Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: ZudlkqNQACKR4nGeZn1ZeU6sh33hiAGBiP1IJV06DNU=
Subject key identifier: B5:F2:DD:E8:D5:A7:B7:C0:B1:58:FA:A7:D1:6E:D2:06:0C:5F:B9:27
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 019D069DEE637A244BC8CABE271F85B9BAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 1877
Signing time: Thu 19 Mar 2026 15:01:46 +0000
Manifest this update: Thu 19 Mar 2026 15:01:46 +0000
Manifest next update: Fri 20 Mar 2026 15:01:46 +0000
Files and hashes: 1: 1S2bZZj9qdyRRB7nR_b4PQ0z1Sw.roa (hash: u9ro5Rvo3czSNujsVQtq0Ez7XFyuHSIaTIk3k7PO73o=)
2: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: nJe5KdMS9CTnJjwchf3MGbqqGoax2j2bs04KgK1cFKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 15:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:9d:ee:63:7a:24:4b:c8:ca:be:27:1f:85:b9:ba:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Mar 19 15:01:46 2026 GMT
Not After : Mar 20 15:01:46 2026 GMT
Subject: CN=b5f2dde8d5a7b7c0b158faa7d16ed2060c5fb927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:bb:e5:3c:8d:00:69:11:19:73:87:5d:25:
1c:3f:17:19:b2:66:4e:32:99:8e:2c:86:ec:a8:80:
2b:b3:84:96:a2:23:69:4e:da:a9:5a:48:76:0d:99:
5e:9d:15:f2:c1:e2:cc:c6:d4:93:29:5c:f5:64:16:
6d:8e:33:53:a2:63:ab:65:e5:07:40:39:6e:22:37:
ee:ef:89:fc:da:9c:e2:32:68:87:27:f7:b2:62:f1:
a6:dd:a7:a5:41:16:a7:02:9f:c4:45:b6:01:39:25:
fb:92:51:c0:ec:23:fd:72:fc:99:44:31:da:4b:0f:
a8:22:31:1b:15:d5:16:5f:5e:3c:16:d9:e6:11:80:
fb:0d:6d:a0:ae:5c:a8:be:18:35:73:78:da:f6:92:
99:01:4a:f4:73:3d:9b:cb:97:28:37:a2:7e:8a:a6:
e8:a1:e9:32:08:5f:ac:8d:b3:c8:8d:cc:09:cf:ac:
8f:8a:7b:28:02:91:ac:8d:9a:1d:b0:50:7d:79:03:
d4:7a:5c:7a:50:be:a2:d3:f6:20:24:25:82:b7:6d:
bd:7c:c7:f1:ce:95:f0:ce:0e:57:3d:ad:58:0e:3d:
73:0f:40:c5:bc:3e:1b:0c:6f:fc:a1:50:39:17:82:
92:d8:93:2b:42:3a:b4:64:43:db:3b:08:43:8d:32:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F2:DD:E8:D5:A7:B7:C0:B1:58:FA:A7:D1:6E:D2:06:0C:5F:B9:27
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e5:e2:24:4d:1f:96:ff:b9:44:ec:e8:6b:c4:21:ac:f2:64:
34:3b:7b:4b:d3:a2:ff:42:e3:32:dd:c6:30:b3:f3:73:3e:74:
7f:66:93:86:d2:8f:ab:65:3d:21:d2:9a:0c:68:9b:e5:36:bc:
6c:88:e7:6e:10:a1:4f:74:62:81:86:ad:9d:1f:d7:c1:17:f8:
fd:61:6b:46:98:58:29:ea:2c:ee:61:33:ac:37:2d:07:4d:35:
2f:67:0a:9d:8d:7a:21:da:f1:e1:c8:6e:3e:18:9c:85:76:63:
9c:13:9d:4f:22:12:8c:c6:e7:a3:40:71:a1:b7:47:52:ef:df:
9c:67:f6:a0:97:f8:99:7a:0e:60:42:43:76:c4:2f:e6:9e:03:
48:92:78:ad:c0:f0:7a:99:f1:55:4c:ad:be:09:7d:a6:82:c3:
c4:e0:7d:ef:7b:41:2b:ce:1b:c6:ac:02:93:3f:61:31:57:c9:
e5:1e:3d:4d:09:26:dc:ac:8a:95:10:69:e1:d1:41:70:98:2b:
6e:b2:9f:05:f9:35:14:2b:58:8f:3f:85:e5:ee:c5:95:91:b2:
42:c4:97:be:07:39:51:ee:cd:81:58:75:e1:3b:bf:a0:36:ff:
00:67:4f:ed:f7:bf:ba:92:50:03:9a:da:88:71:cb:84:f1:c1:
ec:a7:d9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:24:13 2026 by rpki-client