Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
File: rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json)
Hash identifier: S4BQ00DygVfK526W/Lk676UjEhb35MnQC7u0BjZoiEA=
Subject key identifier: A8:96:89:A3:84:0F:1B:C7:64:53:CD:79:57:59:51:FB:32:5E:74:5E
Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
Certificate issuer: /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Certificate serial: 019D39E5DFAC01E9D1CB500B8BF5B157A62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
Manifest number: 06DB
Signing time: Sun 29 Mar 2026 14:00:59 +0000
Manifest this update: Sun 29 Mar 2026 14:00:59 +0000
Manifest next update: Mon 30 Mar 2026 14:00:59 +0000
Files and hashes: 1: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: JmnnM1pjFfL4MxuMabSLdC31ZMAYKATiYsmy4+KIhgE=)
2: vomEUArk8PuYIYbTC4XbIk0d7Gw.roa (hash: zYSw8Jy0jy+EoxtEcsz4ao8v/Mpz2r8TG2Vb6dYscW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:df:ac:01:e9:d1:cb:50:0b:8b:f5:b1:57:a6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Validity
Not Before: Mar 29 14:00:59 2026 GMT
Not After : Mar 30 14:00:59 2026 GMT
Subject: CN=a89689a3840f1bc76453cd79575951fb325e745e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:b0:55:53:90:b6:8b:8c:9e:e4:03:15:37:
77:60:a5:32:30:ab:ef:4f:aa:03:a5:dc:8f:f3:dc:
65:1e:8c:b3:19:34:2c:56:86:c7:69:cd:6f:62:fe:
f2:3f:f7:c5:d2:37:9d:44:6c:3a:85:a2:44:66:d4:
3e:97:9f:59:50:ac:fc:22:48:09:ab:c3:f3:34:b6:
d5:49:88:ed:94:ca:7f:c6:3b:e9:86:5b:8c:af:c1:
dd:d4:02:fa:77:90:25:51:ae:19:f7:a6:28:b4:71:
18:e9:c6:13:a0:09:d0:73:88:dc:64:19:1e:3a:a8:
ee:ec:d6:bf:e2:14:36:17:84:46:57:c2:b3:33:79:
64:b7:3c:71:41:b0:b1:48:eb:5a:19:06:42:61:59:
b5:6e:70:a6:2c:29:2d:80:57:a8:fc:c5:ae:f4:79:
18:7f:9b:7b:74:c0:c3:4b:bf:9c:7b:cc:4b:37:48:
b3:cb:6c:6b:8f:7c:11:f6:6b:e1:5e:e3:d7:76:91:
1b:0b:ef:a1:e7:9e:fc:e3:04:8e:86:44:b6:aa:14:
d5:d4:ac:bf:e9:a9:b6:5f:00:a6:11:f9:07:ee:f8:
3a:03:a5:d6:de:4c:85:a6:58:95:b4:81:d3:21:17:
7d:c4:7d:46:0f:51:2c:ed:08:e9:de:f0:b8:7a:ce:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:89:A3:84:0F:1B:C7:64:53:CD:79:57:59:51:FB:32:5E:74:5E
X509v3 Authority Key Identifier:
keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:33:bc:6c:94:b0:7f:41:96:30:28:a8:44:c6:03:20:f9:13:
42:fd:73:c6:ba:8b:5b:f3:9b:4a:bd:18:92:06:26:8a:10:a5:
59:9a:d2:ed:cf:52:cb:f6:33:36:84:7e:66:7c:7d:82:71:dc:
eb:58:58:7d:77:c5:6b:28:9f:00:08:1c:c0:5e:d2:24:b2:6d:
7a:9f:01:a9:41:a2:30:8e:21:65:40:08:ea:1f:13:3b:85:0a:
da:4b:3d:b6:d3:c7:cd:81:41:44:23:f9:97:94:1f:8d:49:e2:
94:12:df:be:b4:43:81:83:a5:1e:4a:f4:d5:74:e1:dd:4e:d9:
22:75:32:6e:52:e4:31:01:c4:cc:29:a3:89:9a:48:18:c3:c6:
5c:5a:4f:e7:87:90:48:d3:91:da:a6:bb:77:c9:ab:5d:f5:65:
ea:f9:ae:1c:53:e7:4e:98:c8:55:cd:8f:ec:c3:0e:c4:3a:df:
3f:c7:6a:da:53:0f:71:49:12:06:03:44:c0:76:99:5e:c2:65:
50:20:95:74:3f:15:9b:6a:61:a3:b7:10:5b:1b:57:50:4c:5f:
c9:10:01:68:a7:96:b9:6c:dc:3d:91:16:8e:1a:bf:e4:63:32:
41:2b:cb:99:2b:1b:80:82:7c:42:e3:6d:5d:b9:6e:65:15:15:
27:48:d6:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055d+sAenRy1ALi/WxV6YuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzUwZGY2YjAxZGZmNmY1NGViODAzOWIyNDk3YWE3ZjRl
ZjEyY2QwHhcNMjYwMzI5MTQwMDU5WhcNMjYwMzMwMTQwMDU5WjAzMTEwLwYDVQQD
EyhhODk2ODlhMzg0MGYxYmM3NjQ1M2NkNzk1NzU5NTFmYjMyNWU3NDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTuwVVOQtouMnuQDFTd3YKUyMKvv
T6oDpdyP89xlHoyzGTQsVobHac1vYv7yP/fF0jedRGw6haJEZtQ+l59ZUKz8IkgJ
q8PzNLbVSYjtlMp/xjvphluMr8Hd1AL6d5AlUa4Z96YotHEY6cYToAnQc4jcZBke
Oqju7Na/4hQ2F4RGV8KzM3lktzxxQbCxSOtaGQZCYVm1bnCmLCktgFeo/MWu9HkY
f5t7dMDDS7+ce8xLN0izy2xrj3wR9mvhXuPXdpEbC++h55784wSOhkS2qhTV1Ky/
6am2XwCmEfkH7vg6A6XW3kyFpliVtIHTIRd9xH1GD1Es7Qjp3vC4es70qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiWiaOEDxvHZFPNeVdZUfsyXnReMB8GA1UdIwQY
MBaAFKzFDfawHf9vVOuAObJJeqf07xLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQt
MzFjOTMxM2Y5ZjY2LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQtMzFjOTMxM2Y5ZjY2
LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDO8bJSw
f0GWMCioRMYDIPkTQv1zxrqLW/ObSr0YkgYmihClWZrS7c9Sy/YzNoR+Znx9gnHc
61hYfXfFayifAAgcwF7SJLJtep8BqUGiMI4hZUAI6h8TO4UK2ks9ttPHzYFBRCP5
l5QfjUnilBLfvrRDgYOlHkr01XTh3U7ZInUyblLkMQHEzCmjiZpIGMPGXFpP54eQ
SNOR2qa7d8mrXfVl6vmuHFPnTpjIVc2P7MMOxDrfP8dq2lMPcUkSBgNEwHaZXsJl
UCCVdD8Vm2pho7cQWxtXUExfyRABaKeWuWzcPZEWjhq/5GMyQSvLmSsbgIJ8QuNt
XbluZRUVJ0jWyw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:12 2026 by rpki-client