Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: Vvqi7qarE57LzPmAH4OTQyL/KY3X2101ocpv9R1DmfI=
Subject key identifier: 54:00:E7:9C:98:D9:9F:78:6E:35:DE:8B:3B:31:22:0C:67:4A:BF:24
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 019CAC46EA2AEBA07F7E2889F6406DE26539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 02:00:54 +0000
Manifest this update: Mon 02 Mar 2026 02:00:54 +0000
Manifest next update: Tue 03 Mar 2026 02:00:54 +0000
Files and hashes: 1: 2P1GYD166nihkwScz5T2PnxUNBc.roa (hash: kpyKepByfDU6eMI6BwB2mHLR2Ws+hOGxFPcFrKdltdw=)
2: 3C-MFf4CxJMdsuA2xUMbeT95cFQ.roa (hash: l72WNVI7l9ZF7eo8/aRUo3EuE6KrjKZ6m4xqm9jc1jg=)
3: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: xj16kyT3JNDMI+KJtGUBBqqmAFH5FwZp9sKjWTVGXck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ea:2a:eb:a0:7f:7e:28:89:f6:40:6d:e2:65:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Mar 2 02:00:54 2026 GMT
Not After : Mar 3 02:00:54 2026 GMT
Subject: CN=5400e79c98d99f786e35de8b3b31220c674abf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:b6:50:25:3b:b8:6b:4a:7c:70:c3:c8:db:
e4:11:3c:97:04:ae:01:a1:e1:72:ce:48:5e:3b:88:
55:bc:27:4b:18:c2:c8:28:de:8e:b6:2e:a9:78:2c:
8f:ea:54:55:13:12:a9:12:bf:ff:22:0d:9a:27:f4:
d0:7d:71:00:ac:85:81:11:e5:11:1b:f4:74:cd:a6:
e6:df:27:4c:0f:d7:44:3f:aa:7f:83:1f:7a:21:2b:
2c:92:a3:52:58:03:4d:69:45:02:b0:4e:5f:98:fe:
a0:fe:e0:f4:ee:22:b5:b8:78:ff:b4:b8:2e:3f:b7:
fc:8d:40:27:db:6b:51:f5:fb:1b:0f:59:2c:1e:8d:
4a:63:4f:65:78:72:5a:d8:c3:14:13:a8:16:e6:c7:
3f:32:51:d7:b4:b0:a8:c1:c0:74:9f:aa:f6:8c:5e:
40:41:15:f3:5d:c4:4d:08:c3:ee:f9:bc:54:14:31:
0f:f9:ff:89:ac:a6:82:6d:88:bc:84:cf:d0:b2:58:
71:32:7a:28:a7:4e:72:c3:30:e7:35:29:4a:6c:1b:
8d:8e:a3:1b:ba:04:e8:d1:f7:d2:0f:f9:ed:d0:ba:
e0:30:a1:5c:59:63:a4:58:a2:88:e8:ea:74:c4:93:
d9:b2:53:7f:39:cf:f1:03:3e:a4:d1:6c:44:08:43:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:E7:9C:98:D9:9F:78:6E:35:DE:8B:3B:31:22:0C:67:4A:BF:24
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:40:03:d3:ba:bf:63:b6:57:de:90:31:cd:6a:48:3f:01:30:
d8:9c:67:8d:e8:8a:85:34:5f:07:11:33:e1:f3:67:cb:87:8c:
9a:c0:76:15:ad:16:ae:ed:6b:ba:40:56:69:5c:cf:9d:ac:bc:
eb:06:1d:56:8d:24:2e:85:49:93:ec:de:a2:84:2e:13:65:74:
ce:b1:c2:e9:60:94:a9:92:f0:2d:3d:ec:7e:7b:db:97:ed:30:
9b:53:30:9f:1b:78:9e:b8:f1:6f:d4:00:93:d4:31:3a:8c:1e:
1e:6f:bf:f5:1c:60:7e:12:bd:12:77:ca:d7:9f:67:d1:ca:5d:
93:e4:83:5a:f4:b1:6a:da:bc:8e:ac:f3:2c:9a:cf:40:c9:60:
ed:7f:48:32:6e:bf:90:73:87:e9:8f:ba:a3:e8:52:b6:25:c0:
22:ac:e9:cc:94:44:b8:6e:b8:66:92:a1:d7:7a:f8:05:db:7e:
61:d4:ff:cf:8c:5f:28:40:fb:5e:2a:10:a9:12:f7:6f:36:1d:
d7:c2:85:1d:0f:f2:f4:1d:2f:a6:9c:2f:d8:42:10:f7:5f:2b:
62:e0:56:01:c7:65:31:db:55:60:cb:b6:d0:70:af:28:f2:ff:
6e:8d:81:61:52:3b:4e:fe:a4:bb:76:35:09:bd:b5:2c:e0:71:
b2:59:cc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:33:53 2026 by rpki-client