Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: x72PUdVZGn8udaUx+D4PzyysuczoVZCt8cgXggvyWEU=
Subject key identifier: 75:67:A2:6D:AE:55:F6:A3:B5:5B:59:A4:91:2E:B2:D4:74:6C:DC:E2
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 019ED3F49718923750EF019CDE2CDD1C7546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 0D2E
Signing time: Wed 17 Jun 2026 05:01:22 +0000
Manifest this update: Wed 17 Jun 2026 05:01:22 +0000
Manifest next update: Thu 18 Jun 2026 05:01:22 +0000
Files and hashes: 1: KTlXY_GhxQ5VW4pMYqOYscTdOZM.roa (hash: je5ss0aWHni0ph4zaP7Hn858wJvG8bGTjlHPySsmlgw=)
2: iaDbFzCGuAlwzl6bRW55-YwI7tA.roa (hash: 6F9zTT+j/4thBUAM1E97eqvGP/DYTAVmPQOGCVMj6V0=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: wv+qC5Xcc4kzXiyImRaosc2UymIgdLvmhDg2ahvaODk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f4:97:18:92:37:50:ef:01:9c:de:2c:dd:1c:75:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Jun 17 05:01:22 2026 GMT
Not After : Jun 18 05:01:22 2026 GMT
Subject: CN=7567a26dae55f6a3b55b59a4912eb2d4746cdce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:0e:39:44:8f:92:bf:90:2f:bb:3a:44:07:
01:3b:cd:c9:7d:90:25:31:24:46:93:2d:d8:a4:78:
ce:b5:20:c2:f7:9f:ca:ee:79:4a:dc:16:e1:30:69:
39:77:1d:b8:7a:d4:b5:b5:5f:79:73:44:63:12:79:
96:95:82:56:09:ac:49:3b:c1:59:12:3a:05:a2:3a:
d1:5e:b8:5a:f6:33:96:01:a3:1c:b7:59:85:7c:d1:
b1:7a:77:07:0d:33:dd:3c:ea:3a:b8:f0:f9:ef:e0:
e5:d6:9c:52:31:00:5c:3e:52:d4:ba:1f:c1:1f:e4:
d9:d8:6d:47:a6:fc:1b:b2:a5:66:62:78:f3:2f:d5:
33:1a:38:71:9c:92:b4:25:2e:2c:9c:79:57:1b:b2:
b2:fc:ae:d5:13:ea:c4:d2:70:67:80:6b:0c:64:f5:
f8:cc:cb:b0:d0:30:9d:d3:08:13:71:b2:66:eb:f6:
9f:17:e2:81:28:bc:a2:b2:dc:e6:f5:cc:9d:fc:42:
5d:91:47:68:b3:29:6f:1e:69:fe:a8:54:27:11:0d:
1d:f0:b0:c7:79:7f:5a:6d:bf:f4:53:54:a9:db:13:
dd:26:0c:b6:58:a0:0c:6d:a4:21:65:bb:cf:fd:f9:
8a:d6:ad:3b:c1:57:e0:3a:19:bd:02:38:05:51:3e:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:67:A2:6D:AE:55:F6:A3:B5:5B:59:A4:91:2E:B2:D4:74:6C:DC:E2
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5d:ed:16:cd:97:99:9c:cd:53:9f:86:98:55:2b:5c:17:fc:
b3:d3:c2:3a:38:52:ad:17:ba:05:c5:e6:21:4c:a6:d8:9c:48:
6e:12:60:93:d1:e0:cb:6f:45:c2:6c:65:e7:bf:6d:d9:7c:7d:
fb:c1:d0:7a:aa:a3:b2:e9:42:28:5b:d0:0c:5a:c1:84:32:9c:
a9:50:ef:9d:06:53:d2:e0:3f:57:95:2b:15:99:c1:a2:f5:b8:
95:fa:b0:a5:02:01:21:13:61:10:a1:aa:22:3e:44:dd:0d:cd:
42:6f:03:09:2b:af:98:01:68:70:2d:55:18:0a:e5:8b:07:1b:
91:59:07:67:f6:44:e8:f2:f9:a5:b6:c8:11:58:73:da:99:3d:
a7:09:e5:6a:42:28:69:0d:3e:09:9b:7f:fa:6e:75:10:b8:7b:
4f:e4:46:cb:3f:8e:44:45:4e:6a:bc:93:d1:92:06:00:d1:d9:
51:4b:58:49:43:5b:a2:96:e1:b3:74:15:c9:49:ad:92:5c:cb:
36:74:27:42:be:8d:35:11:cd:cc:a7:ba:8e:b1:db:77:12:71:
c3:9e:cc:8e:70:b9:f5:97:5f:15:84:15:bb:4f:e0:f7:b1:70:
11:04:98:5b:37:32:d1:10:fb:f9:22:b2:8e:b5:66:41:4d:29:
87:9c:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:37:48 2026 by rpki-client