Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: McEUua/YLH+bYOPEMZqnpH2QFmHa3BfNW7780KIRfk8=
Subject key identifier: 76:57:BB:19:AE:61:AE:54:09:EF:1E:8A:30:71:E7:08:85:A9:08:E4
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019CB76FFE74FCE46A9238E201B0C7DDB156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 1859
Signing time: Wed 04 Mar 2026 06:01:35 +0000
Manifest this update: Wed 04 Mar 2026 06:01:35 +0000
Manifest next update: Thu 05 Mar 2026 06:01:35 +0000
Files and hashes: 1: 4ULYQtUd4oJTzwLazC-kDlXIDUE.roa (hash: KhGm2r25s8XUb5ohnzrZIMa245c7C+KlzncTxFjIUB4=)
2: 5Wgno04KyidaX-QDbhDJedktTA8.roa (hash: Xc3/xXxuEfrWMY1HHfepNmNKSi6o4qwYhfPj+oAmePQ=)
3: HhO3fYlasNlXuWCWma8olPA14I8.roa (hash: an4Zb60vA9s3r5vXjNARMkYhW6HY9Hr3vQtUZ9SJwt4=)
4: HvPOQZKDgwmKWi2B6Okgt-1RwTg.roa (hash: TsDVgiHQk6MTChOacVguR2X46T4ir2Plfn7OSyPlgeY=)
5: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: gV//bzGyeEElR1aSpN+MiML4WGSeleu0ytrhBSt/9ow=)
6: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=)
7: hj9uyuHnnlFd0x9G2TnG2XeZVwU.roa (hash: omuDv6cvkQ1Vxo4qn67eCuvFXOzSVc9gpTeiRSMZI1I=)
8: nF0enHZgLVZjaWa5Zj_RxQHqgcc.roa (hash: bZ8n5I2vQSOPQegllbH0nrlHZ8rv0jZPkL+haBHXJe0=)
9: vV3qztAuySxmj_M4LrWPYFeYHG4.roa (hash: UvLOMR+InrN8lr21tIq0j8f9KmRpU/O5MOk27aa9JN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:6f:fe:74:fc:e4:6a:92:38:e2:01:b0:c7:dd:b1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Mar 4 06:01:35 2026 GMT
Not After : Mar 5 06:01:35 2026 GMT
Subject: CN=7657bb19ae61ae5409ef1e8a3071e70885a908e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:5f:e2:5c:34:75:ec:36:eb:45:80:87:11:
d7:bd:88:c0:6b:07:73:e1:66:c2:b4:ad:7a:e9:b6:
77:16:ce:f0:b7:c7:8d:29:f8:48:79:65:f5:8e:55:
b4:4a:23:71:ba:61:85:e3:0b:f8:2b:f0:ab:16:be:
b7:c3:14:35:c9:a9:f4:6e:4e:a7:84:b8:92:bb:6c:
3d:a7:37:db:68:cb:ad:66:b7:a0:d3:ae:aa:80:ac:
16:0b:e9:f9:9c:df:58:94:50:a8:57:4e:66:c0:c1:
7e:a3:a8:a8:5b:15:f3:22:83:f1:e9:30:93:8e:46:
1c:30:af:ae:0f:4e:fa:98:35:6b:1a:ef:cf:13:8c:
75:e6:f6:25:76:b0:36:ca:28:57:73:74:f4:d2:70:
48:b9:3f:e1:ba:56:16:2f:b6:cc:cb:1d:fc:14:31:
55:45:1f:96:96:be:c0:bd:7a:2e:26:67:30:1d:c0:
36:b8:6a:29:ba:3f:0d:88:b9:d1:c2:ed:47:df:2a:
b9:41:1e:a1:c3:8d:29:2e:ac:11:d6:e2:b1:82:28:
08:42:30:c5:43:f4:f8:79:58:79:9c:0a:42:ee:22:
71:6c:12:20:09:ee:2b:8c:11:43:f7:46:05:87:e7:
0a:ad:cf:d1:f5:f9:1c:27:48:83:73:d8:b0:9b:fa:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:57:BB:19:AE:61:AE:54:09:EF:1E:8A:30:71:E7:08:85:A9:08:E4
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:6e:c1:a4:4e:49:f5:a7:a0:6e:90:6a:bc:37:26:42:78:d9:
80:f1:94:ac:03:b7:83:44:d4:62:f4:ed:94:f8:1e:b3:64:ef:
66:eb:23:71:ea:0b:89:45:b0:ca:41:22:8c:fb:a7:2b:99:17:
50:0c:ae:36:b0:aa:d9:9f:03:0a:b1:54:7b:02:22:08:f1:40:
4e:69:5a:b3:e2:e5:e6:91:fe:c3:2a:79:28:01:69:23:32:10:
72:1b:ba:17:67:60:4b:99:2f:25:7d:27:52:0b:8d:54:67:69:
d8:66:40:f3:57:12:b3:a2:99:d7:bc:2a:b8:e5:50:b9:5a:e3:
f4:c1:8b:84:ce:20:24:7e:35:e5:32:49:92:79:34:4a:ce:ca:
ee:33:71:01:61:1a:e4:40:18:60:7d:b7:de:5d:38:1e:0a:b3:
26:cf:3a:36:52:33:04:ff:25:b4:a4:6b:82:98:ff:48:3e:3b:
c1:8e:7f:be:71:c0:42:ee:d4:d4:27:2f:ae:a9:c6:55:02:89:
31:f9:c4:50:96:cd:8b:e2:b5:a3:0c:eb:b0:e6:0b:fb:1b:eb:
97:6a:1b:8f:31:2c:a3:f0:15:67:9b:39:a9:20:d3:57:a4:67:
c8:f0:89:33:c0:58:5d:b2:50:80:f3:9b:5e:a7:e5:ea:a8:14:
7a:d7:8a:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy3b/50/ORqkjjiAbDH3bFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx
NGMzY2IwHhcNMjYwMzA0MDYwMTM1WhcNMjYwMzA1MDYwMTM1WjAzMTEwLwYDVQQD
Eyg3NjU3YmIxOWFlNjFhZTU0MDllZjFlOGEzMDcxZTcwODg1YTkwOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVJf4lw0dew260WAhxHXvYjAawdz
4WbCtK166bZ3Fs7wt8eNKfhIeWX1jlW0SiNxumGF4wv4K/CrFr63wxQ1yan0bk6n
hLiSu2w9pzfbaMutZreg066qgKwWC+n5nN9YlFCoV05mwMF+o6ioWxXzIoPx6TCT
jkYcMK+uD076mDVrGu/PE4x15vYldrA2yihXc3T00nBIuT/hulYWL7bMyx38FDFV
RR+Wlr7AvXouJmcwHcA2uGopuj8NiLnRwu1H3yq5QR6hw40pLqwR1uKxgigIQjDF
Q/T4eVh5nApC7iJxbBIgCe4rjBFD90YFh+cKrc/R9fkcJ0iDc9iwm/ou/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZXuxmuYa5UCe8eijBx5wiFqQjkMB8GA1UdIwQY
MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt
MWRkNmQyODFjODhhLzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh
LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4G7BpE5J
9aegbpBqvDcmQnjZgPGUrAO3g0TUYvTtlPges2TvZusjceoLiUWwykEijPunK5kX
UAyuNrCq2Z8DCrFUewIiCPFATmlas+Ll5pH+wyp5KAFpIzIQchu6F2dgS5kvJX0n
UguNVGdp2GZA81cSs6KZ17wquOVQuVrj9MGLhM4gJH415TJJknk0Ss7K7jNxAWEa
5EAYYH233l04HgqzJs86NlIzBP8ltKRrgpj/SD47wY5/vnHAQu7U1CcvrqnGVQKJ
MfnEUJbNi+K1owzrsOYL+xvrl2objzEso/AVZ5s5qSDTV6RnyPCJM8BYXbJQgPOb
Xqfl6qgUeteKsg==
-----END CERTIFICATE-----
Generated at Wed Mar 4 16:06:42 2026 by rpki-client