Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier: 3TRl8q5hyTrF0Claeb1q/bhw8B3XvDv7aQgthAKIajw=
Subject key identifier: B1:59:8C:63:35:21:C5:31:B1:B1:6E:E7:1A:DA:0E:22:20:AC:01:CE
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 019CAAC648BCDA33BA20FD6CD4E8FF4232AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number: 0B0A
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: Ph0J2YLOlU7YjgB24Ww0ogtAJDo.roa (hash: itSFIEdCoDExFok/Ab/usil828dE//sP90iU8HWvoSU=)
2: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: U11BVtESITbzZqzi3Diy/EmHZCB35K0QV/8an4PgB08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:48:bc:da:33:ba:20:fd:6c:d4:e8:ff:42:32:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=b1598c633521c531b1b16ee71ada0e2220ac01ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:d0:af:e2:30:51:50:65:48:e0:96:3f:8e:
90:85:3b:1a:96:97:24:9a:32:a8:33:eb:99:7e:7a:
03:8c:81:eb:0b:72:c6:89:96:f2:a3:fd:fb:4d:7b:
b6:6c:7c:8c:33:61:7b:4a:f0:dd:1b:de:76:8b:2b:
56:8f:49:4e:f9:3e:05:b0:6f:cb:77:fc:85:aa:63:
74:b8:47:a1:5a:31:e7:94:b5:3c:8c:31:1d:2d:ff:
60:ab:ba:c8:8e:69:24:73:59:bb:5d:d3:64:a4:dd:
9d:c2:f7:34:8d:0a:ad:94:40:18:e1:f9:2e:72:3c:
3d:59:79:46:c3:7e:5c:f4:e1:9d:b3:c7:47:f2:c8:
44:29:bf:d9:cd:29:af:23:a2:4b:4c:08:b9:10:73:
70:1c:13:8e:04:59:52:91:13:8b:35:f3:6c:95:04:
b8:e5:6b:83:ed:66:be:72:31:32:08:8a:5e:e7:95:
2a:dc:74:0c:6b:2e:95:a9:be:10:e5:10:ef:77:e7:
b1:f0:0a:14:d4:d3:0c:da:47:f5:94:2e:e5:1f:73:
48:64:4d:ee:64:9e:b9:7b:8d:a9:74:74:41:f0:17:
3e:f3:08:18:f6:25:9b:31:3b:ea:9d:44:fa:7d:c7:
68:70:be:f3:96:83:91:c5:a4:6a:0e:37:2f:3c:5f:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:59:8C:63:35:21:C5:31:B1:B1:6E:E7:1A:DA:0E:22:20:AC:01:CE
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:68:b0:58:a7:9e:86:26:f1:f9:09:0d:14:b5:4f:c8:f5:38:
47:e9:c2:aa:cd:04:9f:d2:b1:b9:f9:4a:63:7f:4c:1d:83:4e:
1f:e2:0f:2b:7f:05:44:0e:ad:f9:61:30:b9:13:f9:24:b5:62:
d1:9c:09:51:23:a7:e2:da:0d:b6:d2:b3:f7:94:26:ad:33:74:
5b:89:ee:77:d7:d7:52:16:34:32:6a:49:90:78:10:15:5d:3b:
72:fa:de:f1:e4:bb:fe:44:cd:b6:d3:ec:c0:8f:38:df:d3:6a:
ec:9c:1d:2d:f0:4a:a7:90:4e:80:4f:7e:f0:4f:3f:07:ae:0b:
5f:f0:b6:06:95:6b:f2:b3:6d:28:c6:bd:be:c1:21:60:63:15:
21:cc:63:a6:87:ac:28:a5:99:3d:cd:25:70:d2:05:d4:83:3a:
6b:79:88:d3:da:b0:97:47:be:60:f1:5e:fb:bb:39:d4:ec:d0:
9a:de:c5:2f:92:67:9f:de:be:92:07:81:99:e6:a7:d1:fa:23:
6d:ac:73:f9:75:3a:ad:81:62:cc:a6:f3:8e:5e:d4:a3:20:39:
4d:31:39:a5:53:c1:96:7d:3d:7b:68:56:dd:da:9e:82:8e:85:
77:85:22:2e:cb:bd:65:ac:91:ee:ac:43:f0:78:a2:d4:18:fe:
49:b3:64:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:44 2026 by rpki-client