Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File: mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier: n3XNgvSgHGwNJnrgHdtwo9+n7izu3fndDD08vv0XP0A=
Subject key identifier: 88:48:A7:51:15:04:51:AB:20:0A:29:50:C2:A7:15:43:E8:82:98:46
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 019CAA58EAD54A4883F61025D7DAFBDF9C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number: 1868
Signing time: Sun 01 Mar 2026 17:01:19 +0000
Manifest this update: Sun 01 Mar 2026 17:01:19 +0000
Manifest next update: Mon 02 Mar 2026 17:01:19 +0000
Files and hashes: 1: D0gnpWfBBKSRYWj8s3v4J_aCJMI.roa (hash: 45JN/2vbVLlDusn7s9SwK/NY3HUP/bKxrVAXGIGtMdk=)
2: VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa (hash: nZT5dviNLBhgGj5zg6mzO60GRglFXHbvUdAHc/xzhdo=)
3: m72BlK4pK3nz4quwny73cERWUUU.roa (hash: 3sQVvJAEO+cZVJVe28TC5M0aUTp2A0mSxPgJfwLQboM=)
4: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: 9nAeZlomyjyZAgB9L+e1Gsgj9o3S0M7cXzbSkJtDtyY=)
5: nbN6QTJFxRMXWB7BZSEIH-SMH3g.roa (hash: pyiyGBs40xwh8+LBH6NUqQq8ar9YtwxRrDXfuF15LbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ea:d5:4a:48:83:f6:10:25:d7:da:fb:df:9c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Mar 1 17:01:19 2026 GMT
Not After : Mar 2 17:01:19 2026 GMT
Subject: CN=8848a751150451ab200a2950c2a71543e8829846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:a1:be:bd:3f:f8:1d:c3:e7:54:13:91:74:
c8:b8:0e:f2:eb:86:59:2a:e9:1f:98:3a:48:00:7c:
c3:c9:b7:41:c4:4b:a7:56:4d:18:ce:e2:fa:c3:f3:
2b:7a:e8:b1:37:08:f5:12:7a:62:c8:c1:60:e7:18:
70:c2:95:52:66:39:64:a2:29:7a:c5:61:4d:1d:ed:
3e:8f:ff:1a:21:c1:66:72:92:ad:47:7b:92:35:3e:
56:81:b1:a7:1a:ca:ad:e7:9c:ee:e6:d2:27:f3:d8:
ac:4b:5f:ed:16:2f:45:0c:0e:29:e1:73:21:87:a1:
90:4a:42:75:18:84:14:7b:d6:5c:73:46:30:a3:23:
4c:9a:8d:98:78:9a:69:13:8a:de:d5:63:0d:17:f7:
cb:5f:4c:a7:18:1c:71:77:8d:0d:bf:0e:fe:eb:4b:
b3:bc:a5:a1:33:45:8c:3e:d8:dc:76:36:ee:d3:53:
6f:02:10:d2:02:61:fc:1d:df:e2:64:35:36:ba:fb:
43:99:27:b7:3a:ff:44:ec:0f:58:e4:4e:0c:cd:18:
b8:61:24:ee:5d:07:bb:0a:ab:24:4d:6f:65:83:e6:
ec:2e:ef:23:c7:85:2b:13:a9:3f:e9:87:a0:04:18:
33:2d:46:2f:01:d9:88:e2:7a:c2:93:e4:10:3c:2d:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:48:A7:51:15:04:51:AB:20:0A:29:50:C2:A7:15:43:E8:82:98:46
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:db:0a:12:c2:9a:98:d3:79:c9:e8:3a:3c:a3:a3:5c:8c:b5:
38:85:8f:f6:24:df:d6:58:38:35:bf:db:57:81:6f:4b:80:03:
31:90:12:83:07:a8:dc:30:00:e1:17:4d:43:f0:02:b9:03:7d:
90:ea:80:b5:0d:c0:24:c3:5c:b6:49:90:b1:3a:4a:39:1a:43:
d9:37:87:80:52:30:4a:32:5d:0f:23:ae:2f:2d:57:55:98:16:
e5:04:7e:41:61:40:59:2f:e5:be:24:7a:97:fc:59:06:4f:e4:
97:cd:67:c8:61:c8:e6:a1:c0:57:61:65:a3:d5:63:07:9b:1d:
2f:17:ea:a5:59:5a:42:2f:bd:3a:d7:fd:8b:95:41:a9:90:40:
ed:c1:d2:f3:3d:f4:72:a8:31:c0:27:51:61:5c:af:1d:a1:6a:
a4:e8:00:b6:e7:56:33:2c:4b:a3:97:cd:3b:b1:ee:74:97:6b:
a3:d8:01:84:db:5c:63:95:0a:62:ec:81:73:99:fe:c2:ec:c6:
d3:84:ae:ad:4a:d4:69:26:c8:66:3f:62:75:65:d4:bb:cc:1d:
c4:67:19:26:44:14:e7:d0:de:80:2c:05:1d:80:f6:ae:9d:10:
69:fe:d5:5f:7c:7f:b2:c0:88:7a:2b:29:39:d4:6a:bc:20:a8:
62:c5:9d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:02:30 2026 by rpki-client