Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
File: mXwn0VtG2xhLwCswPIa0fEScG1Q.mft (raw, json)
Hash identifier: mEic5EpvPva82DkA8CQteU8fSqBdLpPuiuFzoGrKFVk=
Subject key identifier: 8D:EE:99:7F:2B:B5:8C:99:C9:3F:A2:48:1A:0B:FF:57:0F:66:13:E9
Authority key identifier: 99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
Certificate issuer: /CN=997c27d15b46db184bc02b303c86b47c449c1b54
Certificate serial: 019CA945BCF0614B7F7808DFF4B81533B858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
Manifest number: 110A
Signing time: Sun 01 Mar 2026 12:00:45 +0000
Manifest this update: Sun 01 Mar 2026 12:00:45 +0000
Manifest next update: Mon 02 Mar 2026 12:00:45 +0000
Files and hashes: 1: I7V5V1cM7CVsM1y0YVXX0evu4RA.roa (hash: 3YvBTIxXWovXFR/5L6HbEj29abytJrCEZQSlYTFVAvk=)
2: mXwn0VtG2xhLwCswPIa0fEScG1Q.crl (hash: xi2Z5Mp7efKzyIWs0d/Ry2Wu/f2t26JXSqQX9WqR420=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:bc:f0:61:4b:7f:78:08:df:f4:b8:15:33:b8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c27d15b46db184bc02b303c86b47c449c1b54
Validity
Not Before: Mar 1 12:00:45 2026 GMT
Not After : Mar 2 12:00:45 2026 GMT
Subject: CN=8dee997f2bb58c99c93fa2481a0bff570f6613e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:ef:6d:c2:ed:55:a9:9d:f9:ba:5c:94:f9:
d2:b7:87:0e:31:40:55:24:aa:84:e4:fb:0a:97:45:
28:2f:76:8e:51:f9:36:c3:02:ff:bb:0f:ad:ed:51:
f5:bb:e8:ce:7c:d9:e7:8d:59:12:13:00:08:3b:a9:
40:85:0d:ba:00:b6:05:51:f8:9a:c1:ac:a7:ff:4a:
d9:07:cd:95:7c:d3:8e:c6:97:24:8d:59:f3:3a:66:
0c:76:fc:4a:44:04:22:d5:3a:f5:c0:ac:d0:77:91:
3a:04:c0:0f:87:39:d5:1c:be:87:b3:60:a6:bd:e3:
e0:39:ab:31:81:14:89:0f:93:91:c9:eb:5c:4f:7e:
da:1b:37:26:7c:ff:57:9a:e9:ad:62:ad:ad:ee:ff:
0f:49:f0:1b:dc:c4:09:5e:b0:aa:ea:ea:e0:d6:03:
30:dc:42:56:7f:62:79:50:55:d1:30:d8:5a:4e:e1:
76:fe:18:56:bf:45:17:81:35:43:1c:aa:72:be:38:
66:9a:8f:ac:6e:88:7f:a9:bd:bc:77:6f:c2:26:1b:
03:7b:9d:58:5a:de:07:6d:d2:3a:29:14:cd:f8:af:
77:69:73:c7:d8:ec:f8:14:d7:90:92:b7:a8:da:e2:
2e:80:e6:27:51:71:ed:86:ca:b5:51:ea:c6:f5:23:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EE:99:7F:2B:B5:8C:99:C9:3F:A2:48:1A:0B:FF:57:0F:66:13:E9
X509v3 Authority Key Identifier:
keyid:99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8c:51:97:a5:b8:97:8a:44:a1:11:3b:51:3f:cd:6d:7c:60:
38:1c:6f:fe:86:9a:2a:9e:07:51:18:3e:97:37:47:6b:37:7a:
82:74:ec:3f:c1:dd:a9:7a:e4:d1:a5:63:64:c4:cf:eb:c0:cb:
f4:fb:89:dc:1f:ff:68:85:bc:86:ce:44:dd:d5:ed:e4:f1:bc:
22:db:75:6b:ee:d2:44:19:65:83:0b:81:72:9d:26:8e:35:ed:
fb:6f:16:b4:70:e6:ca:be:cb:18:16:96:2a:a7:da:2a:c9:3d:
56:5c:bc:cf:96:7c:6b:72:3d:fc:49:43:cb:28:50:fc:7c:aa:
f8:ad:31:aa:b5:0f:2d:b3:3d:ae:f1:a3:bf:91:77:4e:17:5c:
f3:74:76:cf:77:bc:e6:18:9c:3c:35:25:b4:47:b9:a0:e6:e1:
60:98:58:d1:7c:63:0b:7c:47:8e:6b:bf:27:87:4b:84:da:92:
02:4d:50:86:f7:5a:7d:c2:5b:2e:1c:cf:3d:4e:b4:72:b3:dd:
98:1f:4e:06:24:f0:06:2d:7f:d9:f4:89:35:7d:61:3d:df:6a:
8f:e4:6d:19:27:38:8e:9d:1a:30:28:02:31:9c:d7:df:42:c4:
10:ea:b2:d5:3f:54:72:4f:36:56:9a:c5:4c:8f:6f:1f:91:09:
b6:bd:49:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:21 2026 by rpki-client