Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
File: mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft (raw, json)
Hash identifier: EzWIPeO2DBiHiThmW3b3yK5GUQVFVkGPD0wYzFll+tc=
Subject key identifier: C2:EF:76:E0:3D:9E:98:4B:12:C0:7A:99:7A:D3:61:E5:4B:10:3D:80
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Certificate issuer: /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial: 019CAF487616E9EC53996A63E5753794022A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
Manifest number: 38
Signing time: Mon 02 Mar 2026 16:01:27 +0000
Manifest this update: Mon 02 Mar 2026 16:01:27 +0000
Manifest next update: Tue 03 Mar 2026 16:01:27 +0000
Files and hashes: 1: mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl (hash: i1NhYsjfDIx/ueZz4d2arFXhlYx2kWs/c9y9lpAaF5k=)
2: vQIQ0hujisLLaE0FdKyN-US-jgc.roa (hash: HcBf/lSh/0W+uCeeNUF1qjopHzD07ezacPSk6j+nXRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:76:16:e9:ec:53:99:6a:63:e5:75:37:94:02:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Validity
Not Before: Mar 2 16:01:27 2026 GMT
Not After : Mar 3 16:01:27 2026 GMT
Subject: CN=c2ef76e03d9e984b12c07a997ad361e54b103d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:78:35:81:9d:d2:45:aa:60:63:46:75:3f:
3e:b1:a1:e4:62:32:c6:f7:ea:51:4c:a8:d5:f4:c1:
b6:76:5d:ef:b8:6a:19:46:f9:81:3b:d5:67:65:69:
23:67:7c:98:0c:9e:8c:df:d3:bb:18:3c:c0:af:8a:
94:03:07:64:d3:bb:6b:53:eb:a2:5c:c2:02:31:e0:
26:f6:a4:5f:4c:c3:31:78:71:6b:71:d3:3d:3b:0c:
16:ff:88:b6:24:d3:e9:2c:b5:66:78:0b:e5:b0:3a:
06:c2:33:02:9f:9c:92:62:ad:22:c1:f5:30:ab:c4:
9a:b9:eb:e2:ee:84:bf:e9:a0:06:bd:03:14:2f:f1:
2e:da:2a:98:f6:bf:c6:05:e8:cc:87:22:86:71:9f:
7b:21:51:b7:bb:e3:d6:eb:a3:e9:21:2f:1b:9f:86:
a0:76:a9:a8:2a:df:05:c6:24:32:99:63:d2:5f:6f:
af:df:21:9a:4c:43:1e:12:93:bb:b0:a5:c9:bb:35:
e5:49:57:9e:36:32:87:2d:43:df:ab:83:e3:5b:3f:
fb:5c:17:16:6a:9a:83:5d:91:03:db:1c:f7:f2:13:
bf:a5:f7:b1:d3:4b:e5:64:42:75:bd:7b:4a:7d:92:
40:c5:84:c7:cd:cb:11:14:31:cf:08:27:7b:f6:3c:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EF:76:E0:3D:9E:98:4B:12:C0:7A:99:7A:D3:61:E5:4B:10:3D:80
X509v3 Authority Key Identifier:
keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4c:b7:97:6f:23:cf:0c:60:b3:e9:1f:ea:98:b7:3a:6e:41:
5a:4b:da:55:24:d3:fc:ca:65:c5:bf:b8:c5:87:f8:f3:e8:6c:
ce:39:2d:af:2a:32:38:53:a7:56:eb:b0:d0:14:9e:b3:c8:6a:
02:8e:af:89:be:4c:0d:1c:04:00:3c:01:c0:b3:50:19:fd:a4:
f7:df:8f:28:7a:30:dc:28:62:92:04:94:94:c5:72:49:60:c2:
81:ac:e3:08:47:c9:fd:27:2f:78:64:68:c3:10:68:f1:f6:76:
be:92:cf:7e:d1:45:77:2a:24:f0:56:b5:5a:1f:1a:8b:cb:b6:
04:10:04:c0:1b:97:6b:08:6b:bb:51:de:e0:d5:d6:ab:73:eb:
1e:91:d6:18:81:85:dc:c0:ad:61:ed:18:06:03:1f:f8:69:47:
27:9f:03:1b:35:50:60:6a:c6:57:ee:75:62:7c:f6:33:c4:a2:
2c:0d:96:22:1c:45:91:4d:1b:23:36:6a:46:a9:fd:aa:2a:74:
57:f1:1a:de:9f:33:a4:f0:7d:49:07:f2:47:60:d2:aa:5b:58:
b7:4e:75:aa:ed:09:7c:31:6b:eb:f2:51:36:b5:31:3c:a5:07:
b1:c0:26:d2:53:ee:51:1d:2f:48:7d:19:0f:4a:d5:9e:0f:bd:
87:c5:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:20:51 2026 by rpki-client