Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File: mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier: 46ju216eYsqD+URzZpw5RQvuntSen4gKjaJFcLlWf74=
Subject key identifier: 2E:43:18:90:AC:78:19:FC:1B:70:59:10:0F:83:F9:7C:A8:B4:4C:13
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial: 01A06E028251120F816948F858CD225E63A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number: 18C2
Signing time: Fri 04 Sep 2026 20:00:53 +0000
Manifest this update: Fri 04 Sep 2026 20:00:53 +0000
Manifest next update: Sat 05 Sep 2026 20:00:53 +0000
Files and hashes: 1: KEyhGh3u-Ad2U98qs53aKdB_GJc.roa (hash: jZXKizyeTSKszZt9XLRCfNj1B4xBpIyE3AIW1lpSBsI=)
2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: LT8u7OhpnLGiQdkgWwXKcfh6t/RPQ7gw+XHzzkPd21o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:82:51:12:0f:81:69:48:f8:58:cd:22:5e:63:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
Validity
Not Before: Sep 4 20:00:53 2026 GMT
Not After : Sep 5 20:00:53 2026 GMT
Subject: CN=2e431890ac7819fc1b7059100f83f97ca8b44c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:bb:87:05:e6:86:7e:b5:90:b1:8a:ac:f9:
7d:18:8c:f1:87:e3:56:6d:6b:e9:22:3f:ad:ef:cd:
c0:83:67:33:37:d5:3a:ab:c4:17:f2:1f:6f:98:3f:
1d:a2:0d:90:8a:fa:d6:22:48:b9:30:dc:6f:14:00:
4f:60:db:da:3a:ea:d6:18:3a:05:62:48:f9:97:3b:
0f:ec:d7:e1:4c:d5:5c:7b:f2:df:37:c9:bf:1c:7f:
7c:4b:92:21:a7:d1:ed:c7:52:36:7e:91:bc:c5:4b:
3a:a1:da:60:6e:b7:01:be:6e:68:56:6d:01:98:40:
98:e2:a7:9d:25:5d:e3:20:f0:41:c0:d0:d3:85:b8:
5e:4d:64:b3:9c:f3:f1:47:19:69:a5:c3:dd:08:f4:
52:40:ee:ab:a1:ce:0e:fe:97:09:41:4d:4f:f7:c5:
46:12:20:de:26:c1:13:0c:a2:27:e4:7e:d5:10:50:
10:e9:46:6c:15:d5:54:0f:fa:e3:47:89:a8:bd:67:
f6:4a:75:9b:a8:b0:15:4a:8c:f2:78:6e:c7:db:be:
7e:af:0f:ab:d5:35:88:3d:fd:48:74:20:6a:f1:72:
c2:ae:0d:dd:59:ff:7b:d6:35:9d:2f:4f:4d:57:c8:
d7:77:47:54:a0:ce:c2:37:9a:6f:7a:c7:3c:7d:8d:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:43:18:90:AC:78:19:FC:1B:70:59:10:0F:83:F9:7C:A8:B4:4C:13
X509v3 Authority Key Identifier:
keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0b:d9:46:e4:aa:36:17:64:d9:2e:7f:e1:6d:8d:d2:01:80:
dd:c7:64:bd:41:d6:1d:a6:36:27:01:a6:51:03:bc:c1:77:2a:
60:f2:1f:80:25:dc:a7:bd:68:51:26:2f:ca:46:ee:bb:f6:f7:
17:a7:f7:04:1f:75:70:dc:57:f3:f2:51:d6:f4:eb:b0:f2:6d:
47:a0:db:5d:02:e4:97:10:73:4a:3c:9b:41:6d:42:7f:92:3d:
3f:95:54:80:c8:9f:fc:6f:a7:93:3a:07:69:c7:e1:21:8b:9c:
2d:3b:0a:b8:59:05:a9:47:29:4c:3d:3c:0a:26:24:95:07:a2:
14:d5:35:61:80:b6:6e:6a:db:e5:c8:f7:71:db:17:88:f3:f4:
e4:e6:3f:4b:e4:64:f2:b8:27:03:55:b3:98:4c:71:87:31:3b:
3a:ee:6c:d2:8a:a9:cd:dc:9b:b5:f3:2d:94:59:fe:ce:1f:84:
dc:19:1b:90:8e:77:9f:a8:ca:6d:03:95:96:f6:1f:c6:ee:37:
83:f7:cc:ea:84:a7:fb:b3:2d:a2:11:f7:e1:5e:c4:99:09:c5:
ae:01:8c:94:47:70:c4:c2:be:fb:11:47:30:34:09:db:e9:0d:
17:10:fe:75:fd:38:ba:1f:67:50:f6:76:0a:64:ae:21:ff:ce:
c5:ea:5b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuAoJREg+BaUj4WM0iXmOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWI1NDIyY2Q1NTc4ZDQ3MTVlYmU0YzUwOTcyMDI1MjNk
ZDU2NTgwHhcNMjYwOTA0MjAwMDUzWhcNMjYwOTA1MjAwMDUzWjAzMTEwLwYDVQQD
EygyZTQzMTg5MGFjNzgxOWZjMWI3MDU5MTAwZjgzZjk3Y2E4YjQ0YzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmte7hwXmhn61kLGKrPl9GIzxh+NW
bWvpIj+t783Ag2czN9U6q8QX8h9vmD8dog2QivrWIki5MNxvFABPYNvaOurWGDoF
Ykj5lzsP7NfhTNVce/LfN8m/HH98S5Ihp9Htx1I2fpG8xUs6odpgbrcBvm5oVm0B
mECY4qedJV3jIPBBwNDThbheTWSznPPxRxlppcPdCPRSQO6roc4O/pcJQU1P98VG
EiDeJsETDKIn5H7VEFAQ6UZsFdVUD/rjR4movWf2SnWbqLAVSozyeG7H275+rw+r
1TWIPf1IdCBq8XLCrg3dWf971jWdL09NV8jXd0dUoM7CN5pvesc8fY2PEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5DGJCseBn8G3BZEA+D+XyotEwTMB8GA1UdIwQY
MBaAFJkbVCLNVXjUcV6+TFCXICUj3VZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2Mt
ZDQ2ZmZjNTAxZjM2LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2MtZDQ2ZmZjNTAxZjM2
LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgvZRuSq
Nhdk2S5/4W2N0gGA3cdkvUHWHaY2JwGmUQO8wXcqYPIfgCXcp71oUSYvykbuu/b3
F6f3BB91cNxX8/JR1vTrsPJtR6DbXQLklxBzSjybQW1Cf5I9P5VUgMif/G+nkzoH
acfhIYucLTsKuFkFqUcpTD08CiYklQeiFNU1YYC2bmrb5cj3cdsXiPP05OY/S+Rk
8rgnA1WzmExxhzE7Ou5s0oqpzdybtfMtlFn+zh+E3BkbkI53n6jKbQOVlvYfxu43
g/fM6oSn+7MtohH34V7EmQnFrgGMlEdwxMK++xFHMDQJ2+kNFxD+df04uh9nUPZ2
CmSuIf/OxepbFg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:38:55 2026 by rpki-client