Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: jE6Ffoki/yb3+zyYJotu/pzF4LzTYikPZBbgO2U09CA=
Subject key identifier: 27:09:DA:EF:36:AC:FB:E3:97:F0:19:0A:87:27:3E:37:CD:85:49:77
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 019D992B3556BD6CC7A0E39F35601D749780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 0C8B
Signing time: Fri 17 Apr 2026 02:00:38 +0000
Manifest this update: Fri 17 Apr 2026 02:00:38 +0000
Manifest next update: Sat 18 Apr 2026 02:00:38 +0000
Files and hashes: 1: KTlXY_GhxQ5VW4pMYqOYscTdOZM.roa (hash: je5ss0aWHni0ph4zaP7Hn858wJvG8bGTjlHPySsmlgw=)
2: iaDbFzCGuAlwzl6bRW55-YwI7tA.roa (hash: 6F9zTT+j/4thBUAM1E97eqvGP/DYTAVmPQOGCVMj6V0=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: VlWD8SqQDFK18TCCP/UH96DgjeY80tNXtxBEr96QUdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:35:56:bd:6c:c7:a0:e3:9f:35:60:1d:74:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Apr 17 02:00:38 2026 GMT
Not After : Apr 18 02:00:38 2026 GMT
Subject: CN=2709daef36acfbe397f0190a87273e37cd854977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:42:2b:09:89:9b:4f:54:ed:52:4d:81:f0:
14:36:00:1b:90:38:3a:6d:6c:f1:e4:0a:c5:a5:30:
cd:c8:8f:41:cf:09:1c:33:ba:9d:70:45:99:1e:79:
f1:19:ea:2d:25:80:ee:ec:5e:d9:8f:52:8a:c2:c3:
b2:eb:1d:73:1f:6d:b5:a5:01:fa:b4:a1:04:fd:08:
3d:a3:38:15:21:0d:29:d2:a2:f1:0e:fe:ac:4f:82:
23:e3:4b:3d:29:32:43:45:45:b2:09:21:eb:7c:fb:
42:f6:f7:81:04:b2:c9:22:01:46:0d:33:7f:22:8e:
2c:59:ec:50:54:02:be:8e:b2:c6:ed:27:41:59:c6:
02:b0:5d:10:4c:f6:12:ec:06:64:53:94:de:97:e1:
45:09:5d:52:73:3e:a8:c5:b2:d5:78:48:8b:71:a5:
e2:30:80:e4:81:3a:f3:a4:2f:2e:7d:e7:0a:fe:97:
ba:32:13:75:af:5c:2e:95:f5:9e:ca:7f:f2:90:10:
96:29:c1:a2:28:7c:a8:20:96:bd:8e:82:0e:43:49:
92:22:ed:f0:59:cb:e7:8d:7e:a4:f4:9f:cf:e2:c0:
9b:ce:19:5b:7b:0c:04:eb:51:b5:57:e0:8a:7d:76:
5f:58:dc:7e:23:ef:93:a9:9a:9a:4d:9d:38:10:d5:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:09:DA:EF:36:AC:FB:E3:97:F0:19:0A:87:27:3E:37:CD:85:49:77
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cf:a9:65:80:fd:a0:da:d5:21:ed:a3:e5:27:3a:57:44:bc:
53:05:88:75:93:d5:21:ef:89:e2:00:0d:16:41:08:fb:9d:eb:
eb:6c:0d:5d:45:ff:2c:33:2e:78:c4:d6:aa:ec:06:61:46:9d:
3c:c7:5c:3e:49:e0:d2:83:cb:6c:87:82:66:e9:6a:3a:fa:8e:
a4:60:10:6c:ee:06:18:93:1c:5b:27:2a:8e:43:98:b5:b8:4e:
02:73:0c:53:4f:52:e9:48:e4:27:f9:a3:8b:4a:22:5e:19:0f:
f6:34:13:a9:b2:88:94:ce:95:51:c0:b2:d3:81:e9:ba:6e:87:
d9:d8:12:40:87:0c:65:a3:0d:20:9b:2f:a1:bf:d1:c5:20:72:
c9:3d:c3:5a:30:04:dd:7b:db:e3:97:e7:2f:c7:49:49:3d:f2:
63:6b:2e:79:9f:0b:8f:59:32:b6:c5:84:2f:5b:80:84:a3:d7:
d3:f5:b8:f4:4a:c4:09:2f:b5:cc:d8:77:41:6d:f8:a0:de:86:
3c:d7:1b:8a:74:28:6e:7d:3b:28:40:91:3f:f3:21:15:0a:e3:
0a:59:ab:13:2e:75:cb:2c:a3:ea:75:c4:e4:16:6e:c1:f9:85:
a7:0d:a3:dc:98:f0:81:8b:78:ff:1c:26:e0:5c:aa:ab:fc:82:
5d:f2:15:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKzVWvWzHoOOfNWAddJeAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YzljMzE4OWJlYzEzNzkzMTFiZDEzNTNmYTk3NDlhNjhk
ZDk5MmQwHhcNMjYwNDE3MDIwMDM4WhcNMjYwNDE4MDIwMDM4WjAzMTEwLwYDVQQD
EygyNzA5ZGFlZjM2YWNmYmUzOTdmMDE5MGE4NzI3M2UzN2NkODU0OTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvctCKwmJm09U7VJNgfAUNgAbkDg6
bWzx5ArFpTDNyI9BzwkcM7qdcEWZHnnxGeotJYDu7F7Zj1KKwsOy6x1zH221pQH6
tKEE/Qg9ozgVIQ0p0qLxDv6sT4Ij40s9KTJDRUWyCSHrfPtC9veBBLLJIgFGDTN/
Io4sWexQVAK+jrLG7SdBWcYCsF0QTPYS7AZkU5Tel+FFCV1Scz6oxbLVeEiLcaXi
MIDkgTrzpC8ufecK/pe6MhN1r1wulfWeyn/ykBCWKcGiKHyoIJa9joIOQ0mSIu3w
WcvnjX6k9J/P4sCbzhlbewwE61G1V+CKfXZfWNx+I++TqZqaTZ04ENWoMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcJ2u82rPvjl/AZCocnPjfNhUl3MB8GA1UdIwQY
MBaAFJjJwxib7BN5MRvRNT+pdJpo3ZktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEt
OWM4MTZhNDA0OTBlLzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEtOWM4MTZhNDA0OTBl
LzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8+pZYD9
oNrVIe2j5Sc6V0S8UwWIdZPVIe+J4gANFkEI+53r62wNXUX/LDMueMTWquwGYUad
PMdcPkng0oPLbIeCZulqOvqOpGAQbO4GGJMcWycqjkOYtbhOAnMMU09S6UjkJ/mj
i0oiXhkP9jQTqbKIlM6VUcCy04Hpum6H2dgSQIcMZaMNIJsvob/RxSByyT3DWjAE
3Xvb45fnL8dJST3yY2sueZ8Lj1kytsWEL1uAhKPX0/W49ErECS+1zNh3QW34oN6G
PNcbinQobn07KECRP/MhFQrjClmrEy51yyyj6nXE5BZuwfmFpw2j3JjwgYt4/xwm
4Fyqq/yCXfIV1A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:03 2026 by rpki-client