Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier: /qG5ZKdKdPxpdZ7ks10XWfwQbDK2XY8g4dOxa6kPpqY=
Subject key identifier: 42:86:D6:C4:C5:2F:19:08:11:7A:31:17:3E:BD:C6:FC:AC:FB:A4:07
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 019D9B50C8531BE999FE03A2D5530A14DEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number: 0FA9
Signing time: Fri 17 Apr 2026 12:00:55 +0000
Manifest this update: Fri 17 Apr 2026 12:00:55 +0000
Manifest next update: Sat 18 Apr 2026 12:00:55 +0000
Files and hashes: 1: FnV4siConvZq8mk9CbOlR5a9DjI.roa (hash: IZ5c3lykfIm9IkvU3L26cQr7DSQZqq6fwwu8m+5tYDw=)
2: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: p1mhSmYFhW1A2mLEizlxtfm39xBW7OYUFSBaZrpoSKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c8:53:1b:e9:99:fe:03:a2:d5:53:0a:14:de:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: Apr 17 12:00:55 2026 GMT
Not After : Apr 18 12:00:55 2026 GMT
Subject: CN=4286d6c4c52f1908117a31173ebdc6fcacfba407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:6a:7a:69:21:2d:83:96:38:f1:da:14:bf:
3c:a5:f7:9c:1d:36:75:e8:14:bb:f4:22:46:80:89:
2f:bf:cc:b9:66:f3:ab:78:a9:70:80:3e:df:8e:02:
4e:79:46:cd:dc:2f:12:61:24:5d:72:8d:89:a2:77:
70:a1:e2:58:37:d9:5a:19:b5:72:67:8e:13:d1:18:
bd:2e:45:cd:9e:95:74:58:8b:f2:4b:8d:2b:93:47:
4f:68:2b:e1:6b:a5:fb:61:40:db:3f:19:48:06:1c:
46:aa:8b:c9:43:1b:e5:1e:07:99:14:07:48:5f:4e:
cb:86:49:70:c4:47:16:9b:fc:d7:20:71:7d:a9:7a:
b2:9d:49:f3:8a:d6:29:f1:8e:f9:21:85:93:4a:16:
62:2c:c5:bc:a8:9e:5c:93:74:0d:70:ae:56:37:0d:
ec:9d:de:30:3e:36:2e:b8:76:75:e7:19:ef:6b:d7:
f1:d7:c8:32:56:0e:36:eb:11:4f:ba:01:2a:a6:92:
cf:21:c1:7c:4b:a6:12:03:8c:3c:ca:a6:23:28:ab:
24:7d:3c:47:94:88:b4:81:95:46:e7:cd:3b:0b:50:
07:d8:c1:fd:76:71:55:a6:7e:59:70:dc:f5:7e:9e:
31:19:ec:7e:2f:75:a3:f8:4d:99:07:20:ff:6c:b7:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:86:D6:C4:C5:2F:19:08:11:7A:31:17:3E:BD:C6:FC:AC:FB:A4:07
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:62:19:57:cb:7b:b6:6e:2a:09:45:44:56:4c:8f:9c:ae:65:
c5:dd:aa:3c:ba:91:c3:af:5a:85:4b:f9:14:b6:e5:41:27:b5:
e1:86:eb:5c:c3:5e:91:d5:62:2d:ed:04:d7:4f:1b:f3:ae:d6:
5a:d1:54:a1:6a:2b:2b:be:44:04:7a:9d:fd:0e:16:35:f2:43:
f0:17:74:8c:09:2d:7c:f6:57:fb:83:9b:05:f3:a4:bd:a8:ed:
45:33:46:d8:cf:f3:92:9b:16:fa:ac:ba:c5:db:33:ae:49:bc:
91:81:d8:4e:d3:3b:a3:56:28:34:fe:48:04:0d:e8:5b:1b:c5:
fb:bd:16:98:23:f9:06:a5:75:00:19:32:69:f9:88:f2:68:13:
0e:43:6c:24:48:69:04:db:8c:ae:fa:22:45:36:1f:fa:06:7a:
d5:b9:63:d6:de:e7:33:11:bb:91:50:f9:a1:81:84:cb:ff:9c:
ed:eb:e5:2a:f2:65:60:5a:e4:a7:01:28:a1:3a:16:f1:7f:96:
53:f5:7b:8b:06:7a:7c:86:de:7f:13:bc:0f:a4:67:4a:92:ff:
72:d1:fb:d3:01:48:9c:e7:c9:c3:ab:79:dc:74:51:ed:ba:7c:
03:7d:ca:82:ea:93:91:55:33:34:c1:5a:af:27:e4:3d:f3:5c:
02:ce:c4:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUMhTG+mZ/gOi1VMKFN76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNzU1N2NmMjI2MjlkMDU4YTUxMTQ5NjViMmY5ZGY4ZWY0
ZGI2OTAwHhcNMjYwNDE3MTIwMDU1WhcNMjYwNDE4MTIwMDU1WjAzMTEwLwYDVQQD
Eyg0Mjg2ZDZjNGM1MmYxOTA4MTE3YTMxMTczZWJkYzZmY2FjZmJhNDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj9qemkhLYOWOPHaFL88pfecHTZ1
6BS79CJGgIkvv8y5ZvOreKlwgD7fjgJOeUbN3C8SYSRdco2JondwoeJYN9laGbVy
Z44T0Ri9LkXNnpV0WIvyS40rk0dPaCvha6X7YUDbPxlIBhxGqovJQxvlHgeZFAdI
X07LhklwxEcWm/zXIHF9qXqynUnzitYp8Y75IYWTShZiLMW8qJ5ck3QNcK5WNw3s
nd4wPjYuuHZ15xnva9fx18gyVg426xFPugEqppLPIcF8S6YSA4w8yqYjKKskfTxH
lIi0gZVG5807C1AH2MH9dnFVpn5ZcNz1fp4xGex+L3Wj+E2ZByD/bLcuMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKG1sTFLxkIEXoxFz69xvys+6QHMB8GA1UdIwQY
MBaAFDJ1V88iYp0FilEUllsvnfjvTbaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUt
ZmQ3MjViODI1MjkxLzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUtZmQ3MjViODI1Mjkx
LzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGIZV8t7
tm4qCUVEVkyPnK5lxd2qPLqRw69ahUv5FLblQSe14YbrXMNekdViLe0E108b867W
WtFUoWorK75EBHqd/Q4WNfJD8Bd0jAktfPZX+4ObBfOkvajtRTNG2M/zkpsW+qy6
xdszrkm8kYHYTtM7o1YoNP5IBA3oWxvF+70WmCP5BqV1ABkyafmI8mgTDkNsJEhp
BNuMrvoiRTYf+gZ61blj1t7nMxG7kVD5oYGEy/+c7evlKvJlYFrkpwEooToW8X+W
U/V7iwZ6fIbefxO8D6RnSpL/ctH70wFInOfJw6t53HRR7bp8A33KguqTkVUzNMFa
ryfkPfNcAs7EEw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:57:38 2026 by rpki-client