Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: pdkIfqj4olYDi/QmfnbaAu8Kvgc8SZfV9OVTdbM89PU=
Subject key identifier: 4A:5B:32:24:C1:BF:87:06:03:5F:4D:E5:62:94:B7:FE:8B:A2:5B:67
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 019CAF7F3ABEB7F206CC1DF9DA4A61E30523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 0C12
Signing time: Mon 02 Mar 2026 17:01:16 +0000
Manifest this update: Mon 02 Mar 2026 17:01:16 +0000
Manifest next update: Tue 03 Mar 2026 17:01:16 +0000
Files and hashes: 1: KTlXY_GhxQ5VW4pMYqOYscTdOZM.roa (hash: je5ss0aWHni0ph4zaP7Hn858wJvG8bGTjlHPySsmlgw=)
2: iaDbFzCGuAlwzl6bRW55-YwI7tA.roa (hash: 6F9zTT+j/4thBUAM1E97eqvGP/DYTAVmPQOGCVMj6V0=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: eKvffRizUR9zcXIEwDjhWVWlUIxd+BBUnFON/MYrE7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7f:3a:be:b7:f2:06:cc:1d:f9:da:4a:61:e3:05:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Mar 2 17:01:16 2026 GMT
Not After : Mar 3 17:01:16 2026 GMT
Subject: CN=4a5b3224c1bf8706035f4de56294b7fe8ba25b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c9:af:ea:1d:73:50:d1:85:b1:4d:6d:06:bf:
10:3d:5e:22:4c:53:27:07:ea:68:0c:b8:16:25:0a:
cf:34:d9:d8:46:42:68:6d:0d:34:e0:58:00:a8:7c:
b8:71:0f:97:02:41:20:45:ca:e3:bf:93:86:9f:4d:
4d:63:e8:21:9f:3e:d9:22:26:fa:b3:79:ef:7c:e1:
56:2f:a9:b1:fd:62:56:ab:9a:d3:28:73:cb:ec:a0:
a1:a6:a3:9c:fe:1d:ac:12:06:b0:59:15:cc:51:e9:
2e:a2:42:07:28:5c:c0:8e:09:db:c6:9a:e2:7a:0d:
46:d2:a2:f7:58:f7:4f:02:67:c7:b0:27:15:c3:b9:
ef:88:ac:43:8e:fc:c4:ca:d2:00:23:3d:10:90:59:
11:20:50:bc:dc:e2:b9:f4:11:bb:e1:f5:ec:b2:0c:
e2:be:dc:e5:ac:b5:35:0e:a6:71:e2:a7:8c:d9:de:
b6:28:23:5c:07:70:f3:09:12:da:89:8b:fe:c8:e8:
07:09:fc:6e:c9:bf:39:24:35:e1:95:75:23:dc:07:
ec:d3:a1:6f:c6:91:ed:02:af:b2:5a:67:2a:c0:c0:
70:98:bc:c2:f3:e4:ee:61:c3:70:10:99:54:ca:12:
a9:2e:f9:41:11:f2:96:53:ec:21:1d:40:de:2f:c1:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5B:32:24:C1:BF:87:06:03:5F:4D:E5:62:94:B7:FE:8B:A2:5B:67
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1f:d7:59:b4:4b:db:3d:84:2d:0b:60:3f:24:b0:41:86:3e:
3d:a2:a6:3c:00:c6:d4:30:d1:a3:80:a0:db:74:fc:b0:75:bf:
39:b5:14:7b:3e:b5:90:d9:30:ff:8b:e4:a4:27:e5:2e:bb:f8:
cc:43:dc:79:50:72:65:22:4a:ad:6b:81:ed:e5:34:4d:c4:7a:
5d:a8:fa:30:b1:64:6a:d6:a1:93:ec:e3:62:c2:4a:93:b7:ce:
ab:67:90:3d:d4:7e:52:af:1c:7a:ae:dc:dd:05:27:e8:f4:3b:
50:fb:af:56:01:c7:9e:ce:32:5a:c8:6f:98:fa:3b:e3:7b:48:
08:d3:1a:66:39:5a:9c:ba:de:89:7b:5b:55:51:42:e2:5b:6f:
35:32:5e:69:1d:e7:38:b1:62:97:fd:fc:df:e0:4c:22:0c:97:
83:81:ad:3b:fe:77:90:11:42:5d:ac:d1:3f:71:a6:9c:c8:d2:
b7:27:07:0c:ca:59:1c:61:5d:a0:cd:c7:44:38:57:02:5d:3f:
96:e9:7c:2b:a5:aa:d9:cd:cf:59:ef:4c:b3:88:70:60:43:71:
be:be:e9:32:c7:f2:97:da:2b:be:03:c3:37:60:c3:79:7e:51:
2a:d2:34:fe:ba:f9:4d:6c:e9:fc:13:62:50:14:42:61:08:ab:
11:e5:6f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:41 2026 by rpki-client