Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: +6EZK7yV2JHmOB7OL/xL+6O6s+2kQGYm+oZoXC1NVlw=
Subject key identifier: D1:E5:87:D2:B8:80:6F:A6:70:0C:97:B2:15:1F:8E:BC:3A:8A:D6:E9
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 019CAF7E9A96FB2EE4D8EAE38B2778FCBC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 17:00:35 +0000
Manifest this update: Mon 02 Mar 2026 17:00:35 +0000
Manifest next update: Tue 03 Mar 2026 17:00:35 +0000
Files and hashes: 1: 3I4M3z7hk5Jaghl-IJJmyqtHR94.roa (hash: HXLoBLMS+Moi8PgCDzeYzip6BSpqWVV46UR0vIKYGy8=)
2: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: 0GzLlHQqhAv3GhwN6RICFhXF+pxvwJqwYG2m6i/JRhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:9a:96:fb:2e:e4:d8:ea:e3:8b:27:78:fc:bc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Mar 2 17:00:35 2026 GMT
Not After : Mar 3 17:00:35 2026 GMT
Subject: CN=d1e587d2b8806fa6700c97b2151f8ebc3a8ad6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0c:75:96:d1:5b:77:f2:b4:28:4b:c6:a8:54:
81:ce:e7:c6:23:67:1b:ac:1a:cf:25:16:4e:0a:59:
bf:34:22:a0:ef:93:0f:94:b0:f3:3f:95:43:d3:98:
28:64:ed:f3:e2:19:bb:27:28:48:a9:b6:6f:5d:bd:
cf:7e:8d:ae:31:21:ef:b1:b4:04:b8:90:8f:8f:7c:
04:a4:ef:7e:2e:8d:f5:4c:75:e2:7f:3c:80:9a:3b:
21:04:6a:2a:12:e4:67:bb:4d:6a:77:8f:26:5d:19:
e5:b2:4c:96:4d:3c:12:69:f1:d4:48:8d:f8:8f:03:
ad:89:dd:d0:4a:0e:05:75:68:2e:33:35:5e:a0:87:
de:3e:23:72:e0:58:5a:9d:64:38:50:a7:e0:74:d4:
8b:0d:65:a1:d6:7d:5d:33:d8:da:d8:8f:47:9f:c9:
1b:f4:94:94:94:6c:aa:67:45:82:de:c4:db:8b:38:
41:e8:79:67:be:6b:58:5f:2f:17:9e:3d:65:0d:21:
1e:65:16:bb:13:7c:c3:3c:36:60:41:04:91:48:6a:
3e:3a:6e:ce:cc:9e:35:eb:06:6f:6d:50:fa:8e:92:
93:a6:5c:bf:71:c6:38:d3:ab:af:86:be:91:ed:39:
0c:2c:cc:92:13:0a:68:33:c8:80:f5:fd:37:87:30:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E5:87:D2:B8:80:6F:A6:70:0C:97:B2:15:1F:8E:BC:3A:8A:D6:E9
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:23:2d:bc:07:cc:f3:8f:17:a6:e8:eb:a7:b8:51:c5:8a:
e1:b2:e6:3f:44:1c:82:45:6d:5c:36:0d:c6:29:79:6a:1d:70:
d7:33:d0:b0:6e:d2:e7:72:16:0c:b2:6f:92:81:cd:17:ac:eb:
16:9c:60:41:9e:49:69:29:63:a7:1c:ad:9d:62:ee:20:a5:15:
f1:22:09:f7:02:65:b5:23:33:9c:db:cc:a6:14:04:22:10:bd:
dd:51:0d:4f:cc:7f:ac:42:3f:14:09:fa:b7:0c:bd:79:0a:0c:
72:00:b5:30:15:22:76:a3:da:9e:83:43:cc:bc:4a:9a:9d:d4:
be:9c:8e:c9:e1:cf:af:4e:39:ea:56:35:a9:1f:cc:65:6f:bf:
66:7b:e2:ad:3a:9c:18:d6:8a:ac:34:d8:dc:97:3f:1e:0d:f6:
88:74:58:cd:1d:53:f9:f9:a3:82:2a:e6:b0:72:71:94:e2:39:
35:82:a2:d7:20:a7:41:09:b5:a0:bd:3f:2b:9d:c1:05:03:9c:
9d:06:f1:d4:de:b2:a8:6c:d4:c8:d2:2c:5b:3b:f0:60:35:21:
a4:fc:77:a5:89:1d:42:5a:00:18:51:9a:66:df:4e:78:b3:87:
44:30:f4:2a:bb:43:3e:06:01:99:83:ab:bc:73:80:e1:70:34:
83:d4:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:16 2026 by rpki-client