Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier: IRhT2z3EqdBlrbgeKghh5xhzG8OQNmvhOy9THdpY2LE=
Subject key identifier: 56:1C:48:1C:C5:5B:82:6E:8B:A8:2C:C1:8A:A9:70:FA:3B:89:DF:CE
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial: 019CAC46C1EDA1CD89EAD1A968DF211D2E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number: 11E7
Signing time: Mon 02 Mar 2026 02:00:44 +0000
Manifest this update: Mon 02 Mar 2026 02:00:44 +0000
Manifest next update: Tue 03 Mar 2026 02:00:44 +0000
Files and hashes: 1: Ua0FvX2Mxp7XblXDKae0F_P3DVA.roa (hash: Gd0TE+m9XBYfCgcDLlJ0ZvcbYTgV+bDawl8hdljezh4=)
2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: CYHg6tJQ3X65BvtSBboeUB16XOY0JizcbqFoNuaoTBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:c1:ed:a1:cd:89:ea:d1:a9:68:df:21:1d:2e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
Validity
Not Before: Mar 2 02:00:44 2026 GMT
Not After : Mar 3 02:00:44 2026 GMT
Subject: CN=561c481cc55b826e8ba82cc18aa970fa3b89dfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:ce:aa:41:56:7f:e4:f9:68:7c:d2:d0:b5:
22:ab:0f:e0:2f:a9:6d:f2:67:2c:12:36:4b:5d:0f:
a5:64:1b:b3:48:6a:db:34:d4:20:f1:6a:e6:dd:2c:
70:8d:59:63:52:b7:c7:c6:0c:9c:d1:e9:cc:4c:f5:
12:84:19:a6:44:be:35:a2:ea:97:65:2b:21:55:e5:
4f:5a:9b:4f:bd:85:b2:dc:17:9f:78:09:10:7f:c8:
6f:84:c4:12:88:d3:2f:f2:df:d4:fd:cd:d2:a7:02:
25:0f:c7:8b:55:13:a3:34:bf:40:7e:e5:39:52:a6:
61:12:db:1d:5c:79:8e:35:3a:15:e3:5c:16:b3:3f:
01:ba:80:a9:47:24:28:a1:f1:bc:0c:34:93:d5:24:
89:60:cf:d3:0b:25:3d:7d:f6:2a:45:01:fb:06:de:
2b:b5:42:6b:90:01:06:ab:38:07:ca:f6:34:2a:f1:
82:1c:75:7c:49:be:ec:6c:92:a7:5f:72:36:91:ef:
0a:ad:71:6e:dd:f8:cb:5d:ce:cb:61:bf:ce:22:9f:
7c:b2:1d:ba:c7:55:2d:c9:ae:23:c3:7d:70:9c:80:
2e:9c:54:2f:10:cb:b4:5a:45:19:c2:b7:de:db:93:
a3:f8:00:4e:0b:18:6d:04:62:65:3e:52:19:ec:c9:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1C:48:1C:C5:5B:82:6E:8B:A8:2C:C1:8A:A9:70:FA:3B:89:DF:CE
X509v3 Authority Key Identifier:
keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f0:77:13:56:68:8a:25:2e:9f:0a:e4:2d:fa:f9:a4:d4:b4:
64:ba:fa:08:bf:52:d3:d8:ab:69:47:4a:7e:b7:ff:89:d6:1c:
d1:23:83:b8:3c:91:a3:75:05:4a:06:ce:c9:e2:e8:65:a0:f7:
ba:32:06:5c:bb:41:0e:4e:bc:23:17:66:8c:29:99:4c:73:97:
a9:2d:17:06:92:2e:c8:21:ad:19:52:26:1e:03:b5:86:7a:59:
7f:f6:cf:41:65:c1:d3:b0:2c:e3:aa:fc:96:7c:1e:ba:d1:48:
dc:f1:d4:44:97:c2:3b:de:da:43:17:69:20:57:7c:df:c2:b2:
7f:10:a5:a8:ef:fd:e3:12:5b:76:34:52:21:90:9d:d3:dc:48:
a7:34:03:db:18:bc:fa:32:0a:81:d6:33:67:50:1e:51:9e:6e:
29:33:cf:11:c5:d8:bd:3c:a9:54:9c:95:f8:8b:5d:57:cb:6a:
5e:22:8e:bb:8e:94:70:87:22:86:9f:71:5b:94:dd:c8:3d:99:
d1:68:2b:38:0a:8c:1d:f9:9e:b2:39:84:89:65:ed:6f:54:a0:
51:a3:bb:fc:ba:35:bd:b7:9f:09:f9:b5:2f:59:7a:72:ca:8a:
97:fa:43:07:e5:1a:cc:b7:52:7b:bd:53:01:d1:5b:dd:c8:c5:
db:4e:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:22 2026 by rpki-client