Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier: LyZgQIMQctxTrkcC/xEFsifP3d9Q/1VkKX5Q/rAO77E=
Subject key identifier: EF:0E:50:D4:64:F1:DD:46:E6:3D:41:4B:41:11:73:5F:E1:31:DA:89
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 019CAD22C9EC94E1C7F3A28AFC970934E864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number: 1239
Signing time: Mon 02 Mar 2026 06:01:04 +0000
Manifest this update: Mon 02 Mar 2026 06:01:04 +0000
Manifest next update: Tue 03 Mar 2026 06:01:04 +0000
Files and hashes: 1: 5z8L94SxohW89feZF-x7UUHOUGw.roa (hash: J9U9SwJZOAhHbw/+dwZT4u/bEO014TJ7Spfz6aawrAo=)
2: 60ZuDyr70onvZz7b_VP-SDmx33E.roa (hash: twz5MCkaRcivByRDA9QCyxItgQZO9OCdluDvL7eF7Ro=)
3: BlrqBtWblMfctvze6Z4e1h26Vg0.roa (hash: mrpfN/u4KNrOk9l0nXYVVF7vi+rRmvUj9lVXmfONvc8=)
4: NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa (hash: eNPkOFpshNdBId/GwxgDcZ/1OocRZllruwGL/l+cxaA=)
5: TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa (hash: r53OH2xwFa4qKn9FoyBvVY4gvGfnLfCBjSGuWq2Tb+U=)
6: e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa (hash: fhBttHfpH+r5wDlnd1XHbP4VIUk5mx77G0HB40PrGrc=)
7: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: H/jaG9NenEk1qWdJZWst87V1wx6wQ0d9RDukXIoNW5M=)
8: vLogJj6NuTRQtmEXSY4brF-qnBY.roa (hash: zohFkXr1VCR5q6x1R2Xx5enwasHpy8O1g/gJdKkByho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c9:ec:94:e1:c7:f3:a2:8a:fc:97:09:34:e8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Mar 2 06:01:04 2026 GMT
Not After : Mar 3 06:01:04 2026 GMT
Subject: CN=ef0e50d464f1dd46e63d414b4111735fe131da89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:3b:64:cd:e1:09:15:bf:ac:af:ab:37:be:
09:59:93:e3:0c:d8:89:9b:df:ad:94:c7:d9:75:6f:
80:a1:3d:dc:29:21:9a:48:0b:e4:4c:f0:71:95:a4:
82:71:71:54:52:56:a9:17:ae:92:32:7a:dc:c3:fe:
11:f2:2b:d2:13:5f:67:ad:e3:1e:39:a1:e9:ae:92:
2e:32:c8:85:e5:43:88:8a:0b:b6:9e:18:38:f9:2d:
07:43:9c:b7:97:5b:c2:07:10:70:43:44:42:65:53:
5b:0e:6f:1a:5d:02:31:09:f9:e8:70:62:39:90:bd:
9b:35:48:df:a5:b4:df:3c:1a:86:d8:cc:b9:6d:19:
f4:a6:06:d6:09:83:56:e2:3d:e9:8a:a6:00:cb:06:
37:b8:e2:36:b3:97:b3:f0:29:69:2c:cb:5e:12:18:
30:72:21:2f:3b:f9:9e:fb:d1:f5:9f:d4:73:5c:cc:
b8:20:d0:be:e5:6b:c0:25:db:44:8c:47:7b:92:6b:
16:01:5a:63:2a:1d:c5:7e:21:49:4f:2e:81:c5:70:
2f:fa:e5:3e:a5:2d:04:03:b2:e7:6f:71:2d:23:e9:
d5:58:70:4c:d0:82:f4:78:ea:29:00:08:38:67:33:
91:a1:bb:b2:de:7a:e6:ed:e2:46:4d:d7:52:30:33:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0E:50:D4:64:F1:DD:46:E6:3D:41:4B:41:11:73:5F:E1:31:DA:89
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7c:72:b5:c6:ac:09:7c:6a:a7:46:50:bf:60:95:1e:dd:c4:
af:7e:4e:94:27:61:28:22:81:fd:01:d6:4d:15:1d:e1:8a:12:
52:92:df:66:bd:f4:f0:3f:23:50:ff:68:af:a0:09:7c:32:21:
0c:97:84:5e:c7:32:54:d6:1c:ba:21:1a:16:28:34:2a:0b:35:
92:fb:3f:e6:88:e2:44:cb:25:65:e1:06:ea:c7:20:cd:ee:73:
ef:67:e1:c0:d4:5b:8c:46:da:24:7b:50:b5:36:b1:d0:a4:ac:
ac:17:12:17:af:2f:01:0c:ab:1e:54:aa:a4:b0:f7:cb:bd:71:
d7:e5:9e:c7:ce:7c:b1:4a:03:4a:51:d9:7a:25:5a:28:5b:2c:
0b:49:52:f0:a3:f1:10:a3:54:6d:e4:9e:68:5d:b3:f8:09:b2:
a3:f5:b8:0a:2c:70:13:78:32:73:6e:24:6a:94:db:8a:b8:01:
80:54:b7:8e:2c:44:e9:ce:55:69:8e:00:6d:4f:75:08:2b:4a:
72:4a:22:09:15:32:08:81:50:1d:dd:4a:fd:7f:1c:a3:a0:2c:
53:43:f4:33:98:b0:30:62:ef:3b:14:66:39:0f:34:f7:bb:a1:
df:fa:c3:49:c3:10:83:ac:7a:af:a4:90:8f:16:44:86:22:ca:
d0:61:13:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:25 2026 by rpki-client