Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: KtTNFr6LcoheYOqwB1O4icOjLyiXL+CvyUCDDeMIvbs=
Subject key identifier: 49:4F:37:C7:3B:85:F6:44:31:AC:FA:7C:6E:15:28:4D:B1:85:56:80
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019CE66DBBF1DB816F2E1474763D41332CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 09:01:17 +0000
Manifest this update: Fri 13 Mar 2026 09:01:17 +0000
Manifest next update: Sat 14 Mar 2026 09:01:17 +0000
Files and hashes: 1: 1-WshWzag49fgBIIVS2C0Ln43YnY.roa (hash: UrL7K+EtrLLqE/i5EAvmTal0bqvr0HWJvCJ78tbp0jM=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: 1EJJhhP/8opct/FLKUnO7qPsWdk89SpWmMXx3ITGb7Q=)
3: vBdouYkRW9ci3JYZ30IDKLuHdds.roa (hash: WJUobDpZaCY+TaeHhazACg6LZ8z6jzGQfsE7W/uWZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:bb:f1:db:81:6f:2e:14:74:76:3d:41:33:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Mar 13 09:01:17 2026 GMT
Not After : Mar 14 09:01:17 2026 GMT
Subject: CN=494f37c73b85f64431acfa7c6e15284db1855680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:30:b9:06:c1:3f:88:f0:7e:e3:42:d9:16:
3c:12:6a:3f:87:fd:28:67:2d:4a:16:ce:94:ff:27:
b0:17:4c:07:1f:87:44:b8:9f:4b:84:b4:be:9a:05:
35:85:d3:9d:61:69:61:39:a0:c7:c2:5d:f9:00:7b:
ff:f4:90:c5:31:78:5f:1e:73:b0:6a:c9:0f:b8:ed:
d7:ef:68:75:0d:9c:f7:e4:c7:30:a4:9a:0b:8e:64:
26:e4:fc:bb:68:2e:1d:06:a1:46:db:dd:72:6f:29:
51:a9:40:aa:cc:d1:f3:90:70:7a:88:4d:08:00:c1:
92:77:64:75:e6:c7:e1:a4:03:f0:7a:9d:05:d8:9f:
ac:a8:03:49:89:f9:01:33:04:60:85:77:4d:e6:7a:
25:21:9f:b2:9c:c0:03:ed:1b:28:d3:bb:ca:be:7f:
47:76:63:68:59:50:39:4d:b8:c0:d3:b0:72:95:63:
c8:26:b8:85:78:7e:1c:7b:60:80:64:55:2f:e9:03:
ce:ec:10:f7:7d:3f:e5:87:aa:d0:7e:3f:3f:c7:3f:
1a:37:39:3a:e5:b0:45:96:ec:08:2d:02:d0:97:1a:
fd:db:ed:b9:c7:63:ab:9d:53:a2:fa:e1:ac:c9:7b:
9c:18:5a:68:66:45:90:a4:53:e0:63:eb:86:8f:f2:
e9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4F:37:C7:3B:85:F6:44:31:AC:FA:7C:6E:15:28:4D:B1:85:56:80
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:44:f0:25:4a:5b:49:9a:44:27:07:1c:f6:15:c1:71:79:25:
23:23:fd:4b:15:64:f5:c6:c6:c5:0c:fb:32:fc:a1:37:d9:5a:
07:f7:5f:9f:e1:86:17:4d:5b:a9:f3:be:c2:ed:13:c1:1f:54:
5b:52:b7:d9:c8:7d:dd:18:ee:16:22:2f:29:45:b9:30:09:45:
88:c3:86:c1:47:1a:1b:e6:9f:7e:1d:40:65:d5:68:ed:5c:e2:
63:01:0f:c2:c9:6a:5d:ae:c6:3f:db:48:ed:ff:5f:6e:1f:45:
cb:9b:00:e1:4f:7b:c6:62:13:0f:51:30:62:f0:6f:72:4f:3a:
4b:64:f2:0d:cb:8e:d2:8a:c0:a1:27:e9:88:07:f0:14:e5:48:
14:00:d7:e4:bd:50:f2:f3:51:28:6d:a3:aa:cc:ae:3c:a2:ca:
ff:9e:56:39:46:c1:9c:3b:f1:cb:a5:56:38:b5:2c:61:f5:33:
08:7e:5c:f4:8a:03:79:08:e5:a0:b8:8b:70:ac:c4:cc:cf:f3:
07:67:ee:3c:b8:91:c2:44:47:5b:0e:62:54:bd:a8:e8:30:d7:
f5:dd:f0:87:93:35:25:f3:34:4a:d4:c7:cd:71:da:65:e5:f4:
0e:5f:fc:c1:d2:16:d8:0c:33:48:16:32:3d:c4:cc:ec:d3:c9:
3e:b1:2f:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmbbvx24FvLhR0dj1BMyygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYzlkMDZjNTFhZGQ2ODI5MDYzZjFiNjdiMTc1ZDBjMDAw
MWU3MzYwHhcNMjYwMzEzMDkwMTE3WhcNMjYwMzE0MDkwMTE3WjAzMTEwLwYDVQQD
Eyg0OTRmMzdjNzNiODVmNjQ0MzFhY2ZhN2M2ZTE1Mjg0ZGIxODU1NjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv8wuQbBP4jwfuNC2RY8Emo/h/0o
Zy1KFs6U/yewF0wHH4dEuJ9LhLS+mgU1hdOdYWlhOaDHwl35AHv/9JDFMXhfHnOw
askPuO3X72h1DZz35McwpJoLjmQm5Py7aC4dBqFG291ybylRqUCqzNHzkHB6iE0I
AMGSd2R15sfhpAPwep0F2J+sqANJifkBMwRghXdN5nolIZ+ynMAD7Rso07vKvn9H
dmNoWVA5TbjA07BylWPIJriFeH4ce2CAZFUv6QPO7BD3fT/lh6rQfj8/xz8aNzk6
5bBFluwILQLQlxr92+25x2OrnVOi+uGsyXucGFpoZkWQpFPgY+uGj/LpbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElPN8c7hfZEMaz6fG4VKE2xhVaAMB8GA1UdIwQY
MBaAFHDJ0GxRrdaCkGPxtnsXXQwAAec2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEt
NWQzYTg2NDk0Nzc1LzEvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEtNWQzYTg2NDk0Nzc1
LzEvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaETwJUpb
SZpEJwcc9hXBcXklIyP9SxVk9cbGxQz7MvyhN9laB/dfn+GGF01bqfO+wu0TwR9U
W1K32ch93RjuFiIvKUW5MAlFiMOGwUcaG+affh1AZdVo7VziYwEPwslqXa7GP9tI
7f9fbh9Fy5sA4U97xmITD1EwYvBvck86S2TyDcuO0orAoSfpiAfwFOVIFADX5L1Q
8vNRKG2jqsyuPKLK/55WOUbBnDvxy6VWOLUsYfUzCH5c9IoDeQjloLiLcKzEzM/z
B2fuPLiRwkRHWw5iVL2o6DDX9d3wh5M1JfM0StTHzXHaZeX0Dl/8wdIW2AwzSBYy
PcTM7NPJPrEvWA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:12:41 2026 by rpki-client