Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
File: mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json)
Hash identifier: Zs8oK8RwM4bNWgmFdrjw1CMLssvGZKXQp3ezFFz8QZ0=
Subject key identifier: BD:93:13:1E:87:F3:8E:65:60:42:A7:A5:88:B8:4F:57:24:4B:C2:27
Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
Certificate issuer: /CN=9a754c71d62cb23948d9119eda772fde38e67b67
Certificate serial: 019D99D0B29FA81E584AD5588E861E320446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 05:01:24 +0000
Manifest this update: Fri 17 Apr 2026 05:01:24 +0000
Manifest next update: Sat 18 Apr 2026 05:01:24 +0000
Files and hashes: 1: 0gT4DLtTdM_CyVsv9Vw60QKs1N4.roa (hash: zFRwzZzrDs5I9AtJqZurIqmSmEX2LYuF+rvsMKclqlE=)
2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: QWB7SDQdTLgCbErekW3biDHeL2wg7slbJIRWKOthUTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:b2:9f:a8:1e:58:4a:d5:58:8e:86:1e:32:04:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67
Validity
Not Before: Apr 17 05:01:24 2026 GMT
Not After : Apr 18 05:01:24 2026 GMT
Subject: CN=bd93131e87f38e656042a7a588b84f57244bc227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:19:f4:fb:2f:90:d6:8a:17:57:8e:6b:c9:
e8:51:58:a1:4a:92:36:e6:f0:6e:28:0a:cc:ff:8e:
8c:de:8b:0c:09:0d:f9:54:57:a9:5e:45:72:c8:a1:
62:57:c3:ad:43:64:80:3d:31:50:f7:9c:52:9c:d9:
68:26:25:0b:16:be:18:a7:63:83:09:64:7d:e0:f7:
04:52:dd:50:ad:f9:38:e5:30:2e:b2:4d:6b:74:0f:
25:44:dc:e1:ad:e4:42:53:f1:2c:29:4a:d5:80:cd:
dc:66:3a:3c:0d:ef:27:82:6d:e9:8f:7a:c0:85:3e:
62:c1:06:c8:70:58:51:cf:33:f2:7c:e0:31:b0:c1:
a5:a4:db:f2:86:dd:f9:03:e1:d4:19:89:3a:4f:f1:
9b:b7:46:a9:04:ff:ba:70:ef:fd:3d:7d:96:3f:0f:
df:4b:fc:b1:f2:b5:43:e9:41:8c:2b:88:9a:f9:0d:
ba:12:09:09:6d:a0:68:29:93:29:ee:cd:01:1d:0d:
69:4d:bd:14:81:cc:88:bf:5c:3c:c3:67:8d:d0:b8:
ee:e6:bd:77:5e:52:7a:0a:03:82:ec:05:a3:84:8f:
eb:9d:6d:d7:95:53:44:8d:d9:65:e6:e8:35:a6:89:
45:0e:d8:88:45:9a:a4:78:10:72:c9:c7:be:18:f4:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:93:13:1E:87:F3:8E:65:60:42:A7:A5:88:B8:4F:57:24:4B:C2:27
X509v3 Authority Key Identifier:
keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:35:2d:63:1f:a5:47:fb:3f:85:ce:19:e7:c4:9c:19:b6:1b:
77:90:b8:21:6e:1d:c1:d5:89:ab:74:21:23:1d:57:1a:bd:8c:
6c:e4:2d:12:de:87:12:84:58:5f:b9:22:f0:32:48:92:e2:06:
cb:83:a5:0e:4f:35:fc:de:12:0d:46:e7:f7:7c:85:05:70:ca:
31:a7:09:9d:57:c7:ff:90:6c:00:eb:0b:a2:8e:cc:6f:d7:09:
51:b4:5c:34:6a:d6:84:14:de:39:75:13:1d:6a:ed:2f:6b:42:
60:20:d6:fc:fd:67:86:40:d7:e1:cc:db:c8:93:28:64:92:a5:
00:fd:94:e5:15:80:b6:09:c6:b2:ae:53:d3:78:ee:68:e1:35:
36:53:7c:55:39:d5:cf:7c:78:09:6f:39:66:c4:6b:4b:12:c9:
6c:04:d8:7b:16:85:7b:9e:6e:bc:9d:8f:48:a7:63:49:43:d5:
e3:0e:8d:64:bb:b5:71:a2:ef:31:8f:f2:91:75:6c:2e:0b:64:
17:73:b8:fe:4b:a0:f1:0f:06:52:11:91:1d:3d:28:80:01:2d:
22:f2:6e:92:9b:f9:ec:9c:fd:4d:54:05:3d:95:6e:58:ca:4a:
bf:47:88:92:42:49:53:1a:3b:1e:97:c3:d5:87:b2:12:99:cd:
c3:74:4c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:37 2026 by rpki-client