Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: i7cFozNxkYTPZihGwQdmdFJ/s+abTDqKqLtIT7HK4JE=
Subject key identifier: C7:E6:64:80:51:88:9F:53:FF:E4:6A:7E:54:44:E1:69:47:DF:1B:09
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 019D389C0F747A60A6BD349C1B48B46983C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 0C59
Signing time: Sun 29 Mar 2026 08:00:44 +0000
Manifest this update: Sun 29 Mar 2026 08:00:44 +0000
Manifest next update: Mon 30 Mar 2026 08:00:44 +0000
Files and hashes: 1: KTlXY_GhxQ5VW4pMYqOYscTdOZM.roa (hash: je5ss0aWHni0ph4zaP7Hn858wJvG8bGTjlHPySsmlgw=)
2: iaDbFzCGuAlwzl6bRW55-YwI7tA.roa (hash: 6F9zTT+j/4thBUAM1E97eqvGP/DYTAVmPQOGCVMj6V0=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: +VncPVinP/Xk1HhgfcwINMO6uymagc8p8V5kBEqFKV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0f:74:7a:60:a6:bd:34:9c:1b:48:b4:69:83:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Mar 29 08:00:44 2026 GMT
Not After : Mar 30 08:00:44 2026 GMT
Subject: CN=c7e6648051889f53ffe46a7e5444e16947df1b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:66:84:8a:dd:7f:34:b9:46:38:c1:cb:5f:
d4:f3:86:5e:70:4f:09:8e:a2:aa:e9:55:ff:21:02:
df:e4:21:0c:ea:28:b8:7f:66:6f:4a:79:04:06:ba:
07:97:a1:bc:63:ab:72:0b:72:29:ce:b1:9f:ca:83:
62:e7:b9:c3:55:9b:c3:0e:bb:2f:c5:40:58:55:f9:
92:99:a8:76:d7:b4:e2:dd:3b:1c:79:0e:e8:25:b1:
31:87:c1:59:7a:79:26:72:e8:b9:5b:75:81:cf:61:
49:d7:2d:b6:94:8d:3c:da:39:4a:a6:4f:71:15:98:
0e:cf:74:b1:6c:15:93:75:05:0d:08:aa:5b:13:f8:
00:4a:a6:f1:7f:da:30:93:07:ad:03:61:5a:19:56:
2a:f5:db:1b:b1:10:df:46:34:2c:6b:02:1e:06:e2:
85:34:51:6c:34:dc:5a:ec:4c:50:f4:1f:94:05:59:
4a:75:2b:82:81:49:18:df:89:31:57:2a:b9:bb:26:
95:a9:df:3f:d7:4e:1e:dc:5f:16:52:23:e2:1f:cd:
b8:1d:0e:ee:8d:96:86:14:49:ca:bd:91:e7:4f:bc:
26:4d:4a:e2:27:6f:5a:66:f7:b7:fe:74:c8:0c:cd:
40:4c:cf:5c:5a:67:44:23:d5:45:cb:12:4b:c6:4a:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E6:64:80:51:88:9F:53:FF:E4:6A:7E:54:44:E1:69:47:DF:1B:09
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c1:ab:4f:55:3c:70:a3:61:6c:6c:f2:6a:9c:11:41:96:d4:
52:c8:9d:7a:c2:d8:40:22:47:55:6c:b2:14:f4:4e:ce:a6:c6:
28:47:73:3f:92:20:4d:5b:cb:a6:75:1e:30:ee:54:9f:83:87:
b8:66:f2:ec:79:5d:3f:01:d1:e6:a1:7b:7b:1b:94:ed:bf:0f:
00:d7:b2:f9:a1:96:61:23:3a:36:b6:53:58:43:9d:8d:3a:3f:
e8:11:f0:36:97:f0:c2:14:d0:22:4b:7d:33:4b:13:e8:2f:eb:
34:f8:71:05:b8:41:20:dc:e4:25:5d:6d:a1:23:35:5d:af:0c:
3a:ec:5d:20:c0:c3:6a:97:3d:55:90:76:3e:1b:8c:c5:65:51:
fc:6e:96:66:5e:ea:e0:74:d8:4e:37:fa:8b:8b:18:2e:7d:00:
66:fe:b0:7d:4e:68:50:c1:40:ae:6b:ae:e5:36:ab:28:c1:6e:
17:10:34:54:ec:51:92:64:f4:8f:7b:2a:a5:13:21:09:e2:c6:
50:ff:23:93:e3:85:77:da:cd:0c:49:85:2f:eb:6b:73:33:08:
64:7b:c5:59:d6:a3:82:a7:d8:21:0d:d4:16:26:6e:9a:3a:bc:
6f:59:b9:63:58:2e:a5:80:a6:f2:45:36:e7:56:5c:38:4c:83:
20:45:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:11 2026 by rpki-client