Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: MXUl1Un3ClDOLliQM+avATnpEBzFfG9jLiOXSFuqRlo=
Subject key identifier: 4D:51:37:BA:0E:64:02:03:9E:3F:7A:00:E0:0C:C5:22:FD:89:91:6E
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 019CAD9023271110DC038A0D7FA6B7F2B987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 02B0
Signing time: Mon 02 Mar 2026 08:00:30 +0000
Manifest this update: Mon 02 Mar 2026 08:00:30 +0000
Manifest next update: Tue 03 Mar 2026 08:00:30 +0000
Files and hashes: 1: 7iabnlFmeCBBjsLFJN99I8--_-4.roa (hash: XEo4P0carZV4gE6HMO4BcJUELgS7un1lJ1bRLna274A=)
2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: AEo+HnvRx/ezJlzuYXv2u1g07OJ9onAZkPR5mfHltxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:23:27:11:10:dc:03:8a:0d:7f:a6:b7:f2:b9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Mar 2 08:00:30 2026 GMT
Not After : Mar 3 08:00:30 2026 GMT
Subject: CN=4d5137ba0e6402039e3f7a00e00cc522fd89916e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5d:77:a2:a5:45:d3:27:4d:94:40:4e:22:87:
e0:fe:b5:16:89:ad:1b:6c:14:92:35:28:93:38:1f:
af:22:67:c1:ed:57:2d:d5:11:4d:e5:ad:01:bc:d6:
b8:b9:fc:7e:a2:bd:47:62:09:d3:2c:0b:5e:52:fc:
35:73:ac:8e:90:f4:74:69:73:e5:f6:25:b8:94:c9:
67:56:98:f8:19:bc:f6:dc:b3:03:0b:51:c4:c8:78:
e9:a2:75:56:c9:a3:f1:76:12:a5:cb:fc:9a:e6:87:
b7:8c:71:5c:b5:df:27:7f:f5:01:76:06:1c:91:cb:
3e:71:e7:9d:7d:6a:7b:8c:12:80:27:76:d6:e9:1b:
2f:09:38:f9:e7:5f:67:d6:52:1e:24:9b:89:1e:fb:
6f:b8:61:2f:6f:12:ae:f7:08:9b:02:86:51:1b:ce:
6d:26:e0:2f:d6:53:bf:80:18:58:44:d1:6d:68:dc:
c8:fb:01:b4:84:74:8c:5f:41:58:b9:9a:8a:16:dd:
77:19:7d:c2:fd:b9:f7:27:39:2c:13:f6:25:d6:77:
54:86:67:a8:7b:79:e2:f3:c8:58:cc:fd:a3:ad:2b:
1a:01:dd:b0:87:bc:8e:e4:9b:d8:26:cd:93:f4:af:
59:b3:71:be:e7:49:98:e5:93:a9:d2:a2:83:1f:b9:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:51:37:BA:0E:64:02:03:9E:3F:7A:00:E0:0C:C5:22:FD:89:91:6E
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:29:df:70:eb:79:96:2e:53:6d:f0:9e:a7:e0:51:b0:c8:fd:
ae:f6:a9:9a:32:43:5e:3e:a2:6c:5d:b2:a0:49:ee:13:a9:21:
50:5f:68:9d:0f:8d:40:43:01:de:50:8e:34:18:7b:9e:29:32:
ab:66:6e:4a:b5:f8:b3:69:0a:17:8d:92:d5:5d:2d:d9:ce:c4:
1a:f4:c8:a7:46:74:e9:c6:b2:13:eb:56:93:30:0b:93:b2:f5:
bc:6d:1c:62:83:ac:0c:2d:88:ac:ed:46:eb:74:f0:d9:f4:d8:
e2:80:2a:67:5d:03:f9:fc:a6:03:da:ca:1f:15:36:f6:7d:8c:
05:3c:0a:35:c7:fd:58:d2:50:b2:19:0c:1c:68:ce:a9:9d:53:
84:74:00:bc:84:70:c2:a6:6f:44:7e:fd:0c:7b:3b:6d:bf:20:
47:dc:6e:9e:ea:29:f5:60:80:e2:ff:29:cb:ba:16:50:1f:4c:
27:c0:d9:e4:1b:81:27:d5:fd:c4:2b:84:d8:7b:f6:dc:34:0b:
4a:1a:d5:66:2d:10:be:35:c0:c0:20:d7:18:74:4a:cb:c5:ce:
5d:ec:07:9a:68:44:b3:d4:a3:9b:67:dc:97:48:2d:5f:93:46:
c6:0e:17:f7:68:19:75:3f:6b:59:cd:5f:53:e0:12:ff:c7:a4:
3b:f9:52:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkCMnERDcA4oNf6a38rmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmM4ZGMyYTdjMWI5ZjMyYmExOTU3ZmY0OTJkYzBiYTRm
MjYwZmYwHhcNMjYwMzAyMDgwMDMwWhcNMjYwMzAzMDgwMDMwWjAzMTEwLwYDVQQD
Eyg0ZDUxMzdiYTBlNjQwMjAzOWUzZjdhMDBlMDBjYzUyMmZkODk5MTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV13oqVF0ydNlEBOIofg/rUWia0b
bBSSNSiTOB+vImfB7Vct1RFN5a0BvNa4ufx+or1HYgnTLAteUvw1c6yOkPR0aXPl
9iW4lMlnVpj4Gbz23LMDC1HEyHjponVWyaPxdhKly/ya5oe3jHFctd8nf/UBdgYc
kcs+ceedfWp7jBKAJ3bW6RsvCTj5519n1lIeJJuJHvtvuGEvbxKu9wibAoZRG85t
JuAv1lO/gBhYRNFtaNzI+wG0hHSMX0FYuZqKFt13GX3C/bn3JzksE/Yl1ndUhmeo
e3ni88hYzP2jrSsaAd2wh7yO5JvYJs2T9K9Zs3G+50mY5ZOp0qKDH7kZgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1RN7oOZAIDnj96AOAMxSL9iZFuMB8GA1UdIwQY
MBaAFJn8jcKnwbnzK6GVf/SS3Auk8mD/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2Ut
ZTRjNjc0MWM4MDJjLzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2UtZTRjNjc0MWM4MDJj
LzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSnfcOt5
li5TbfCep+BRsMj9rvapmjJDXj6ibF2yoEnuE6khUF9onQ+NQEMB3lCONBh7niky
q2ZuSrX4s2kKF42S1V0t2c7EGvTIp0Z06cayE+tWkzALk7L1vG0cYoOsDC2IrO1G
63Tw2fTY4oAqZ10D+fymA9rKHxU29n2MBTwKNcf9WNJQshkMHGjOqZ1ThHQAvIRw
wqZvRH79DHs7bb8gR9xunuop9WCA4v8py7oWUB9MJ8DZ5BuBJ9X9xCuE2Hv23DQL
ShrVZi0QvjXAwCDXGHRKy8XOXewHmmhEs9Sjm2fcl0gtX5NGxg4X92gZdT9rWc1f
U+AS/8ekO/lSag==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:33 2026 by rpki-client