Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
File: MseO7vestFH8N1df65EU38zBzfs.mft (raw, json)
Hash identifier: l9eUNBrl5M873auCP/ruT94V0cWr7M58ZfEOQlu/TUQ=
Subject key identifier: 74:1D:17:D4:37:AD:7B:9A:75:07:58:85:46:77:7F:05:22:C0:A2:F1
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 019CAB341BB592D510459FE9DE04A5252ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
Manifest number: 138A
Signing time: Sun 01 Mar 2026 21:00:44 +0000
Manifest this update: Sun 01 Mar 2026 21:00:44 +0000
Manifest next update: Mon 02 Mar 2026 21:00:44 +0000
Files and hashes: 1: 6JZ7XwAAQjYcJy-iMu7ApYDu0IE.roa (hash: OgfErWAGIy3L32XMleS4jSHvDJW/cp8NDQpdWGx5uXw=)
2: MseO7vestFH8N1df65EU38zBzfs.crl (hash: 79ZN/OmFmpLbpFqCdnKkxq2b6Nj6fvKju4g4t/rDLk4=)
3: bnh9H9MtaO7JJkGv9fB6vzfbRL8.roa (hash: OarhJBM7HcEYsfcrksfUPdeB09DN8UfGjioylIK5c3k=)
4: dF9sPCEN_zHoOwfh4IOcs-1yTLs.roa (hash: 3JIrXXGe/T2UAMIBqEouLulWgUj2qDcUjutd+HRZT2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:1b:b5:92:d5:10:45:9f:e9:de:04:a5:25:2e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Mar 1 21:00:44 2026 GMT
Not After : Mar 2 21:00:44 2026 GMT
Subject: CN=741d17d437ad7b9a7507588546777f0522c0a2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:67:6c:24:74:64:c6:75:12:d0:1f:77:75:
43:9c:0e:b6:f5:1b:4c:ff:55:60:f4:de:78:9f:76:
9b:4c:94:60:71:b2:a9:70:19:4c:fe:12:7d:17:fb:
fe:af:3f:78:39:c7:ff:de:37:70:91:52:cc:ef:b7:
f3:9b:ec:d4:41:c2:69:56:bf:d0:8f:91:e5:d8:af:
6c:16:31:71:76:b2:24:a3:b8:9d:ac:37:36:e9:9a:
fa:cc:27:75:85:85:c6:ff:f5:70:fb:c1:5b:a0:9b:
ab:5a:b2:bc:69:52:1f:f5:47:57:51:dc:01:87:80:
86:56:7d:89:3c:7e:d5:21:d3:3b:37:36:1d:9f:15:
48:be:91:21:3d:ca:4c:54:ce:c1:8e:39:bd:03:80:
fd:64:06:09:89:89:7e:7e:2a:d9:56:b1:d5:67:92:
91:46:6b:05:af:39:c2:05:2b:dd:60:93:d0:60:31:
db:1d:97:e9:ec:b7:98:b5:9c:b9:e1:fa:00:8a:cf:
17:77:fa:f7:2f:7a:65:3e:9f:4b:03:1b:d8:5e:68:
d0:fc:5e:97:f8:c4:70:5b:d1:18:ae:c2:f0:67:a2:
f7:70:43:d0:36:f9:65:90:56:81:89:25:c7:de:cf:
b9:de:35:8b:4b:9a:0c:b5:19:ab:99:29:39:d1:33:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1D:17:D4:37:AD:7B:9A:75:07:58:85:46:77:7F:05:22:C0:A2:F1
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7b:4b:03:d3:de:89:4c:21:fe:8e:7e:26:5e:3a:f4:5e:4e:
0a:68:56:e4:a8:f0:4c:f7:a6:ff:ba:20:20:6e:95:1a:b0:fa:
c9:fb:6a:40:99:66:7f:83:bd:90:a4:97:b1:7f:0f:dd:f3:ee:
27:3e:88:14:04:21:d7:79:ee:b7:5f:95:92:4f:95:f0:85:88:
5b:04:8e:07:25:8c:ff:af:ad:8b:d8:15:46:70:fa:8f:12:f4:
f6:96:38:2c:0f:dc:6b:24:6c:b3:47:a1:e7:0b:a1:af:65:1c:
17:f7:ba:70:6c:62:97:b0:30:6c:0b:61:49:00:fb:04:b0:03:
49:75:8e:1e:a5:50:dd:5e:25:fe:da:d7:9b:4c:30:ae:c6:04:
ec:41:1d:be:84:c6:f2:73:65:4a:60:6b:0a:60:1b:9d:1f:26:
99:47:7f:2a:9d:c7:a3:c3:5e:c5:f7:90:10:e3:d4:6e:e9:ad:
2a:bc:5f:9b:e5:69:ad:0e:c7:d2:be:c9:ec:f8:da:13:5c:14:
e3:8d:78:e1:03:0a:09:fc:02:41:c8:64:ac:19:32:02:9a:05:
4b:82:bc:ae:ad:41:28:26:66:c9:ce:30:9a:cb:02:22:f6:04:
f0:fd:2a:ad:eb:94:6c:f3:fc:33:08:b1:66:a7:bd:aa:20:b1:
ef:59:de:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNBu1ktUQRZ/p3gSlJS7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzc4ZWVlZjdhY2I0NTFmYzM3NTc1ZmViOTExNGRmY2Nj
MWNkZmIwHhcNMjYwMzAxMjEwMDQ0WhcNMjYwMzAyMjEwMDQ0WjAzMTEwLwYDVQQD
Eyg3NDFkMTdkNDM3YWQ3YjlhNzUwNzU4ODU0Njc3N2YwNTIyYzBhMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ5nbCR0ZMZ1EtAfd3VDnA629RtM
/1Vg9N54n3abTJRgcbKpcBlM/hJ9F/v+rz94Ocf/3jdwkVLM77fzm+zUQcJpVr/Q
j5Hl2K9sFjFxdrIko7idrDc26Zr6zCd1hYXG//Vw+8FboJurWrK8aVIf9UdXUdwB
h4CGVn2JPH7VIdM7NzYdnxVIvpEhPcpMVM7Bjjm9A4D9ZAYJiYl+firZVrHVZ5KR
RmsFrznCBSvdYJPQYDHbHZfp7LeYtZy54foAis8Xd/r3L3plPp9LAxvYXmjQ/F6X
+MRwW9EYrsLwZ6L3cEPQNvllkFaBiSXH3s+53jWLS5oMtRmrmSk50TORwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQdF9Q3rXuadQdYhUZ3fwUiwKLxMB8GA1UdIwQY
MBaAFDLHju73rLRR/DdXX+uRFN/Mwc37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYt
MmYxYzhlNDA4YjY0LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYtMmYxYzhlNDA4YjY0
LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXtLA9Pe
iUwh/o5+Jl469F5OCmhW5KjwTPem/7ogIG6VGrD6yftqQJlmf4O9kKSXsX8P3fPu
Jz6IFAQh13nut1+Vkk+V8IWIWwSOByWM/6+ti9gVRnD6jxL09pY4LA/cayRss0eh
5wuhr2UcF/e6cGxil7AwbAthSQD7BLADSXWOHqVQ3V4l/trXm0wwrsYE7EEdvoTG
8nNlSmBrCmAbnR8mmUd/Kp3Ho8NexfeQEOPUbumtKrxfm+VprQ7H0r7J7PjaE1wU
44144QMKCfwCQchkrBkyApoFS4K8rq1BKCZmyc4wmssCIvYE8P0qreuUbPP8Mwix
Zqe9qiCx71nemw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:59 2026 by rpki-client