Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: WrlC1yAOQuIwr98mLgypVW4ESctb6Tb5mQ8+l38F160=
Subject key identifier: 7F:38:20:75:1E:7B:5A:80:F6:A7:75:FB:9D:63:51:7A:56:F5:BC:00
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 019CF87393CC4A32740F45C52EA0A77944B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 1896
Signing time: Mon 16 Mar 2026 21:00:49 +0000
Manifest this update: Mon 16 Mar 2026 21:00:49 +0000
Manifest next update: Tue 17 Mar 2026 21:00:49 +0000
Files and hashes: 1: 0ihzHauFogznBZ4D95qRfmh5DWY.roa (hash: pm2OFW8n3jM91O28PWSYiZEPtxsO4IG0tuEGJsYy+tw=)
2: aXqn4kbdTiISCg3qjch21kWiAS0.roa (hash: fWTEPBg8GhRwpF6veTh6PUPLm3Q1obhdo3c/16/83Z4=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: lfqEyFA/F1vtV/CD+U0U747P2xVjsIo5O6ohe1JLNN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 15:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:73:93:cc:4a:32:74:0f:45:c5:2e:a0:a7:79:44:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Mar 16 21:00:49 2026 GMT
Not After : Mar 17 21:00:49 2026 GMT
Subject: CN=7f3820751e7b5a80f6a775fb9d63517a56f5bc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:7a:57:93:4c:af:b5:15:dc:26:83:fc:74:
91:af:81:61:68:16:8f:b1:e0:e9:4d:8c:bd:53:97:
47:7d:89:a7:3f:d7:ef:00:59:35:96:ce:7d:33:fb:
aa:df:13:f7:b4:3c:b2:02:c7:fb:dd:95:2e:0e:d2:
d4:91:18:03:6f:4b:33:e5:58:df:f7:6f:e6:bb:96:
c7:6e:7c:10:f1:f0:d0:70:14:2c:1f:a1:a5:5a:fd:
53:6c:27:28:7e:67:a9:c2:ac:6b:32:89:09:05:fa:
d5:ba:c4:c4:79:62:ad:9b:8e:13:82:f8:e5:3b:5e:
a5:87:b6:e9:b9:d4:cd:b5:0f:6d:02:2a:e2:79:cd:
05:e0:2a:d5:02:5b:17:4e:ca:91:f7:4f:de:a6:ba:
a3:a0:2d:0b:20:de:30:46:c1:d4:33:47:8c:e4:ea:
e7:41:df:0a:24:fd:06:7b:d0:c6:87:07:40:e2:00:
2e:2a:f9:5c:27:95:e7:66:e7:34:4c:58:98:57:07:
29:86:b4:37:8f:4b:d4:53:49:52:57:7f:95:b7:f5:
b2:1d:c0:d4:54:f6:aa:46:92:13:fb:5a:01:72:c0:
0a:a3:68:ec:42:60:f4:dd:94:6f:16:64:30:14:5b:
e0:0c:3a:7b:dc:4b:c6:2d:d4:b1:6e:5c:8b:40:b0:
84:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:38:20:75:1E:7B:5A:80:F6:A7:75:FB:9D:63:51:7A:56:F5:BC:00
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:cb:cd:a2:c3:32:0a:2e:07:d4:2b:24:9c:e8:f0:76:0a:18:
1c:e4:50:6b:97:ee:be:86:5c:43:b3:77:94:0f:76:6c:97:8c:
34:7a:13:a6:f6:9c:a6:f2:22:66:a3:52:d9:6f:56:af:47:05:
fe:ed:12:2e:97:3d:1e:8f:19:00:69:31:99:5e:2e:25:df:b9:
4a:4b:9f:c0:98:bc:0c:32:13:f6:30:9e:ee:ad:a8:42:a1:7d:
52:e8:be:84:41:b1:c6:41:d2:0e:2d:fb:45:1a:8f:24:63:8a:
d0:b5:d7:ee:ec:da:47:1d:10:0b:d6:a9:5f:d5:3c:e1:a8:04:
c3:98:03:02:ce:95:b1:0e:6c:20:bb:02:62:6d:4d:69:fc:df:
ba:58:66:44:bc:61:65:56:00:ab:11:30:27:1b:83:61:33:a1:
af:b4:b6:36:6a:67:09:0c:67:62:93:6d:a2:06:25:c0:ce:a3:
ee:37:d2:be:5c:30:86:4c:7e:a4:b5:06:02:b6:dd:f0:da:eb:
fd:60:d7:99:e1:3d:59:94:51:70:be:b8:1e:c0:e8:0b:e7:10:
da:20:ce:9d:47:05:67:21:34:08:61:a0:73:7f:7c:aa:fb:b5:
01:f2:17:bf:e2:d1:7c:4b:e0:a7:6f:73:d8:fa:1a:c7:25:00:
8e:50:0a:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz4c5PMSjJ0D0XFLqCneUSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MmI4NjA5NWNlNTU4ZDJlOTYxODcyOGE0NDIyOGEyN2Jl
OTA5OGYwHhcNMjYwMzE2MjEwMDQ5WhcNMjYwMzE3MjEwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZjM4MjA3NTFlN2I1YTgwZjZhNzc1ZmI5ZDYzNTE3YTU2ZjViYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8x6V5NMr7UV3CaD/HSRr4FhaBaP
seDpTYy9U5dHfYmnP9fvAFk1ls59M/uq3xP3tDyyAsf73ZUuDtLUkRgDb0sz5Vjf
92/mu5bHbnwQ8fDQcBQsH6GlWv1TbCcofmepwqxrMokJBfrVusTEeWKtm44Tgvjl
O16lh7bpudTNtQ9tAiriec0F4CrVAlsXTsqR90/eprqjoC0LIN4wRsHUM0eM5Orn
Qd8KJP0Ge9DGhwdA4gAuKvlcJ5XnZuc0TFiYVwcphrQ3j0vUU0lSV3+Vt/WyHcDU
VPaqRpIT+1oBcsAKo2jsQmD03ZRvFmQwFFvgDDp73EvGLdSxblyLQLCENwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH84IHUee1qA9qd1+51jUXpW9bwAMB8GA1UdIwQY
MBaAFJkrhglc5VjS6WGHKKRCKKJ76QmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEt
ZjA0ZmRjYzA5ZTUxLzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEtZjA0ZmRjYzA5ZTUx
LzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcvNosMy
Ci4H1CsknOjwdgoYHORQa5fuvoZcQ7N3lA92bJeMNHoTpvacpvIiZqNS2W9Wr0cF
/u0SLpc9Ho8ZAGkxmV4uJd+5SkufwJi8DDIT9jCe7q2oQqF9Uui+hEGxxkHSDi37
RRqPJGOK0LXX7uzaRx0QC9apX9U84agEw5gDAs6VsQ5sILsCYm1NafzfulhmRLxh
ZVYAqxEwJxuDYTOhr7S2NmpnCQxnYpNtogYlwM6j7jfSvlwwhkx+pLUGArbd8Nrr
/WDXmeE9WZRRcL64HsDoC+cQ2iDOnUcFZyE0CGGgc398qvu1AfIXv+LRfEvgp29z
2PoaxyUAjlAKMw==
-----END CERTIFICATE-----
Generated at Tue Mar 17 01:12:07 2026 by rpki-client