Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier: ozMF2vfkOMYrxeeaoZJ1AB4s8fOMTwJPe7DhFMLhQVc=
Subject key identifier: AD:69:82:3A:92:04:91:6C:EE:7E:B2:78:5A:B6:F8:72:BD:C7:F7:74
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer: /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial: 019CABD9F12E76B9CFDF7A8B3DD4DEE33A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number: 09F1
Signing time: Mon 02 Mar 2026 00:01:52 +0000
Manifest this update: Mon 02 Mar 2026 00:01:52 +0000
Manifest next update: Tue 03 Mar 2026 00:01:52 +0000
Files and hashes: 1: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: 1Q4h0kwWFL2nwyEzexjRetuhaIxSrXugv0EpLFMqOrI=)
2: bY4WY1iKxzvuOL6bmkVqfpfooVA.roa (hash: Ph+QZYyi/7d0WLmkOSuDFC4tOnaIRjljQNdRjvbGpWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f1:2e:76:b9:cf:df:7a:8b:3d:d4:de:e3:3a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
Validity
Not Before: Mar 2 00:01:52 2026 GMT
Not After : Mar 3 00:01:52 2026 GMT
Subject: CN=ad69823a9204916cee7eb2785ab6f872bdc7f774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:d5:8a:76:4f:51:d5:1c:20:68:66:d7:1c:
70:fd:40:fe:45:ab:7e:17:7d:a9:76:2f:90:24:1f:
8f:5a:68:e9:ab:f8:50:08:6e:af:cf:ba:30:93:e9:
e5:0f:a7:80:b0:5d:08:9b:31:3f:a3:4b:89:65:05:
45:e9:42:ff:e1:3f:fb:9d:46:c9:7d:7c:c4:a8:e3:
99:5d:99:a6:9c:11:e2:62:8b:04:08:bc:6f:c4:77:
34:b0:64:b9:e2:da:cc:89:db:1a:69:7c:29:9e:4f:
f1:cf:61:29:de:14:f4:43:53:8a:81:2a:f6:57:28:
d5:b9:8a:03:6b:5c:b4:c1:db:56:32:56:6b:9e:53:
4f:65:5e:f1:66:8c:4c:5b:38:01:e1:7d:b5:db:49:
4f:08:91:4c:13:41:42:62:a5:e6:ee:00:78:07:ea:
67:d5:ab:41:5d:d7:71:90:b1:2d:0c:c4:55:ac:f4:
c9:e2:1a:28:48:ac:34:6d:b5:58:6e:6d:3b:d0:e8:
f3:1a:fb:e4:73:4e:d9:84:dc:87:17:fc:bb:87:3a:
ab:1e:68:4c:32:15:a9:c7:5b:86:c2:79:38:ae:97:
63:e4:a9:a3:ac:39:02:8c:48:bb:f8:d9:c9:7a:47:
1e:9b:97:b3:c1:c4:cd:dd:0c:fd:57:75:c2:1f:c8:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:69:82:3A:92:04:91:6C:EE:7E:B2:78:5A:B6:F8:72:BD:C7:F7:74
X509v3 Authority Key Identifier:
keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9b:b3:42:de:6c:bb:b3:21:6c:22:c7:ad:f3:af:1c:57:c9:
ef:91:91:46:ed:16:54:bb:e1:76:3f:cc:55:ef:7c:d7:83:e5:
49:ab:61:91:e7:3b:97:dd:03:4c:b2:09:c5:f0:52:8e:2a:e4:
54:27:55:59:44:3f:a5:5d:2f:be:de:f4:12:61:2b:95:fe:f3:
7b:c2:b9:7f:95:93:cd:2c:76:a7:fe:5d:dd:a5:81:8e:4b:a5:
ae:69:81:46:d6:3c:84:b6:b2:9f:91:9d:4c:a6:14:cd:46:ff:
bb:33:ce:3a:85:f5:0a:1b:ae:eb:d0:65:76:a5:cb:e6:cb:4a:
cd:c3:75:dd:7a:ab:a1:83:3b:a6:8c:82:64:e5:db:a6:42:48:
05:b7:bb:e1:84:08:1c:7a:4a:9e:e3:67:b6:8c:da:62:e4:79:
12:6a:ca:9d:60:c1:49:d6:d1:bc:e4:07:1f:a7:6a:99:57:bb:
0f:d7:14:60:f3:b9:f3:89:01:0a:2b:c6:64:51:03:8a:5b:13:
94:3e:20:74:08:21:d0:6c:15:60:6b:73:b1:47:f5:05:8c:55:
ff:cf:58:31:b8:56:cf:f7:08:ef:09:d8:53:95:aa:f5:62:71:
64:cf:b3:95:2f:21:4f:ff:43:45:d1:89:82:9d:1d:f6:37:f1:
fc:c9:db:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2fEudrnP33qLPdTe4zoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQ1ZmMzMTQ3MTAyODI0ZjlkMmQ1NDc3NjZhODA5YWVh
ZjI0NWEwHhcNMjYwMzAyMDAwMTUyWhcNMjYwMzAzMDAwMTUyWjAzMTEwLwYDVQQD
EyhhZDY5ODIzYTkyMDQ5MTZjZWU3ZWIyNzg1YWI2Zjg3MmJkYzdmNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHrVinZPUdUcIGhm1xxw/UD+Rat+
F32pdi+QJB+PWmjpq/hQCG6vz7owk+nlD6eAsF0ImzE/o0uJZQVF6UL/4T/7nUbJ
fXzEqOOZXZmmnBHiYosECLxvxHc0sGS54trMidsaaXwpnk/xz2Ep3hT0Q1OKgSr2
VyjVuYoDa1y0wdtWMlZrnlNPZV7xZoxMWzgB4X2120lPCJFME0FCYqXm7gB4B+pn
1atBXddxkLEtDMRVrPTJ4hooSKw0bbVYbm070OjzGvvkc07ZhNyHF/y7hzqrHmhM
MhWpx1uGwnk4rpdj5KmjrDkCjEi7+NnJekcem5ezwcTN3Qz9V3XCH8hZGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1pgjqSBJFs7n6yeFq2+HK9x/d0MB8GA1UdIwQY
MBaAFDDEX8MUcQKCT50tVHdmqAmuryRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMmFkNGMtMGIwNS00NzRkLTkxOWYt
M2I1NDBhNmJjM2RjLzEvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yMmFkNGMtMGIwNS00NzRkLTkxOWYtM2I1NDBhNmJjM2Rj
LzEvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZuzQt5s
u7MhbCLHrfOvHFfJ75GRRu0WVLvhdj/MVe9814PlSathkec7l90DTLIJxfBSjirk
VCdVWUQ/pV0vvt70EmErlf7ze8K5f5WTzSx2p/5d3aWBjkulrmmBRtY8hLayn5Gd
TKYUzUb/uzPOOoX1Chuu69BldqXL5stKzcN13XqroYM7poyCZOXbpkJIBbe74YQI
HHpKnuNntozaYuR5EmrKnWDBSdbRvOQHH6dqmVe7D9cUYPO584kBCivGZFEDilsT
lD4gdAgh0GwVYGtzsUf1BYxV/89YMbhWz/cI7wnYU5Wq9WJxZM+zlS8hT/9DRdGJ
gp0d9jfx/Mnb1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:39 2026 by rpki-client