Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
File: MNimSQPPohc3l0nxi3_c6h2rbbQ.mft (raw, json)
Hash identifier: zJ2rCUjaFkNGYl8xTbo7OdXzt4h9LNKS4CeDasFcMTU=
Subject key identifier: 92:89:F7:38:84:37:A6:18:4D:D0:FC:CC:26:9C:52:59:AA:B0:34:8B
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Certificate issuer: /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial: 019CAF47D4144FC43587AB86AE44AE78A7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 16:00:45 +0000
Manifest this update: Mon 02 Mar 2026 16:00:45 +0000
Manifest next update: Tue 03 Mar 2026 16:00:45 +0000
Files and hashes: 1: 0OsrENlaW1u1m_gy68JdtqgFt-I.roa (hash: qPKr3VzmL+GeEM5oZfX3Kmu0cUVQygEN4Atc0x5l0ZE=)
2: JrNORGbnZ0DYF54WM2wEiYBVYoc.roa (hash: ctjRgpZF3vMlmOhDTVXBddzBy3Sl7VPZrnHCRKodZaw=)
3: MNimSQPPohc3l0nxi3_c6h2rbbQ.crl (hash: rvVuI7vjhFa8Tu5Gbycz+mzIQWEMDPn76L1c54muHCY=)
4: _nH7hM1KTPyN_CFuoWjWlbdKEgg.asa (hash: V+mrWirhSThm/e8z9O+6qvesdQrDHFfreRsF/QU00dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:d4:14:4f:c4:35:87:ab:86:ae:44:ae:78:a7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Validity
Not Before: Mar 2 16:00:45 2026 GMT
Not After : Mar 3 16:00:45 2026 GMT
Subject: CN=9289f7388437a6184dd0fccc269c5259aab0348b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:60:24:4a:04:ee:2e:3d:f0:ed:48:f5:97:
07:5c:55:12:b9:3d:e5:3b:1e:e8:4e:31:f0:b2:6e:
13:1e:fa:39:ac:a0:2c:66:16:ab:a4:e6:cf:e0:c7:
5a:2f:52:1c:28:74:da:21:90:f8:96:71:59:fa:d7:
40:fb:0a:21:0e:26:ba:6b:d6:4d:c7:71:11:7c:57:
88:c3:b4:7d:5f:a3:f5:d0:fb:bd:07:03:c2:e3:c5:
89:d2:2d:07:c1:98:13:75:e8:d3:05:5c:e6:a6:6f:
0c:a6:5b:18:7c:08:b8:ca:ee:d7:0a:c2:1d:e3:84:
2c:db:88:fb:7b:a6:12:50:27:63:ce:7d:66:79:88:
51:49:7b:34:42:dc:2b:9c:99:47:63:8f:51:72:a3:
8e:4d:0a:b2:40:0a:17:8c:35:c0:b0:87:5d:b4:93:
cb:e5:54:da:4a:66:04:71:b7:95:ba:cb:51:fe:72:
bc:5a:37:25:2b:86:ad:f5:81:9a:0c:4a:11:1a:3b:
b5:12:fa:45:2f:d8:5f:ad:1f:79:48:77:f0:58:b4:
79:94:96:12:95:f4:fb:1c:3d:23:5c:88:0f:7f:18:
3a:8d:5c:f1:da:df:df:19:8f:42:68:fa:6c:9f:55:
2b:6e:6d:37:80:66:2d:28:16:01:fe:c9:24:c3:c2:
15:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:89:F7:38:84:37:A6:18:4D:D0:FC:CC:26:9C:52:59:AA:B0:34:8B
X509v3 Authority Key Identifier:
keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:be:04:42:d7:76:8c:a8:c1:89:39:2c:95:7d:40:93:82:3e:
b3:86:13:5c:54:1e:1e:cb:e3:cb:c7:dc:21:91:09:99:51:c5:
fc:a3:db:86:41:b8:e6:c2:09:2a:f8:43:f5:fe:57:bf:3d:1e:
d0:72:5e:be:7d:0d:e0:58:ce:40:ed:7c:22:10:5b:b1:94:3b:
f1:18:f2:95:37:a8:33:c2:26:e9:45:99:08:c5:83:03:a2:3b:
b1:f7:ed:f0:11:6a:a5:31:bb:b5:15:42:6c:66:6c:82:3c:f7:
5a:5d:68:51:d0:0c:27:25:8a:95:20:e3:e4:91:f0:78:cf:80:
80:a2:8e:80:f4:d9:34:a5:76:c2:ce:65:5a:9d:e2:51:ad:9e:
08:80:28:61:f1:10:e1:25:71:a1:f5:39:33:aa:8d:01:b0:1e:
51:e0:44:ce:ac:88:8e:84:cf:59:7a:e2:5e:fb:87:f1:69:39:
41:4b:07:bf:0f:f7:af:6f:a4:72:93:93:64:d3:15:08:52:be:
f1:cc:f4:9a:96:35:3c:bc:fb:f9:50:21:d1:90:f2:89:12:a4:
f9:a9:df:20:18:d9:8b:8c:75:92:89:a6:33:2f:0c:d9:06:28:
ee:06:84:7b:0e:39:e8:9d:4c:a3:23:b8:a1:36:c2:a7:31:4b:
e1:ec:2e:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvR9QUT8Q1h6uGrkSueKffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZDhhNjQ5MDNjZmEyMTczNzk3NDlmMThiN2ZkY2VhMWRh
YjZkYjQwHhcNMjYwMzAyMTYwMDQ1WhcNMjYwMzAzMTYwMDQ1WjAzMTEwLwYDVQQD
Eyg5Mjg5ZjczODg0MzdhNjE4NGRkMGZjY2MyNjljNTI1OWFhYjAzNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxntgJEoE7i498O1I9ZcHXFUSuT3l
Ox7oTjHwsm4THvo5rKAsZharpObP4MdaL1IcKHTaIZD4lnFZ+tdA+wohDia6a9ZN
x3ERfFeIw7R9X6P10Pu9BwPC48WJ0i0HwZgTdejTBVzmpm8MplsYfAi4yu7XCsId
44Qs24j7e6YSUCdjzn1meYhRSXs0QtwrnJlHY49RcqOOTQqyQAoXjDXAsIddtJPL
5VTaSmYEcbeVustR/nK8WjclK4at9YGaDEoRGju1EvpFL9hfrR95SHfwWLR5lJYS
lfT7HD0jXIgPfxg6jVzx2t/fGY9CaPpsn1Urbm03gGYtKBYB/skkw8IVRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKJ9ziEN6YYTdD8zCacUlmqsDSLMB8GA1UdIwQY
MBaAFDDYpkkDz6IXN5dJ8Yt/3Oodq220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgt
MWY2NmZhYWI0YWI1LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgtMWY2NmZhYWI0YWI1
LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs74EQtd2
jKjBiTkslX1Ak4I+s4YTXFQeHsvjy8fcIZEJmVHF/KPbhkG45sIJKvhD9f5Xvz0e
0HJevn0N4FjOQO18IhBbsZQ78RjylTeoM8Im6UWZCMWDA6I7sfft8BFqpTG7tRVC
bGZsgjz3Wl1oUdAMJyWKlSDj5JHweM+AgKKOgPTZNKV2ws5lWp3iUa2eCIAoYfEQ
4SVxofU5M6qNAbAeUeBEzqyIjoTPWXriXvuH8Wk5QUsHvw/3r2+kcpOTZNMVCFK+
8cz0mpY1PLz7+VAh0ZDyiRKk+anfIBjZi4x1kommMy8M2QYo7gaEew456J1MoyO4
oTbCpzFL4ewuAg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:24 2026 by rpki-client