Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: 5P++Tr9PP4ZrCzUwzOG/LOoxF2Q9PVkCd6Pj7jQpkFI=
Subject key identifier: 05:86:38:C5:EC:92:9E:B3:05:C1:B7:97:72:23:D0:E8:B0:C2:E4:B1
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 019CADC80B37A35C85CD2FC5A98D06E57069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 09:01:34 +0000
Manifest this update: Mon 02 Mar 2026 09:01:34 +0000
Manifest next update: Tue 03 Mar 2026 09:01:34 +0000
Files and hashes: 1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=)
2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: IseG9ZLklmHCoFyFifVcSQHT0Ia1/3+KXo7BSgkJOdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:0b:37:a3:5c:85:cd:2f:c5:a9:8d:06:e5:70:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Mar 2 09:01:34 2026 GMT
Not After : Mar 3 09:01:34 2026 GMT
Subject: CN=058638c5ec929eb305c1b7977223d0e8b0c2e4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:c3:ea:26:a6:89:46:79:2f:c3:42:84:2d:
d4:d8:e6:1f:7f:d1:d0:4b:52:e8:c6:88:49:84:78:
13:c5:7b:2e:b5:12:3c:8c:d0:9f:bd:50:8f:d4:bf:
d1:28:d2:cb:89:36:cf:6c:89:c8:df:9d:2f:b3:c4:
a6:7a:8b:59:ac:5c:c3:66:79:a7:fa:57:cb:5d:63:
fe:15:33:52:d3:af:72:a0:89:96:d5:df:77:8b:f8:
ed:45:0a:ab:bb:f6:0e:50:0a:e0:6d:e8:9c:68:6e:
50:40:0c:1a:e5:92:3a:25:ed:8d:6b:60:48:c7:42:
5b:ab:22:76:fe:da:b6:06:de:fa:b7:db:f0:e1:c8:
74:ec:87:71:66:df:d5:c9:11:72:66:fc:79:1f:5c:
d8:a3:7a:57:f4:b8:a9:16:cc:c9:cb:d6:45:ea:d1:
03:eb:78:3a:60:07:79:8a:cd:d7:26:8b:7a:66:82:
a0:63:a0:30:93:0f:b0:75:a6:ab:9c:74:15:4e:3a:
1c:d2:d9:49:e8:90:fd:7a:34:4a:4b:ca:d4:c5:68:
de:2b:33:96:34:6d:58:3b:6f:ac:79:44:e9:bb:cb:
d1:28:4d:2d:b3:3c:34:eb:81:de:1a:8b:ec:e5:49:
97:64:e1:88:e4:b5:be:eb:85:bc:38:f6:fa:f9:bb:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:86:38:C5:EC:92:9E:B3:05:C1:B7:97:72:23:D0:E8:B0:C2:E4:B1
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a5:7f:fc:50:fa:b9:b5:0b:83:61:f8:ad:22:88:ec:7c:75:
14:b7:e5:8c:b2:ad:c5:50:b9:f9:65:63:29:82:69:fd:a9:c6:
d6:9a:86:1f:99:d0:45:9e:f9:bf:c5:c1:5d:57:4e:46:74:ab:
28:ad:35:31:89:47:fd:c5:44:69:02:fb:20:e7:dd:09:aa:09:
c6:dd:d9:3e:66:8d:24:da:98:14:e6:70:5e:2f:2a:27:ac:c8:
06:b8:70:3f:84:63:93:85:1e:67:c7:82:6c:2c:41:81:50:d0:
85:8e:dc:c5:0a:12:b4:63:49:9c:d8:09:2d:ee:c8:2c:4c:74:
97:b8:3f:53:91:54:c7:5a:57:b9:5b:13:1e:b0:21:91:98:e0:
09:ef:f4:01:1b:f8:04:3a:18:c7:d7:c3:83:bf:04:4b:fa:d1:
6c:59:49:b3:29:39:cc:20:fd:d1:18:27:ee:16:c1:89:3e:b3:
88:a0:aa:6d:b5:b6:6b:e3:11:91:b0:8c:37:d4:68:09:8c:e5:
2a:7d:0d:9b:38:30:65:80:3a:ae:09:21:16:59:71:d8:7c:6d:
32:52:48:58:25:de:ae:b1:51:d5:7d:50:3f:02:46:17:89:ae:
8a:57:a8:0f:59:81:00:e8:3b:ed:73:a9:d1:e4:0f:b0:16:6d:
c3:68:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:14 2026 by rpki-client