Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
File: mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json)
Hash identifier: HoXmodoDzuDHZk82YiCUnr8oOTiSZ2wV2eWHcYaPCV0=
Subject key identifier: EC:60:D3:8A:55:98:29:9B:57:D1:76:60:E1:57:D8:5F:80:75:81:48
Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
Certificate issuer: /CN=9a754c71d62cb23948d9119eda772fde38e67b67
Certificate serial: 019D394176F854F5A7D260D2DB7E968FF3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:24 +0000
Manifest this update: Sun 29 Mar 2026 11:01:24 +0000
Manifest next update: Mon 30 Mar 2026 11:01:24 +0000
Files and hashes: 1: 0gT4DLtTdM_CyVsv9Vw60QKs1N4.roa (hash: zFRwzZzrDs5I9AtJqZurIqmSmEX2LYuF+rvsMKclqlE=)
2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: bp5s9hUfgVR0yiAOnDXyo8R52YDXRF3qEuYGsPWk16c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:76:f8:54:f5:a7:d2:60:d2:db:7e:96:8f:f3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67
Validity
Not Before: Mar 29 11:01:24 2026 GMT
Not After : Mar 30 11:01:24 2026 GMT
Subject: CN=ec60d38a5598299b57d17660e157d85f80758148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:44:a3:a9:30:53:e5:db:fa:7a:ba:14:f6:
8c:c1:5d:36:45:97:d9:d5:06:cc:a1:d1:2a:71:31:
94:90:8d:f7:44:e8:80:9b:55:b8:9f:dc:44:96:1d:
b8:cd:6a:7b:87:13:23:50:41:ce:72:ac:cd:35:51:
5d:ea:8e:bc:ea:b5:ce:58:5c:dd:b7:88:4e:f7:35:
a0:67:fe:33:aa:b5:e4:53:ba:8a:40:7f:53:5e:69:
9a:60:c2:45:82:8c:9c:cd:a1:e2:2a:d9:95:c7:c7:
0d:36:00:ea:d4:b9:bd:ac:f6:10:91:ad:de:d5:9b:
7f:56:3f:5d:ad:1f:da:34:52:69:77:1b:69:c9:69:
24:22:52:8b:e0:19:ab:1c:ca:60:f2:cf:35:07:30:
83:fe:6c:84:0e:45:d4:a9:20:21:a6:dc:c2:b3:6e:
37:c9:39:1b:fd:47:3c:97:21:57:b0:21:99:0a:72:
df:96:10:3a:40:de:c3:25:65:73:85:93:ea:1c:fe:
1f:67:1a:15:f4:8a:4f:6d:f2:7a:f5:40:18:5f:13:
be:4c:67:97:ad:32:90:10:6c:3c:e0:ad:c0:21:2f:
d0:3a:86:a4:39:a9:ca:1b:63:d1:be:1d:18:fb:3c:
da:b9:9e:6c:a5:80:f3:0e:64:ac:1b:54:1c:8e:d8:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:60:D3:8A:55:98:29:9B:57:D1:76:60:E1:57:D8:5F:80:75:81:48
X509v3 Authority Key Identifier:
keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:76:0b:4e:43:60:20:2d:b8:ae:40:c8:83:06:6c:a4:80:13:
d3:93:28:6e:12:94:00:75:1c:9f:22:6f:08:66:42:d1:cc:4f:
cb:3d:af:8f:c7:44:10:11:a6:fa:04:82:63:04:37:e2:33:f2:
d4:ef:44:0d:cc:2b:11:4e:ba:0b:99:f9:25:57:f5:be:14:cb:
17:8d:a5:14:fa:20:5e:a7:6b:d7:ea:4b:aa:4c:d0:f6:8a:25:
18:9f:39:a4:de:a1:f6:b8:f8:f9:38:d9:a5:bb:af:bc:c8:9d:
2b:45:68:c9:af:dd:1b:6b:1f:87:d1:f2:93:08:b0:a8:fc:68:
db:f6:fa:85:9f:54:52:c0:24:b4:e5:fd:25:c3:07:72:f1:94:
ae:fc:c1:db:c9:b8:bc:bf:50:7c:20:1f:e5:4d:12:77:05:24:
12:44:44:20:b7:71:c9:6f:30:8f:a0:5b:a1:59:88:2d:10:8e:
2a:29:91:b9:7a:a8:3f:1d:84:42:46:48:30:84:1a:c8:e7:14:
f0:de:bc:a3:d9:96:f4:ad:ac:67:f0:74:85:73:ea:c7:ba:e2:
3c:46:81:6b:d0:65:42:c5:54:48:5f:0d:8a:f4:2c:a9:5c:bd:
06:a9:b7:1f:69:8d:10:fe:87:fc:f8:ee:2f:8e:c9:c0:de:2b:
8c:e7:61:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:51 2026 by rpki-client