Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: 1d0jQiZz1uc2x7ABGdjQiW5YY33UlNYUI2y+Rvwbtpc=
Subject key identifier: 56:04:4D:88:22:51:84:1A:68:35:00:88:83:1A:3D:69:B3:DF:51:2A
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 019CAC472566F29497DF5D26ACD159C351FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 05BC
Signing time: Mon 02 Mar 2026 02:01:09 +0000
Manifest this update: Mon 02 Mar 2026 02:01:09 +0000
Manifest next update: Tue 03 Mar 2026 02:01:09 +0000
Files and hashes: 1: FBxiREsktkVFp8venH-s08qeoPQ.roa (hash: ibnO/dj3ZhDaLeFXf0GojpXiulWnjeB2LQmvljQymA0=)
2: WvhwqSTk9fYsIwVWoqZqzKg6HQ0.roa (hash: GwslgAUxIHInMefcYidsp1yt/WAtqY5sHB1EhJWpZT8=)
3: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: 9Wo0mT0il+iQdOw0Z0FDu7DRCyqnC3HPaqrW2JEqN3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:25:66:f2:94:97:df:5d:26:ac:d1:59:c3:51:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Mar 2 02:01:09 2026 GMT
Not After : Mar 3 02:01:09 2026 GMT
Subject: CN=56044d882251841a68350088831a3d69b3df512a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:19:12:df:9c:89:90:eb:4e:fb:a8:0e:46:
40:13:81:8c:76:3a:1c:db:3c:00:88:a0:df:d5:f5:
19:dc:af:45:89:dc:b4:d2:48:e8:2c:08:43:ec:ec:
e9:df:fd:09:fa:f2:bf:66:fb:70:72:7a:c7:c3:91:
0b:12:d3:ba:25:37:7f:75:6b:a4:00:4e:9d:53:92:
f8:6c:99:7c:fc:d6:08:16:c3:34:7e:73:fe:b9:65:
3e:a5:11:ee:d6:1e:2e:d1:95:50:8c:e1:20:1d:9a:
cb:fa:4b:76:86:f6:98:17:f1:eb:0a:5e:cb:2d:f7:
3f:e5:77:59:7f:46:c5:c3:20:0d:10:55:6f:19:e6:
22:92:83:17:74:d8:cb:f0:b2:6e:0e:b3:81:90:e8:
3d:bc:93:89:97:de:a0:06:e8:3c:b4:ab:91:7f:42:
8d:da:c5:a0:11:f3:3e:f5:f5:11:b2:be:c0:0c:2b:
23:c5:27:92:73:6f:eb:09:94:fb:e7:e0:b9:bd:69:
26:23:71:ed:9d:d3:76:73:94:0e:b3:ab:9b:13:da:
f1:e2:18:4c:06:7d:65:9a:12:86:4d:dd:c9:1f:48:
a6:3b:dc:c7:98:8d:20:86:e5:d9:a7:3f:85:f2:17:
14:e1:2f:c3:3f:ec:2b:45:78:9f:af:80:2b:d5:19:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:04:4D:88:22:51:84:1A:68:35:00:88:83:1A:3D:69:B3:DF:51:2A
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5d:40:45:0f:4b:4b:b8:a9:07:1a:9e:fd:7f:1a:b7:0f:91:
73:4f:a1:82:17:3b:49:8e:ad:24:f9:0b:77:6b:a1:2a:f7:ad:
65:8d:12:01:6a:92:bd:a1:3b:e0:63:9c:95:28:3e:39:fc:3d:
3c:b5:75:52:13:12:99:31:78:fc:61:2a:2d:69:01:7b:93:e5:
17:88:1d:e4:a5:db:76:20:14:2b:ab:2e:7f:0a:13:9a:20:36:
c3:de:d6:1c:0b:12:57:5b:8d:01:ee:50:27:14:e8:8a:96:c9:
c6:9b:fb:48:8d:ad:22:32:75:1e:bc:77:84:d9:94:cd:52:b4:
58:d8:77:c5:64:ea:34:4e:92:5d:28:63:df:b9:25:40:2b:2d:
7e:c9:a8:fa:7c:15:85:25:95:9e:cc:f4:30:5b:4b:66:2b:7f:
54:1f:ba:04:07:cc:c7:0f:62:e2:0a:e1:cb:d7:cc:25:57:93:
33:92:67:e6:9a:00:e4:ae:2b:d7:ce:e8:dc:26:81:bf:d9:2f:
b1:63:b8:68:33:f7:76:92:95:fd:7c:11:fb:27:8d:e1:c0:90:
a9:ab:b2:df:4a:e5:53:54:09:25:04:95:bd:af:64:1b:c4:f6:
5f:b4:14:34:18:e1:05:27:e4:0f:98:83:28:59:36:dd:b1:3d:
ac:31:a8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:49 2026 by rpki-client