:2c:43:b7:b2:8f:e2:4f:fc:4f:
d2:3f:4e:08:9b:ca:9c:2d:49:39:16:ec:15:55:e5:
00:99:ee:4a:5e:c8:7b:1b:7e:3c:db:87:c5:7d:88:
53:85:18:be:01:63:a0:4b:1a:4e:b3:6e:0b:e5:b0:
95:c8:19:fb:ca:9a:f5:df:6f:31:13:a5:a7:61:54:
36:89:9c:b7:35:dd:28:e4:7a:c0:ef:9c:1a:6e:ad:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FE:8F:31:B1:7E:3A:37:7C:65:5B:C9:AF:8C:FF:CD:99:0D:0E:D1
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cd:db:2c:99:8f:97:e9:b8:ca:64:22:98:d2:9f:17:2f:71:
94:ca:d4:38:59:d8:06:be:e9:e2:4f:34:08:29:ac:25:b9:3d:
3c:e9:b9:0d:f5:1f:9a:55:f3:dd:82:c6:7a:2b:aa:d1:0f:be:
ee:3d:c7:07:4e:82:a5:4b:f8:99:c8:9b:36:6a:ba:bc:ee:0b:
ba:6e:3a:b0:4d:d8:b1:5d:31:d8:6a:13:a8:dd:20:99:cf:79:
5d:09:1d:da:b5:cf:01:33:fb:ce:ee:1a:5a:78:e9:8c:8f:e1:
c8:a8:ac:4f:0f:24:bd:52:75:d8:b1:21:a7:36:07:1b:13:5c:
61:99:34:43:80:b2:86:dc:bf:f4:10:a1:43:5a:30:d6:17:ef:
50:5a:af:cb:97:d9:d9:bc:e1:61:0b:07:3b:82:c0:3b:18:72:
59:15:8b:c8:3c:13:c3:72:7e:0f:a1:d6:b6:8d:20:a8:dd:06:
2c:5a:14:e1:d9:65:3d:0f:b2:7d:69:2f:b2:dd:88:8d:96:8d:
df:ee:f4:32:f7:8f:75:21:62:b2:16:9d:2f:ea:20:5d:3f:93:
d0:62:01:3b:70:ed:a6:a3:ec:39:bc:57:32:ac:b5:72:c0:05:
99:0d:5a:28:ac:96:46:5c:36:ee:88:79:50:00:53:1d:d5:d3:
fb:18:d4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:18 2026 by rpki-client