Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File: rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier: dBmgnR/dxZwGD/vjNOvLdfdNbjvnNJ/BYwYY4VYK/M4=
Subject key identifier: 86:FA:F3:0E:57:27:5E:95:03:0C:3A:3F:20:DA:A6:57:B6:59:F9:49
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial: 019C98527BCADC3F7AD753F987720E9B213C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number: 17D9
Signing time: Thu 26 Feb 2026 05:01:08 +0000
Manifest this update: Thu 26 Feb 2026 05:01:08 +0000
Manifest next update: Fri 27 Feb 2026 05:01:08 +0000
Files and hashes: 1: NZ4KU7XjOTlJfpxZEeYBOqiocLc.roa (hash: 1hvoqCoD4N6W+G9hGoZfjVl3mm68AnZJdnlCiI2tn30=)
2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: 3Nc7rbgNCcc3f5C3bG/CLJfIsHvBSehECnMX4kVQ/EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:98:52:7b:ca:dc:3f:7a:d7:53:f9:87:72:0e:9b:21:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
Validity
Not Before: Feb 26 05:01:08 2026 GMT
Not After : Feb 27 05:01:08 2026 GMT
Subject: CN=86faf30e57275e95030c3a3f20daa657b659f949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:86:99:8b:8e:f2:57:db:66:72:22:58:af:e3:
2b:06:71:94:fd:0e:5a:12:b3:86:e6:bb:66:64:a2:
99:ac:6e:fc:de:2c:67:61:f9:a5:7d:05:06:20:42:
cd:e3:e4:71:cc:ee:1e:1a:b8:77:61:71:84:68:ac:
a8:94:7e:0b:e3:35:1b:bb:fb:7b:43:c6:6f:b7:1e:
15:2a:47:a2:bc:e6:0e:9d:df:3c:24:91:65:56:95:
77:5a:d9:17:5d:fe:55:30:fe:bc:d5:e6:ee:9b:1f:
aa:d7:1a:b5:a4:ea:de:66:a7:f5:c5:a8:f0:38:3b:
93:d2:92:6b:0f:8a:9a:52:f5:87:ad:df:0b:20:46:
cf:1f:f1:76:b0:da:43:c1:c0:ba:89:eb:16:a0:4c:
7d:64:1f:7a:15:ae:5d:4b:76:b5:90:93:93:c5:4e:
2e:49:29:d5:71:ab:a4:5a:ae:48:e4:22:07:3b:ce:
aa:7d:79:0e:c3:e8:b5:00:87:96:d6:32:c4:1c:0c:
87:dd:8f:76:05:ea:0c:73:52:dc:ce:fd:1e:1b:80:
4d:75:da:33:b1:63:53:ae:10:41:05:69:87:68:99:
ca:2b:43:48:f8:0a:e0:97:a1:b8:bb:b8:2c:cc:6f:
06:5d:f5:54:63:0b:d8:58:ad:6a:6b:d5:17:b5:e1:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FA:F3:0E:57:27:5E:95:03:0C:3A:3F:20:DA:A6:57:B6:59:F9:49
X509v3 Authority Key Identifier:
keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:44:45:1c:8b:81:e9:fa:59:d2:7d:d0:02:ed:e9:30:23:44:
59:13:2d:06:e3:6d:fa:85:67:e5:ff:7d:e0:a8:4e:c3:ee:cd:
a0:b7:7d:3a:26:d3:dd:4c:95:ac:0a:af:15:67:70:fd:24:01:
18:8c:2b:37:cb:80:63:53:bc:14:b2:5f:14:a5:7b:85:18:93:
bc:3a:3a:99:76:ad:c7:12:d8:6b:4c:2b:66:ba:13:9a:49:23:
07:76:1a:b6:66:44:3b:69:e8:ae:24:62:4e:4b:0d:fc:2a:c9:
7a:65:64:9f:24:41:69:2c:c6:d1:1a:45:26:cb:25:76:d4:7b:
b4:7b:be:22:ac:c9:8e:f6:4c:3b:3d:3f:da:17:e1:45:d4:0d:
13:47:bf:07:9a:38:9b:08:6c:22:36:23:f4:04:66:53:c4:63:
64:69:34:37:5c:cb:71:10:7d:77:b2:3a:00:6e:98:2d:ba:b6:
cd:ff:e7:77:01:01:ab:20:3f:f0:41:24:21:5c:65:7b:a6:48:
e7:0f:28:d8:79:7f:92:d5:83:1c:00:8c:c3:0f:f9:05:08:80:
de:9b:1d:02:64:13:bd:5a:29:02:a5:68:2e:aa:52:09:85:df:
e2:e6:7c:10:2a:f5:1b:d8:d5:48:1e:b3:5d:19:4e:a4:e2:7f:
f4:48:1e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:52:12 2026 by rpki-client