Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: iye0Tjf2Il9/LzFtzEpPAezDtRfsSQYeBs02SpaP+tY=
Subject key identifier: 72:0F:53:E7:2E:4D:E2:42:B2:FF:31:1C:36:15:1E:79:18:94:23:27
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 019DFFBDD80B5CFA4A3A09554199424DDC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 18F8
Signing time: Thu 07 May 2026 00:02:04 +0000
Manifest this update: Thu 07 May 2026 00:02:04 +0000
Manifest next update: Fri 08 May 2026 00:02:04 +0000
Files and hashes: 1: 1S2bZZj9qdyRRB7nR_b4PQ0z1Sw.roa (hash: u9ro5Rvo3czSNujsVQtq0Ez7XFyuHSIaTIk3k7PO73o=)
2: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: 6GRW2XSxZeG5eTSLeblMKi4s2TuQzTF8v925yl34MRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ff:bd:d8:0b:5c:fa:4a:3a:09:55:41:99:42:4d:dc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: May 7 00:02:04 2026 GMT
Not After : May 8 00:02:04 2026 GMT
Subject: CN=720f53e72e4de242b2ff311c36151e7918942327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:b1:e9:8f:2d:ce:4e:d9:e7:cf:33:48:ad:
33:83:9e:2d:d4:6a:74:10:f9:7d:2c:c2:c2:ab:62:
83:ab:b3:fc:a6:85:d0:15:46:e7:b9:83:12:bc:21:
26:15:0b:f2:9a:7b:10:a6:ba:eb:17:bc:49:c0:83:
8d:46:0c:1f:b2:07:59:9c:83:86:8e:1a:b0:c8:b1:
e5:8b:ca:f7:4a:da:d6:4c:ee:5e:e0:f7:e1:ed:62:
85:d5:a9:72:32:2d:7a:02:81:8e:c8:60:c6:34:56:
2e:b3:30:d5:2c:1e:47:85:1e:7b:a3:30:ec:82:65:
5a:5f:39:34:e0:96:50:81:06:b6:b9:40:a7:50:c1:
2f:49:24:21:08:07:72:7d:a3:2e:d0:f8:f0:7f:ae:
bf:f6:84:71:b8:37:93:45:7d:4d:96:c3:c7:ee:9f:
11:59:7a:47:0e:ab:d9:f5:f8:96:b3:8c:51:73:5f:
5b:6c:04:2d:17:b4:27:5b:06:54:1d:e8:28:90:9b:
59:bb:10:7f:b4:22:14:f3:b1:a9:8d:51:21:6a:f1:
1b:ec:a0:31:83:b7:52:54:73:b8:78:88:5f:80:14:
9d:9c:0e:47:9e:f7:93:6c:a0:74:6e:8b:53:d7:63:
05:52:14:2f:43:2a:43:58:96:7e:26:81:ce:88:b1:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0F:53:E7:2E:4D:E2:42:B2:FF:31:1C:36:15:1E:79:18:94:23:27
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:5b:75:49:6b:0d:9a:cb:e9:b6:ca:b3:4e:e5:86:29:f2:f0:
46:48:85:64:9b:9e:8a:96:72:02:84:c4:7d:62:6c:d0:f6:d3:
e8:af:0f:6b:37:31:1d:4b:92:c2:1f:24:05:13:94:b8:c3:bc:
10:e2:43:bd:2e:da:db:9a:12:5d:a3:01:de:9d:02:c9:9f:76:
0b:c4:e8:82:f3:a9:a9:46:d7:1f:01:d2:65:21:e8:bb:0c:ea:
28:a3:56:81:a1:f1:85:a0:53:28:38:10:f7:4e:ac:d2:5b:15:
15:64:72:26:59:78:e5:a6:bf:26:45:4a:45:fc:f8:82:c7:1a:
33:a9:06:bb:2a:f0:f4:08:21:38:b5:55:42:b8:4e:57:51:dc:
fb:2d:3e:2e:c4:84:3c:ad:a8:d1:4d:5a:82:03:c1:98:48:0d:
d2:19:52:99:54:ef:44:8a:42:d4:03:01:1e:8b:e6:d9:27:22:
b3:66:fe:2f:4e:c2:56:6c:2c:8b:cb:d9:9b:6c:b4:59:c2:db:
fd:33:86:c8:b7:8a:7e:02:51:f8:87:76:11:ce:88:f7:e7:00:
66:55:2e:f1:00:e6:a2:73:f1:6c:8a:e4:dd:40:f7:3a:74:c0:
99:93:ab:a7:65:64:2c:8c:7b:e2:1f:0d:37:73:1d:57:b2:b1:
12:a9:ae:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3/vdgLXPpKOglVQZlCTdxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZGQwYjcwODUwZTFmOTg5NTY1OGVkYWJlMjhiOWQ4ZDll
YTAxN2MwHhcNMjYwNTA3MDAwMjA0WhcNMjYwNTA4MDAwMjA0WjAzMTEwLwYDVQQD
Eyg3MjBmNTNlNzJlNGRlMjQyYjJmZjMxMWMzNjE1MWU3OTE4OTQyMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNWx6Y8tzk7Z588zSK0zg54t1Gp0
EPl9LMLCq2KDq7P8poXQFUbnuYMSvCEmFQvymnsQprrrF7xJwIONRgwfsgdZnIOG
jhqwyLHli8r3StrWTO5e4Pfh7WKF1alyMi16AoGOyGDGNFYuszDVLB5HhR57ozDs
gmVaXzk04JZQgQa2uUCnUMEvSSQhCAdyfaMu0Pjwf66/9oRxuDeTRX1NlsPH7p8R
WXpHDqvZ9fiWs4xRc19bbAQtF7QnWwZUHegokJtZuxB/tCIU87GpjVEhavEb7KAx
g7dSVHO4eIhfgBSdnA5HnveTbKB0botT12MFUhQvQypDWJZ+JoHOiLFdUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIPU+cuTeJCsv8xHDYVHnkYlCMnMB8GA1UdIwQY
MBaAFDDdC3CFDh+YlWWO2r4oudjZ6gF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU4wTGNJVU9INWlWWlk3YXZpaTUyTm5xQVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mY2EyYWUtMjVmYy00NDRiLWE4Njgt
ODEwZGM5ZTFhYTU0LzEvTU4wTGNJVU9INWlWWlk3YXZpaTUyTm5xQVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mY2EyYWUtMjVmYy00NDRiLWE4NjgtODEwZGM5ZTFhYTU0
LzEvTU4wTGNJVU9INWlWWlk3YXZpaTUyTm5xQVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1t1SWsN
msvptsqzTuWGKfLwRkiFZJueipZyAoTEfWJs0PbT6K8PazcxHUuSwh8kBROUuMO8
EOJDvS7a25oSXaMB3p0CyZ92C8TogvOpqUbXHwHSZSHouwzqKKNWgaHxhaBTKDgQ
906s0lsVFWRyJll45aa/JkVKRfz4gscaM6kGuyrw9AghOLVVQrhOV1Hc+y0+LsSE
PK2o0U1aggPBmEgN0hlSmVTvRIpC1AMBHovm2Scis2b+L07CVmwsi8vZm2y0WcLb
/TOGyLeKfgJR+Id2Ec6I9+cAZlUu8QDmonPxbIrk3UD3OnTAmZOrp2VkLIx74h8N
N3MdV7KxEqmuTA==
-----END CERTIFICATE-----
Generated at Thu May 7 06:30:34 2026 by rpki-client