Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: KlJuPR1tyZaGi6VGbp1eeYQw1KPXZg9qVq/JYp1x0Q4=
Subject key identifier: EC:D6:A8:CD:06:F6:CF:80:DB:29:EA:4D:B0:ED:6B:06:99:63:23:47
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 019DED7FFD5F7763AF10942CBB22802D91E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 18F0
Signing time: Sun 03 May 2026 11:01:21 +0000
Manifest this update: Sun 03 May 2026 11:01:21 +0000
Manifest next update: Mon 04 May 2026 11:01:21 +0000
Files and hashes: 1: Avc3DoG9n8NvJWjUCmVcnkN97O4.roa (hash: YMjpamajsCA46OT3leu0kluW3gE2qUo5wS/kP9h33r8=)
2: Ek07ovRM2Kh_Vc9JMXBQkpJ1Q9o.roa (hash: SY/fpD8jCYcf0UhkUzguL/mEf+0d9gsoahH2LNMAjv4=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: Lpvn5I97QFukskuJRH7UAQhbqABeUbk10ym+vI3Q6fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:7f:fd:5f:77:63:af:10:94:2c:bb:22:80:2d:91:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: May 3 11:01:21 2026 GMT
Not After : May 4 11:01:21 2026 GMT
Subject: CN=ecd6a8cd06f6cf80db29ea4db0ed6b0699632347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:ab:91:2e:7e:bb:77:b6:f8:7d:14:0b:6b:
a2:25:46:b4:dd:1f:6d:91:e0:94:dd:ed:60:6d:16:
56:05:42:d9:64:02:e5:0d:e8:be:e8:6e:58:a8:06:
9a:df:84:4a:96:49:c0:c7:2c:50:33:5c:03:5a:8c:
55:c1:e1:69:60:98:4c:9e:05:6b:5c:1b:49:2e:2e:
0a:ee:06:b0:95:06:95:9f:f9:72:f6:ce:da:60:00:
2a:8f:0f:5f:2f:b7:bd:f8:b6:03:ae:18:14:6f:b9:
38:55:06:d2:4e:c3:87:9f:8a:38:97:ba:a7:c3:f0:
fa:a2:4f:95:3b:89:98:0c:c6:71:bb:06:39:86:18:
82:61:7e:e2:6b:10:38:fc:18:ac:f8:93:0f:09:c4:
0a:ae:89:57:06:a7:47:f3:1e:3b:86:3f:c3:e9:b5:
0b:9e:4a:b6:fd:8c:f3:7b:41:ea:63:05:66:aa:45:
8c:92:26:40:46:c1:dc:81:92:b2:57:da:22:65:2b:
80:46:bb:b4:5f:78:4a:70:af:96:51:6b:a1:8f:28:
69:2f:6e:d1:f9:a5:e7:57:1c:76:21:a2:c5:1f:61:
e0:f1:0e:01:70:15:6c:75:50:5c:09:51:bb:85:d1:
21:20:cb:1f:84:70:e8:1f:8f:6e:9d:36:9a:c7:e3:
f7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D6:A8:CD:06:F6:CF:80:DB:29:EA:4D:B0:ED:6B:06:99:63:23:47
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d3:9d:b5:0d:94:68:05:89:56:2f:09:88:db:28:57:d7:1c:
18:56:6f:a2:c5:17:31:75:f8:99:b0:0f:1b:1d:f7:ba:f7:cb:
1e:ba:b1:72:ed:84:c2:0c:62:13:a8:ca:33:79:a6:8a:a2:71:
48:b4:36:06:5f:2b:04:44:ae:71:2b:ca:03:a7:50:72:be:95:
f1:73:62:a5:d6:ba:0e:28:14:bf:96:fd:4d:01:f4:6d:06:f6:
db:2a:be:0f:20:61:4a:20:1b:5b:14:9f:c6:da:b5:76:3a:20:
5b:19:71:96:e4:d3:90:99:4f:20:53:6d:fd:92:7d:90:55:48:
41:20:78:34:be:b4:af:e1:9f:75:04:a5:d6:10:94:9f:e4:26:
81:8e:c6:23:bb:38:bf:d5:86:48:76:ed:47:d0:49:3d:94:2d:
59:63:ee:8a:96:4b:15:1b:cd:ca:64:8b:b4:55:a6:4c:fb:0a:
71:22:11:0c:1e:ae:b6:5f:fc:2f:58:ea:4c:8a:83:0e:40:74:
09:7f:ec:3e:95:99:db:aa:f9:28:91:f3:aa:58:12:fa:4a:8a:
f9:df:64:08:02:7f:d0:ab:b7:56:20:b8:87:d9:77:86:fc:0c:
12:8f:af:67:4e:a8:34:83:11:7f:63:f8:28:25:fc:f3:2d:03:
dd:d7:e0:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3tf/1fd2OvEJQsuyKALZHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTAxYzdjZmZkMTlhNGZlYTc4Zjc5YjEwMDQ5OTkyNjZk
Y2MyMjQwHhcNMjYwNTAzMTEwMTIxWhcNMjYwNTA0MTEwMTIxWjAzMTEwLwYDVQQD
EyhlY2Q2YThjZDA2ZjZjZjgwZGIyOWVhNGRiMGVkNmIwNjk5NjMyMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnOrkS5+u3e2+H0UC2uiJUa03R9t
keCU3e1gbRZWBULZZALlDei+6G5YqAaa34RKlknAxyxQM1wDWoxVweFpYJhMngVr
XBtJLi4K7gawlQaVn/ly9s7aYAAqjw9fL7e9+LYDrhgUb7k4VQbSTsOHn4o4l7qn
w/D6ok+VO4mYDMZxuwY5hhiCYX7iaxA4/Bis+JMPCcQKrolXBqdH8x47hj/D6bUL
nkq2/Yzze0HqYwVmqkWMkiZARsHcgZKyV9oiZSuARru0X3hKcK+WUWuhjyhpL27R
+aXnVxx2IaLFH2Hg8Q4BcBVsdVBcCVG7hdEhIMsfhHDoH49unTaax+P3wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzWqM0G9s+A2ynqTbDtawaZYyNHMB8GA1UdIwQY
MBaAFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYt
Y2JjMjc5N2MxZDBhLzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYtY2JjMjc5N2MxZDBh
LzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNOdtQ2U
aAWJVi8JiNsoV9ccGFZvosUXMXX4mbAPGx33uvfLHrqxcu2EwgxiE6jKM3mmiqJx
SLQ2Bl8rBESucSvKA6dQcr6V8XNipda6DigUv5b9TQH0bQb22yq+DyBhSiAbWxSf
xtq1djogWxlxluTTkJlPIFNt/ZJ9kFVIQSB4NL60r+GfdQSl1hCUn+QmgY7GI7s4
v9WGSHbtR9BJPZQtWWPuipZLFRvNymSLtFWmTPsKcSIRDB6utl/8L1jqTIqDDkB0
CX/sPpWZ26r5KJHzqlgS+kqK+d9kCAJ/0Ku3ViC4h9l3hvwMEo+vZ06oNIMRf2P4
KCX88y0D3dfgUA==
-----END CERTIFICATE-----
Generated at Sun May 3 18:45:56 2026 by rpki-client