Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
File: m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json)
Hash identifier: nlQRJXGDP4nKo1xjmdZxnQEOyJXmqoAKyKewHlbFAEc=
Subject key identifier: E6:B0:D5:A9:6A:0D:9A:DA:AA:60:99:64:20:D3:BE:F6:1D:65:8A:B8
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial: 019CABA1FCEEB647001D3991E42A015D4B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
Manifest number: 0C54
Signing time: Sun 01 Mar 2026 23:00:45 +0000
Manifest this update: Sun 01 Mar 2026 23:00:45 +0000
Manifest next update: Mon 02 Mar 2026 23:00:45 +0000
Files and hashes: 1: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: PQze7a7TCYxAlFpmwqGmSI1GquLVYpNCwPsdqA3E46A=)
2: yf4fsCLIG2l9cGmJeTOIIc51YeU.roa (hash: UF4YxdCOV/UBjXOSABiqqWZqo/WkePyMELF0t7EktlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fc:ee:b6:47:00:1d:39:91:e4:2a:01:5d:4b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5193d843af193e24875686673c95896eae3497
Validity
Not Before: Mar 1 23:00:45 2026 GMT
Not After : Mar 2 23:00:45 2026 GMT
Subject: CN=e6b0d5a96a0d9adaaa60996420d3bef61d658ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:24:45:b2:e7:bc:55:b7:0a:75:51:5a:25:
6c:f7:51:30:c5:15:7f:d4:74:bf:c1:af:58:b5:3c:
61:5b:fe:60:f0:2b:71:d8:f5:1a:3a:04:2b:96:3d:
7a:03:83:7d:8d:5b:94:26:f7:5e:75:0a:7a:c2:68:
05:22:22:9a:f1:3b:b9:2c:ff:e9:67:eb:90:cb:04:
ce:52:fc:f2:c9:77:46:3f:5b:ce:ee:93:6b:46:f8:
e5:10:d4:1e:53:7a:18:78:44:5c:69:9f:05:fd:b2:
5f:79:e7:89:e8:7e:66:8c:88:a9:b5:f6:d4:10:ed:
26:8d:1d:0f:8b:45:5d:22:44:b9:df:62:50:5c:96:
a9:ff:d1:a8:b6:b6:57:11:94:d1:4b:61:25:a5:f4:
9a:68:74:9b:77:c2:98:3b:e0:ca:00:e0:18:d7:ca:
57:02:b9:6e:e5:1d:f4:46:d1:3f:c5:b0:af:87:1b:
d8:be:d2:2d:a7:1f:61:98:75:e4:65:d3:47:60:49:
9b:2d:56:b8:55:d3:3c:ee:d1:d4:c5:07:6f:be:22:
d2:67:4f:42:00:83:5a:ee:c6:bc:81:ea:38:ad:cf:
67:6e:7c:c0:80:fa:47:96:4f:3b:3b:06:7d:df:37:
19:68:ab:72:00:0c:07:25:43:6b:b2:fe:7a:27:c8:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B0:D5:A9:6A:0D:9A:DA:AA:60:99:64:20:D3:BE:F6:1D:65:8A:B8
X509v3 Authority Key Identifier:
keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9c:03:91:c9:02:2c:84:d2:c6:e3:8c:04:a6:c6:d4:eb:05:
45:08:e6:b0:e6:a5:c2:12:f8:cf:c7:da:c8:28:ed:ee:47:3f:
a7:69:22:fc:c6:54:0c:f5:7b:da:97:77:ca:b2:7a:12:c9:72:
9d:98:ba:b6:7f:4d:1d:f4:30:dd:18:74:e8:6e:91:56:3b:69:
df:ce:83:2a:47:24:c4:03:d4:df:04:f9:b1:f8:bf:d8:38:7c:
1e:42:c6:0d:dc:67:49:07:7b:e2:58:86:9d:6e:d8:02:b6:dc:
e0:dd:ae:c6:55:63:71:e4:60:a1:43:eb:a0:c3:cd:1c:f3:77:
c7:e1:81:2d:55:00:61:64:34:5e:b2:d0:b6:f5:aa:eb:f2:fd:
cd:e0:51:dd:75:d0:ee:86:5a:4b:b6:6d:20:09:91:c7:e8:41:
50:6b:cc:8a:55:ce:0c:c3:74:26:1c:4e:24:60:12:e6:5b:df:
8a:06:69:68:4f:70:9c:09:a7:9e:f2:19:6c:52:df:97:ce:09:
78:86:0f:a3:c8:7d:1a:f2:9c:45:0e:15:0c:67:e9:34:7e:c0:
40:57:c6:7b:d2:62:a9:01:f8:fe:df:68:2b:c1:b2:fc:4f:06:
dd:d1:99:ca:2d:ee:e2:62:04:8b:76:02:58:2b:e4:3c:9f:ed:
6e:a5:92:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:30 2026 by rpki-client