Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File: mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier: lEZsXn6+nYwlHeFhUXkZxsiWAweZFcsyUM+Pj99RkEQ=
Subject key identifier: E6:DD:21:52:E6:89:9A:9F:9C:C6:9B:DF:3C:56:41:3C:56:26:C8:D2
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial: 019CAD224155A7BDE708D5868BE153AA8109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number: 0977
Signing time: Mon 02 Mar 2026 06:00:29 +0000
Manifest this update: Mon 02 Mar 2026 06:00:29 +0000
Manifest next update: Tue 03 Mar 2026 06:00:29 +0000
Files and hashes: 1: Kch5YnfnliI8NHiCA07xVEbQzV4.roa (hash: 6jE9VEbDYjIrbBsLXEa9CMfNyqfSxGZFUWK682Q2o9I=)
2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: T65Au6pLYoqxYbDHIbEZNACgOvbBXJejSRgUoNVW7pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:41:55:a7:bd:e7:08:d5:86:8b:e1:53:aa:81:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Validity
Not Before: Mar 2 06:00:29 2026 GMT
Not After : Mar 3 06:00:29 2026 GMT
Subject: CN=e6dd2152e6899a9f9cc69bdf3c56413c5626c8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:f7:b4:c0:ed:ca:0b:53:30:de:fa:5f:f8:
87:ea:b5:60:da:de:0f:33:6d:1d:2a:81:cf:8b:01:
e3:a0:75:57:1e:fe:9f:8b:ee:1e:7e:54:18:88:f1:
d3:eb:44:96:14:b6:da:4b:4f:16:28:35:8f:15:64:
30:36:eb:e9:82:fd:40:3f:43:28:c0:31:af:b2:58:
2e:86:ae:45:7c:42:a8:24:cd:cc:83:07:0f:43:58:
03:13:0c:44:c8:f6:0c:e5:ab:54:6b:7d:47:29:cd:
46:d6:af:e0:23:6d:be:04:39:47:6c:dc:98:f5:dd:
4b:2d:74:a7:e5:4e:e4:8e:dd:59:c9:a6:2e:db:bb:
a2:b8:ff:9c:6d:27:63:b5:6b:56:b6:8a:54:4d:1b:
28:cb:51:bc:4a:f2:cb:de:04:f8:fb:3d:a0:df:98:
93:c3:fd:e9:b2:46:59:b3:7b:bb:03:52:c1:2d:5d:
88:80:4f:a1:92:b0:71:40:b8:4a:0c:94:d2:4e:52:
b9:41:cc:bd:40:5a:f6:da:fd:cc:7b:c7:58:03:8b:
99:28:fc:d3:48:33:cd:49:68:22:a8:a9:56:6f:ff:
11:8e:4c:fc:f9:ef:3a:83:23:71:bf:81:07:db:ab:
8f:2a:9a:25:d5:75:4b:be:b2:07:1a:a4:49:70:8f:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DD:21:52:E6:89:9A:9F:9C:C6:9B:DF:3C:56:41:3C:56:26:C8:D2
X509v3 Authority Key Identifier:
keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:74:b0:03:58:81:16:df:6a:83:9d:61:a5:e6:07:c9:ce:0a:
93:dd:11:68:dd:ab:ae:cc:ab:21:10:26:da:6c:6e:c7:58:82:
23:a6:28:f0:3c:43:18:41:95:45:58:6f:e4:e6:cb:68:f7:03:
00:15:9c:be:49:fd:1d:07:3e:5d:bb:6f:24:44:53:84:cf:e5:
aa:ef:9d:4d:13:14:b6:e6:bc:6d:85:ca:e8:b0:d0:6f:8a:3d:
76:e4:65:36:af:77:d7:7f:28:e0:b1:19:08:38:ca:4b:0b:61:
06:40:39:57:ad:13:aa:93:08:ed:58:79:f9:5f:96:51:31:b1:
33:fc:d8:4d:46:65:1a:b0:89:e7:a4:6c:4d:a3:31:37:32:fb:
10:a7:23:1c:a1:e6:28:ba:cb:2a:85:3d:63:9e:5c:2a:bb:aa:
ee:db:76:b4:7b:7d:e7:3d:eb:6b:48:c3:ee:73:e6:1c:a3:cb:
65:91:a8:83:ab:e6:1f:b2:a6:35:d0:cd:87:c8:2b:c4:f2:cb:
e7:6b:f7:2f:a5:a0:9e:78:63:43:97:96:69:09:6d:9b:3e:08:
95:ef:61:bb:4f:fe:3b:77:b4:ae:6f:61:a3:34:df:c3:c6:78:
d4:90:15:d3:71:22:1d:e5:1b:e5:e8:ee:0f:89:73:ef:cf:90:
95:9e:9e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:57 2026 by rpki-client