Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: vVIxqIFJBxdHaG6Z4uadUcsgvGmSXNRQeleR9R9VTrQ=
Subject key identifier: DB:11:4E:A4:0D:F9:BE:19:10:CA:27:50:68:6E:7A:C1:77:4B:C8:9E
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 019CA9EB7B6E8754FB4CDCE72E497CB746FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 15:01:47 +0000
Manifest this update: Sun 01 Mar 2026 15:01:47 +0000
Manifest next update: Mon 02 Mar 2026 15:01:47 +0000
Files and hashes: 1: KaT0sW3jh_PPKcDRHkAr_6LGbFg.roa (hash: 4tEmgwJp5TqeJVAPv5jHwB4A533Y/KCzgRQwAZ4AUmA=)
2: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: cTLzIgHrAxlnR2WVvmcMe97YL0I6IelMFu6LPCRwN4E=)
3: YpeHyUrRfHsUTh5A1_lsn9ecLdI.roa (hash: 54/I0U+2gsfxDHjTGitToFh36OuJx0rhyc8ObFsTIiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:7b:6e:87:54:fb:4c:dc:e7:2e:49:7c:b7:46:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Mar 1 15:01:47 2026 GMT
Not After : Mar 2 15:01:47 2026 GMT
Subject: CN=db114ea40df9be1910ca2750686e7ac1774bc89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:8d:6d:84:8e:79:da:08:e4:74:83:48:12:
78:cd:2e:56:2e:67:8c:02:33:e9:33:3e:2a:a8:cb:
79:56:12:c4:19:60:6d:e3:9b:5e:ed:98:98:d8:22:
4a:1e:ef:d3:28:42:ec:88:06:f1:14:7d:d6:68:90:
20:14:e4:43:b8:66:db:84:56:9a:6b:e5:0b:6f:e0:
48:50:8a:16:60:21:a4:22:41:79:02:5a:be:18:1e:
8f:7d:6b:a5:4a:93:88:ed:a8:c0:5f:12:09:cd:91:
99:67:01:e4:f6:9e:06:d7:47:84:7e:fa:32:dc:a1:
bd:2a:0e:b8:f7:cb:78:b9:69:fa:d2:9c:29:10:33:
33:08:c7:35:83:da:ad:3b:b3:3b:e8:01:a6:bb:1c:
23:09:30:8f:26:3f:42:4e:3c:e2:22:b3:c3:ab:29:
75:fc:4d:a5:98:47:fd:e2:57:48:c2:d7:9c:4a:c1:
02:62:b4:6b:f8:c9:87:eb:11:9d:89:4f:b5:7c:0e:
8a:43:46:09:fd:9a:c3:15:91:d3:0e:b8:ee:19:f4:
6b:11:69:f3:f4:53:46:f5:35:b6:55:9d:2f:57:7e:
47:17:c1:fd:8a:79:24:d2:82:a4:45:a8:19:78:a0:
b5:4b:0c:da:b4:53:2e:b4:59:14:01:ff:f6:fc:8a:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:11:4E:A4:0D:F9:BE:19:10:CA:27:50:68:6E:7A:C1:77:4B:C8:9E
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:04:15:b0:2c:18:86:7a:bf:4e:fa:85:46:f4:57:48:08:57:
aa:71:b1:5e:78:7e:13:a7:e6:42:df:4d:75:0d:43:17:a7:20:
bf:51:16:31:32:37:9a:eb:64:68:7a:dd:af:21:f8:8a:f7:2e:
0c:91:5d:e7:65:22:d0:76:fe:bd:9c:94:5a:53:8f:7d:dd:b4:
ee:18:9b:97:c3:6f:f6:1e:2d:3a:14:f9:5b:d2:31:e8:81:59:
a2:b5:25:10:ec:d7:0e:33:fb:54:b0:2d:cd:c6:f1:e0:81:59:
bf:bf:5e:12:2b:2a:2c:f3:7d:71:f1:ca:fd:81:80:7a:04:6a:
0e:5e:bf:69:07:ce:ed:cf:3c:1b:a6:22:d4:18:37:9f:7e:58:
75:a1:f3:6c:25:54:29:13:71:90:69:da:a3:9c:04:ee:c9:8d:
69:67:a5:99:17:53:f2:a1:ca:9a:65:1a:9d:ce:55:1b:b9:14:
eb:48:04:fb:3e:d5:44:1c:63:2e:40:5d:4b:23:d3:14:6d:7b:
4d:37:f3:f3:62:2b:0e:31:9a:4e:67:7b:67:c1:02:73:1f:3d:
86:69:c2:7b:2c:2d:62:13:56:8e:0e:01:3f:de:47:09:68:78:
d9:ee:6e:a0:bb:e1:a5:16:e7:63:38:51:81:5b:f7:b8:93:69:
11:46:ed:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:40 2026 by rpki-client