Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: tl75RBD/qZ5Z6QzJLKdP6Nd1h/4UOwt17PS2dk5evvQ=
Subject key identifier: 2E:AD:3F:4B:1E:F4:04:21:1B:40:B9:E4:96:95:1C:BE:44:AA:47:7C
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 019D9999536E283DC91240072A441EACB057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 09AC
Signing time: Fri 17 Apr 2026 04:00:55 +0000
Manifest this update: Fri 17 Apr 2026 04:00:55 +0000
Manifest next update: Sat 18 Apr 2026 04:00:55 +0000
Files and hashes: 1: aLZv5zfSsWmyyFeeVsMlO2WoEOI.roa (hash: 3bBdTpTJvuXiahizaCJvEqZFOKH3JQrv3q1L3oXewkc=)
2: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: VJ0rAZpYag7knVcsw/qDIfDJiBT6wBf9ZN4Dtty8iPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:53:6e:28:3d:c9:12:40:07:2a:44:1e:ac:b0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Apr 17 04:00:55 2026 GMT
Not After : Apr 18 04:00:55 2026 GMT
Subject: CN=2ead3f4b1ef404211b40b9e496951cbe44aa477c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:ab:f6:19:6a:8f:b3:81:0f:da:66:73:5a:
4b:50:fe:1c:0b:96:60:4c:43:7e:bf:ac:a9:91:0a:
e2:c4:f6:fe:97:c6:6b:d5:44:9d:24:3e:d0:af:cb:
74:7d:5f:7d:43:40:c5:b4:e0:b9:ee:1f:1a:a7:c3:
25:6b:c4:db:05:d9:d0:1a:61:a9:4f:16:06:33:df:
4f:40:96:ea:b9:28:c2:cf:01:be:fb:0b:64:78:bb:
24:76:67:16:10:8b:10:60:8b:2d:a7:38:67:18:78:
df:9d:eb:b5:28:7f:54:3e:ef:2d:dc:36:79:f6:e2:
4c:83:00:a9:22:17:85:a8:aa:66:ba:69:69:65:d0:
d3:77:69:80:85:ef:13:17:f2:a8:fa:ff:dc:45:ca:
d1:15:88:93:eb:4b:9d:ca:33:84:ec:1f:22:a8:9d:
83:27:f1:7d:71:c2:be:93:e5:b4:61:72:a2:a4:e3:
3c:81:a6:76:e6:4e:27:82:ee:39:4d:b5:e0:b3:53:
61:bf:fb:ff:a6:d5:a5:6f:d9:b8:69:62:0c:24:51:
95:82:5e:f7:ee:4a:fe:0c:5d:12:7d:42:a2:b6:03:
62:56:24:bb:f3:06:d8:74:89:e0:7d:44:ac:10:73:
96:b1:fa:d9:21:07:fa:68:34:17:42:31:8f:1d:38:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AD:3F:4B:1E:F4:04:21:1B:40:B9:E4:96:95:1C:BE:44:AA:47:7C
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:14:b2:41:1e:64:6d:7f:9d:59:db:7d:fd:14:71:de:c1:28:
92:2e:1b:8a:39:eb:02:ed:e7:e2:28:f1:53:4b:3f:f1:e5:10:
76:bd:e8:a0:30:26:24:88:ad:2d:0f:3d:80:39:c4:db:8c:1a:
dd:7d:8a:bf:f8:3a:fc:5e:d1:af:c2:70:68:1b:4e:17:5a:67:
50:db:21:00:29:c2:01:0c:9e:b9:05:5d:ef:a2:c2:97:51:9d:
56:98:71:81:70:26:5f:9a:96:9e:4c:be:3a:9e:6e:ce:5b:4d:
74:3e:bc:39:37:40:12:d4:83:88:ed:e6:4f:c3:b0:9e:6a:36:
8c:5e:15:e0:72:df:94:25:cb:e3:61:c6:4e:d8:e2:15:70:d1:
cc:65:b3:d2:20:94:3c:e6:a0:95:ec:df:e0:ec:d4:58:49:1d:
9b:75:1d:1b:cc:5f:0a:93:1f:5b:83:33:17:78:2c:d7:04:51:
31:33:74:5b:a6:c8:9d:d5:c2:32:f4:da:fb:aa:72:64:b8:55:
6c:19:80:4f:8d:06:89:c0:e2:c0:bc:14:17:69:49:9f:45:d4:
1e:0d:fc:a0:8e:ca:8d:99:7b:f0:a7:e0:14:16:a9:c6:77:bf:
f5:2e:61:74:8a:55:6e:9b:b4:11:e0:a0:dc:c5:0e:8a:ff:38:
4a:c1:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:14 2026 by rpki-client