Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier: nfRoHG7DW+hgcXdaJeHatHfihDe948FR3yRe0z/qxMM=
Subject key identifier: FC:61:21:36:63:93:53:75:F4:04:9B:83:06:1B:B0:95:3D:90:D9:BB
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial: 019CADC7C78F3A47BC1ED36D8DA23FB61FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number: 0BEF
Signing time: Mon 02 Mar 2026 09:01:16 +0000
Manifest this update: Mon 02 Mar 2026 09:01:16 +0000
Manifest next update: Tue 03 Mar 2026 09:01:16 +0000
Files and hashes: 1: V7JsXJ0GLKjgHsCk3ewLigNI5bU.roa (hash: h3m+52oeLH7xOWJ+THQYW7O1i1kOSNXejnm2XZ2qwIU=)
2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: 468aJe9HqzCmT21fLEFtbNS+zKyaZMqIyNmiPvVWyrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:c7:8f:3a:47:bc:1e:d3:6d:8d:a2:3f:b6:1f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Validity
Not Before: Mar 2 09:01:16 2026 GMT
Not After : Mar 3 09:01:16 2026 GMT
Subject: CN=fc61213663935375f4049b83061bb0953d90d9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:10:26:8f:28:87:ed:3e:e2:39:79:50:41:
4f:d1:a5:42:ae:46:95:c2:e0:cf:e1:01:76:92:96:
77:bf:10:7c:95:0c:b7:f5:19:82:fc:54:02:c7:75:
bf:96:f0:61:96:78:15:22:de:dc:9a:9e:88:44:08:
57:c5:35:02:86:83:c9:8f:64:71:90:53:2e:9d:96:
0c:66:f3:8c:a1:08:27:19:28:4a:6f:e7:60:5b:2c:
28:b9:36:a8:e8:02:a0:bd:fb:31:df:44:b9:21:1a:
f6:3a:16:7c:bc:1e:15:46:8b:0f:ef:cc:d5:ed:0f:
03:a1:fe:2e:b9:d4:bb:cf:a6:85:77:2d:f7:82:9a:
c5:7d:2d:37:6b:28:0d:97:45:80:52:69:e5:ac:8e:
87:28:32:af:36:a1:66:6e:5c:94:27:2f:fb:52:1c:
7a:2a:74:15:a5:bd:df:c3:ac:e4:f5:9f:3f:16:60:
df:e1:9f:4f:b8:cb:6a:5b:9c:3e:33:5f:12:90:13:
a6:03:76:f2:7f:56:4f:fe:a8:c9:83:2e:5f:71:c3:
3a:6f:d3:60:27:42:b3:8a:7f:44:1e:0c:d7:db:73:
59:30:ff:94:a2:94:ac:87:85:f4:90:54:88:b6:d6:
e6:38:ad:02:43:6f:8a:63:1e:6f:bd:47:97:78:17:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:61:21:36:63:93:53:75:F4:04:9B:83:06:1B:B0:95:3D:90:D9:BB
X509v3 Authority Key Identifier:
keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:53:9b:11:41:c6:c1:b4:d8:a5:fa:4b:62:22:86:89:28:00:
5f:37:74:f3:ad:36:74:26:3d:cc:9e:13:8e:ca:72:3e:e8:b4:
03:3f:87:a4:3d:0e:dc:35:ba:ea:72:41:3c:d4:27:bc:51:8d:
57:04:37:56:9c:b7:ab:02:da:d5:80:23:a2:f0:ba:03:8f:f5:
73:db:c4:dd:32:db:b3:e3:8a:f9:c1:45:ab:8a:2f:12:26:8f:
06:14:eb:27:17:51:80:86:f8:d4:9a:38:d8:76:3c:ab:0f:a1:
1a:a4:7e:71:d4:63:01:a1:e8:4e:41:22:0f:68:56:08:bc:35:
21:4a:ea:75:2d:09:81:95:6e:a7:82:f5:6b:9f:05:1f:14:ff:
41:1e:64:44:d6:a9:58:0d:65:b9:ee:63:e1:2a:5a:b5:18:a7:
ee:0c:c5:9c:37:6d:9d:7a:1e:d9:87:48:96:6d:9a:91:c9:7a:
c5:60:ec:10:7a:1b:7a:cc:26:60:4a:1a:93:e4:ba:44:b0:06:
ad:67:05:87:22:b4:69:17:09:8c:20:d6:4a:a3:ca:7f:a2:53:
39:b0:88:c6:e1:ec:c3:13:40:91:bb:9b:8e:67:5d:8a:30:75:
f4:01:48:8e:a6:0c:aa:4f:3b:08:1f:33:72:b5:35:18:b1:7e:
29:b0:83:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx8ePOke8HtNtjaI/th/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTE4YjgwY2JiMzI3MzdhNDZiMjQ0ODY5YTZhZDU1MDk1
NDNmYTEwHhcNMjYwMzAyMDkwMTE2WhcNMjYwMzAzMDkwMTE2WjAzMTEwLwYDVQQD
EyhmYzYxMjEzNjYzOTM1Mzc1ZjQwNDliODMwNjFiYjA5NTNkOTBkOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAregQJo8oh+0+4jl5UEFP0aVCrkaV
wuDP4QF2kpZ3vxB8lQy39RmC/FQCx3W/lvBhlngVIt7cmp6IRAhXxTUChoPJj2Rx
kFMunZYMZvOMoQgnGShKb+dgWywouTao6AKgvfsx30S5IRr2OhZ8vB4VRosP78zV
7Q8Dof4uudS7z6aFdy33gprFfS03aygNl0WAUmnlrI6HKDKvNqFmblyUJy/7Uhx6
KnQVpb3fw6zk9Z8/FmDf4Z9PuMtqW5w+M18SkBOmA3byf1ZP/qjJgy5fccM6b9Ng
J0Kzin9EHgzX23NZMP+UopSsh4X0kFSIttbmOK0CQ2+KYx5vvUeXeBdCNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxhITZjk1N19ASbgwYbsJU9kNm7MB8GA1UdIwQY
MBaAFJqRi4DLsyc3pGskSGmmrVUJVD+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81YzBiNGEtMmRhNC00M2E1LTkyODkt
MTkzN2JkZThjZDZmLzEvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81YzBiNGEtMmRhNC00M2E1LTkyODktMTkzN2JkZThjZDZm
LzEvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVObEUHG
wbTYpfpLYiKGiSgAXzd08602dCY9zJ4TjspyPui0Az+HpD0O3DW66nJBPNQnvFGN
VwQ3Vpy3qwLa1YAjovC6A4/1c9vE3TLbs+OK+cFFq4ovEiaPBhTrJxdRgIb41Jo4
2HY8qw+hGqR+cdRjAaHoTkEiD2hWCLw1IUrqdS0JgZVup4L1a58FHxT/QR5kRNap
WA1lue5j4SpatRin7gzFnDdtnXoe2YdIlm2akcl6xWDsEHobeswmYEoak+S6RLAG
rWcFhyK0aRcJjCDWSqPKf6JTObCIxuHswxNAkbubjmddijB19AFIjqYMqk87CB8z
crU1GLF+KbCDqA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:18:27 2026 by rpki-client