Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
File: Mn2iLLkBOLBQg37c8ew2pauMQqw.mft (raw, json)
Hash identifier: WXOG1nlQTUpvaW23S0bnxVjOjXsFX91bW5RYlPho5ZU=
Subject key identifier: F0:52:0F:FE:02:F6:86:B5:DA:4C:47:D2:BC:B2:8D:25:69:95:BA:8D
Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
Certificate issuer: /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Certificate serial: 019CAC0FC52A3338B9C8BE32E7CDBF5626B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
Manifest number: 14A6
Signing time: Mon 02 Mar 2026 01:00:40 +0000
Manifest this update: Mon 02 Mar 2026 01:00:40 +0000
Manifest next update: Tue 03 Mar 2026 01:00:40 +0000
Files and hashes: 1: Mn2iLLkBOLBQg37c8ew2pauMQqw.crl (hash: e/+9m8MoKQHSfnIVVdgxA4ism0OsJj1YY55sYGZbPNI=)
2: a_L8u_9OUTVsQn035qkg5zotc6w.roa (hash: i3QS2JwoyFZ8oKKUfbp9cckYFMGKSBc22cz4ktopp/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c5:2a:33:38:b9:c8:be:32:e7:cd:bf:56:26:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Validity
Not Before: Mar 2 01:00:40 2026 GMT
Not After : Mar 3 01:00:40 2026 GMT
Subject: CN=f0520ffe02f686b5da4c47d2bcb28d256995ba8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:3e:40:ec:39:d1:87:c4:7b:72:e0:3b:cd:
65:e8:b9:51:2c:70:22:8e:a2:55:f8:1e:1d:2d:33:
4a:b7:d3:a1:5a:55:ff:ba:58:3d:79:b9:e1:34:5f:
32:ad:b8:c0:63:ec:4b:27:6e:08:2e:bd:1f:bd:8f:
c3:bb:ae:4e:ae:13:1b:0a:09:d6:f1:d1:8d:69:32:
35:99:c9:14:b3:1b:41:0a:59:c5:59:4f:02:a6:c6:
d7:20:89:d5:f9:a0:be:8d:42:37:4f:c2:b7:fe:41:
f8:cb:33:69:8b:02:27:b2:98:09:74:4a:d8:37:73:
f1:05:58:61:6c:8e:90:b5:90:d5:0f:57:00:b7:76:
e2:99:13:b6:e3:f2:2c:cd:19:77:3d:cf:c9:a5:2c:
0e:70:ba:53:1b:b9:c3:57:c9:57:d7:63:1f:7f:0b:
6f:f3:a1:27:95:0c:11:3f:e7:4e:9f:9e:32:95:34:
ec:5b:0b:da:1c:30:f0:7c:58:63:f7:55:e7:ae:1a:
4d:ac:4e:be:67:cd:a9:ca:1f:c7:d0:3c:ea:24:73:
aa:d7:3e:23:5e:79:de:98:93:09:54:16:da:71:3d:
3c:02:e9:e9:00:73:dc:51:24:88:b6:f0:54:42:fe:
ea:12:26:68:b8:90:45:fe:9b:6c:95:ae:3d:30:94:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:52:0F:FE:02:F6:86:B5:DA:4C:47:D2:BC:B2:8D:25:69:95:BA:8D
X509v3 Authority Key Identifier:
keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:13:99:15:3f:e6:ab:e9:32:d3:cd:32:5d:cb:32:e9:f0:7b:
bc:32:b4:ba:10:3e:42:45:e1:6b:c1:88:e5:b0:26:02:93:61:
56:72:5a:1b:74:6b:78:11:1f:03:38:2e:14:d6:6c:fa:67:6b:
cb:da:99:23:d6:d0:09:b5:72:e6:47:6b:17:50:7b:ee:47:b7:
0c:6c:83:dd:a2:c0:ae:21:05:7c:5f:41:0f:c8:d7:bd:d9:9d:
2f:b9:6b:e7:99:41:69:8d:6d:57:54:ea:00:68:43:bb:7d:5e:
32:82:70:51:eb:0d:07:2b:56:b4:c6:44:77:8e:92:34:af:51:
7b:a0:44:90:0a:65:20:c4:fa:07:71:c6:7d:e7:60:1b:1e:8e:
1e:29:6f:ff:e8:33:bc:36:55:c7:2c:6e:9e:f2:7d:fa:60:b6:
7e:8d:ce:b4:f7:c1:9a:96:f9:99:8d:33:f2:ff:db:5c:d4:31:
6e:8c:fb:90:3c:0d:fe:af:24:60:b9:c3:04:02:89:2c:c8:6a:
74:4b:22:71:aa:6c:fd:0d:ff:30:88:c2:f3:f5:12:f8:da:4c:
c5:db:63:9b:ea:b7:c0:a4:62:6b:2e:ea:7e:65:bc:c1:9d:30:
54:d5:e2:48:da:44:cc:21:fa:31:82:68:3c:62:9c:8d:e1:2d:
ae:bd:c3:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD8UqMzi5yL4y582/Via2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyN2RhMjJjYjkwMTM4YjA1MDgzN2VkY2YxZWMzNmE1YWI4
YzQyYWMwHhcNMjYwMzAyMDEwMDQwWhcNMjYwMzAzMDEwMDQwWjAzMTEwLwYDVQQD
EyhmMDUyMGZmZTAyZjY4NmI1ZGE0YzQ3ZDJiY2IyOGQyNTY5OTViYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWA+QOw50YfEe3LgO81l6LlRLHAi
jqJV+B4dLTNKt9OhWlX/ulg9ebnhNF8yrbjAY+xLJ24ILr0fvY/Du65OrhMbCgnW
8dGNaTI1mckUsxtBClnFWU8CpsbXIInV+aC+jUI3T8K3/kH4yzNpiwInspgJdErY
N3PxBVhhbI6QtZDVD1cAt3bimRO24/IszRl3Pc/JpSwOcLpTG7nDV8lX12Mffwtv
86EnlQwRP+dOn54ylTTsWwvaHDDwfFhj91XnrhpNrE6+Z82pyh/H0DzqJHOq1z4j
XnnemJMJVBbacT08AunpAHPcUSSItvBUQv7qEiZouJBF/ptsla49MJTP9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBSD/4C9oa12kxH0ryyjSVplbqNMB8GA1UdIwQY
MBaAFDJ9oiy5ATiwUIN+3PHsNqWrjEKsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83MDA4ZmMtYWNjNC00ZWY1LThmYjkt
OTA3OTVmYjM5MjhjLzEvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC83MDA4ZmMtYWNjNC00ZWY1LThmYjktOTA3OTVmYjM5Mjhj
LzEvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhOZFT/m
q+ky080yXcsy6fB7vDK0uhA+QkXha8GI5bAmApNhVnJaG3RreBEfAzguFNZs+mdr
y9qZI9bQCbVy5kdrF1B77ke3DGyD3aLAriEFfF9BD8jXvdmdL7lr55lBaY1tV1Tq
AGhDu31eMoJwUesNBytWtMZEd46SNK9Re6BEkAplIMT6B3HGfedgGx6OHilv/+gz
vDZVxyxunvJ9+mC2fo3OtPfBmpb5mY0z8v/bXNQxboz7kDwN/q8kYLnDBAKJLMhq
dEsicaps/Q3/MIjC8/US+NpMxdtjm+q3wKRiay7qfmW8wZ0wVNXiSNpEzCH6MYJo
PGKcjeEtrr3D9Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:20 2026 by rpki-client