Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
File: mnZNjTrnJbReDUgH9hLsPR8qP08.mft (raw, json)
Hash identifier: fgpK4Ywy9RxvGZs5Fzux6cSD0HAlRBMyjDIQfPFvah4=
Subject key identifier: 16:D9:33:9D:16:EB:24:38:D3:C9:3F:81:4B:4B:19:92:B4:D3:7F:6B
Authority key identifier: 9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
Certificate issuer: /CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Certificate serial: 019CAA58E2AD9D13D4A43E285E33B07F9D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:01:17 +0000
Manifest this update: Sun 01 Mar 2026 17:01:17 +0000
Manifest next update: Mon 02 Mar 2026 17:01:17 +0000
Files and hashes: 1: 2tvfGtmx8dnYbCqgNfYYoEuFSmQ.roa (hash: dB+mwPmyjYo+G09vPTtEL8PzXYu39MOAVRZ8TcykmPg=)
2: mnZNjTrnJbReDUgH9hLsPR8qP08.crl (hash: OGsztiOyPAx+EXojLWWdn2UHaeQTnCYGk3InrZx1qh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e2:ad:9d:13:d4:a4:3e:28:5e:33:b0:7f:9d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Validity
Not Before: Mar 1 17:01:17 2026 GMT
Not After : Mar 2 17:01:17 2026 GMT
Subject: CN=16d9339d16eb2438d3c93f814b4b1992b4d37f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:b1:76:24:95:f0:e9:dc:8e:36:ea:05:d3:
92:30:18:36:60:59:67:f9:3c:95:4d:44:53:0d:80:
9a:a6:7b:6b:74:a2:97:7c:5b:35:51:cd:6b:6f:38:
33:de:94:83:c5:da:16:48:70:28:0d:bb:20:b8:13:
68:fa:fa:be:20:fc:d8:76:43:a1:79:eb:67:5f:26:
84:2c:92:bb:b5:4f:25:09:27:cc:88:b9:8c:b5:47:
01:49:6a:d7:bf:3a:f8:06:af:74:a9:18:d5:e4:66:
00:32:f7:d2:28:8e:68:2d:9c:f0:11:72:f4:92:01:
28:25:29:cc:bf:53:ca:a2:e2:64:03:a1:23:e7:48:
43:a5:62:88:8e:ba:ee:4d:ec:4c:18:fc:11:6f:5d:
6e:75:9e:c9:2e:e9:d3:c2:d2:b6:71:e3:96:44:62:
65:26:77:7a:12:92:a9:a1:32:a9:45:8c:a6:1a:73:
e7:5e:b8:9e:5e:09:f8:2c:67:d2:cd:ef:1f:2f:fd:
4e:96:db:db:5f:1e:e6:fb:e2:0c:da:c4:bb:55:47:
27:77:cb:26:0f:36:dc:ba:1a:00:a3:f9:00:2a:7a:
48:69:97:52:9d:ab:fb:67:d2:53:3a:d3:ca:08:14:
6e:8c:f4:83:54:ef:f2:d4:6e:87:ba:ca:28:17:47:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:33:9D:16:EB:24:38:D3:C9:3F:81:4B:4B:19:92:B4:D3:7F:6B
X509v3 Authority Key Identifier:
keyid:9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f2:15:f9:f7:88:93:9c:80:ab:8b:c1:f4:b5:82:eb:03:55:
73:95:f8:15:e1:47:3a:13:8b:83:fb:a8:1b:fb:31:92:6b:18:
30:46:5a:11:88:c1:a3:34:f5:fd:9c:03:02:16:89:37:6a:94:
a9:d3:98:f6:ef:cd:b2:58:cd:57:35:e6:01:a2:cb:53:17:65:
3e:05:ab:81:52:d2:b4:cd:39:2a:f0:43:6a:9a:d0:65:dd:86:
d0:b6:e2:d7:bb:28:2c:66:52:16:09:30:a4:fb:33:78:c2:66:
e3:86:4c:32:1f:4a:c5:0e:cb:81:f2:15:0c:2d:32:5d:07:d1:
bc:b3:26:55:b8:97:fd:0b:19:ee:1c:50:a3:f6:ac:3d:a5:7a:
3f:c7:9e:4f:96:9a:b7:a5:de:f8:b6:f8:cf:5d:d9:d3:5f:9e:
fc:c8:94:ea:0f:c1:29:85:14:5c:5e:ac:d0:d3:1a:61:a1:5d:
68:e2:8f:34:80:c5:2e:42:55:98:d2:cd:a5:44:eb:23:57:e6:
d4:91:27:ed:0d:49:3b:9b:0b:1f:52:f4:3c:85:e6:85:14:b0:
c2:5a:5b:ab:ec:d6:ab:4b:49:b7:53:a8:09:ad:77:90:0f:f4:
fb:9f:18:33:42:da:5a:b0:8b:38:81:39:9e:18:0e:7e:46:c6:
9e:cc:49:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWOKtnRPUpD4oXjOwf50BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzY0ZDhkM2FlNzI1YjQ1ZTBkNDgwN2Y2MTJlYzNkMWYy
YTNmNGYwHhcNMjYwMzAxMTcwMTE3WhcNMjYwMzAyMTcwMTE3WjAzMTEwLwYDVQQD
EygxNmQ5MzM5ZDE2ZWIyNDM4ZDNjOTNmODE0YjRiMTk5MmI0ZDM3ZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8SxdiSV8OncjjbqBdOSMBg2YFln
+TyVTURTDYCapntrdKKXfFs1Uc1rbzgz3pSDxdoWSHAoDbsguBNo+vq+IPzYdkOh
eetnXyaELJK7tU8lCSfMiLmMtUcBSWrXvzr4Bq90qRjV5GYAMvfSKI5oLZzwEXL0
kgEoJSnMv1PKouJkA6Ej50hDpWKIjrruTexMGPwRb11udZ7JLunTwtK2ceOWRGJl
Jnd6EpKpoTKpRYymGnPnXrieXgn4LGfSze8fL/1OltvbXx7m++IM2sS7VUcnd8sm
DzbcuhoAo/kAKnpIaZdSnav7Z9JTOtPKCBRujPSDVO/y1G6HusooF0dTFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbZM50W6yQ408k/gUtLGZK0039rMB8GA1UdIwQY
MBaAFJp2TY065yW0Xg1IB/YS7D0fKj9PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OWFmYmEtNGZlZC00MmVmLWE3NTEt
ZjVmZjlhZmMzMjY2LzEvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84OWFmYmEtNGZlZC00MmVmLWE3NTEtZjVmZjlhZmMzMjY2
LzEvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfIV+feI
k5yAq4vB9LWC6wNVc5X4FeFHOhOLg/uoG/sxkmsYMEZaEYjBozT1/ZwDAhaJN2qU
qdOY9u/NsljNVzXmAaLLUxdlPgWrgVLStM05KvBDaprQZd2G0Lbi17soLGZSFgkw
pPszeMJm44ZMMh9KxQ7LgfIVDC0yXQfRvLMmVbiX/QsZ7hxQo/asPaV6P8eeT5aa
t6Xe+Lb4z13Z01+e/MiU6g/BKYUUXF6s0NMaYaFdaOKPNIDFLkJVmNLNpUTrI1fm
1JEn7Q1JO5sLH1L0PIXmhRSwwlpbq+zWq0tJt1OoCa13kA/0+58YM0LaWrCLOIE5
nhgOfkbGnsxJyg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:51 2026 by rpki-client