Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: Rg1f5XDAsGqwaM/dFNwPbK6YvjDdrPxVt+aLJHOop+Q=
Subject key identifier: 80:41:60:31:3D:A5:68:8E:2D:57:C1:CF:37:13:6E:DF:77:12:89:FB
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 019EF8DD4620326B225DDC348FB7052C745B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 1979
Signing time: Wed 24 Jun 2026 09:01:51 +0000
Manifest this update: Wed 24 Jun 2026 09:01:51 +0000
Manifest next update: Thu 25 Jun 2026 09:01:51 +0000
Files and hashes: 1: 1S2bZZj9qdyRRB7nR_b4PQ0z1Sw.roa (hash: u9ro5Rvo3czSNujsVQtq0Ez7XFyuHSIaTIk3k7PO73o=)
2: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: 5GHF+53fmX9bAN+5Z6b+Rq54HzSMj63oiYcwXMLfweA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:dd:46:20:32:6b:22:5d:dc:34:8f:b7:05:2c:74:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Jun 24 09:01:51 2026 GMT
Not After : Jun 25 09:01:51 2026 GMT
Subject: CN=804160313da5688e2d57c1cf37136edf771289fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:04:2f:10:7a:08:a8:56:ab:c9:ca:38:33:
8b:df:10:03:e7:8a:19:d1:16:d5:32:e9:32:78:9f:
3a:33:8e:00:11:cf:51:d5:93:07:4c:92:27:8f:db:
91:67:75:d6:fd:5f:22:85:d9:7d:26:0f:8d:3a:a7:
69:3d:cc:34:2f:25:99:7e:a7:74:11:65:75:4a:98:
bf:63:09:ea:c8:37:f7:7a:70:4b:ea:cc:31:5f:97:
10:d9:fe:e0:a3:b3:37:4d:fa:9a:64:f8:13:a1:6e:
68:e5:6b:1b:5f:54:17:e9:91:f5:a8:0c:57:6d:9e:
f7:84:2c:f7:7b:31:ab:06:dc:8c:2d:14:ca:8b:f1:
9d:09:e4:d8:d1:f0:d5:d9:e6:37:f5:56:99:14:48:
ef:6e:24:fa:43:57:60:8a:b2:9c:71:43:32:12:7d:
63:67:30:ce:2e:3f:fe:08:45:b5:f0:a0:b0:a7:59:
c1:46:c1:51:b0:1b:e2:0f:63:40:aa:69:60:aa:17:
27:e5:42:29:62:d8:69:36:3b:a3:0d:fb:09:1d:c5:
6c:4c:04:3a:4e:74:b8:e0:48:3b:f0:36:d7:34:12:
2e:ab:68:7e:8f:9f:6d:7a:f9:b4:eb:f1:83:d6:6c:
7c:88:a8:bc:c3:29:6b:63:8c:81:75:79:42:46:09:
b1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:41:60:31:3D:A5:68:8E:2D:57:C1:CF:37:13:6E:DF:77:12:89:FB
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b8:0d:9f:27:39:c2:38:65:40:b3:61:19:e6:1c:14:23:1d:
b5:cc:69:a3:e1:98:8b:d7:02:a7:4c:70:98:0d:9d:f7:72:a0:
cf:6b:24:03:89:cb:96:7a:b2:98:85:a5:e0:38:30:da:1c:60:
2a:dc:a9:1c:e7:3b:8f:42:66:5a:9d:1c:35:46:40:37:ae:79:
eb:de:9e:12:07:35:8a:02:77:39:93:1f:1b:58:4c:50:c2:24:
4e:2d:45:97:6e:bd:d9:1a:22:f2:8f:92:bc:f5:f4:33:a0:56:
e2:2b:63:8f:01:27:14:7b:b9:b0:ac:08:8e:94:ee:b1:bf:9c:
fb:b5:66:a9:7b:28:1f:21:02:e6:ff:11:34:c2:9b:d6:f4:c6:
1d:26:a8:f4:4e:1d:64:ba:5b:b2:62:f2:5b:0c:d6:a9:a6:7a:
65:bd:6d:d8:b4:43:7b:d5:ae:80:db:7f:9c:48:af:0c:22:37:
9c:85:9b:14:0e:30:e5:7b:be:7c:bd:2b:68:cd:64:e5:89:ca:
66:6b:c0:73:79:9f:df:1c:17:94:18:ec:b9:cb:0b:e5:97:0e:
87:7c:d1:dd:8e:bc:98:95:94:cd:c7:a6:4b:06:34:1c:a2:c2:
2d:d9:2e:a9:4d:d7:57:79:8b:89:61:8f:ab:17:ba:71:a0:57:
a5:8b:43:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:03:43 2026 by rpki-client