Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
File: mnF-0dxIgETl4qsAdUM1WM_ejIU.mft (raw, json)
Hash identifier: EUeRvToSauROCkHaaGKQdzlSd07dmXOm1W1r2iFePnk=
Subject key identifier: 83:77:87:D0:74:07:2C:F4:27:2F:B4:16:CE:D8:98:59:C9:3E:0A:FE
Authority key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
Certificate issuer: /CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Certificate serial: 019D99D08816E8B0A07E9DE5A84FC7DFFB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
Manifest number: 07AF
Signing time: Fri 17 Apr 2026 05:01:13 +0000
Manifest this update: Fri 17 Apr 2026 05:01:13 +0000
Manifest next update: Sat 18 Apr 2026 05:01:13 +0000
Files and hashes: 1: Jpv9SoI3kGDyqv0pBDJ7LN0fBHk.roa (hash: 9hKDjqkV+zjeJgPKdV8lkrKW71TW0AgzmRdy+RD5KHQ=)
2: cBfzvfjBZ9QzsbzNAqBanT3PAEQ.roa (hash: 9GQHIoCRbaLBWwe64oMJBck16pra3GUNikVKVTlABGQ=)
3: mnF-0dxIgETl4qsAdUM1WM_ejIU.crl (hash: 8CFX9QQ7trufBB7zx830CHDxfaMsaIgyTw1NjoYrcFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:88:16:e8:b0:a0:7e:9d:e5:a8:4f:c7:df:fb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Validity
Not Before: Apr 17 05:01:13 2026 GMT
Not After : Apr 18 05:01:13 2026 GMT
Subject: CN=837787d074072cf4272fb416ced89859c93e0afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:9a:9c:34:8b:67:22:aa:b4:19:cc:7b:e6:
e0:ac:1b:88:fd:a8:68:ce:42:d0:66:bf:38:e9:03:
d7:8b:81:fd:df:87:f7:04:b8:81:11:c5:11:1b:86:
bd:64:03:6f:82:9e:9c:e4:d3:8e:13:65:93:04:6f:
6d:56:57:e3:b7:70:75:4e:99:b0:67:03:aa:cc:e4:
4e:9f:94:39:84:71:5b:8d:ac:52:65:5c:4b:9f:36:
f8:a8:a6:18:ba:d4:ac:b9:da:fe:3c:80:bb:3c:22:
73:64:01:93:ac:81:90:ac:ec:65:8c:ae:a3:f4:69:
c0:cc:db:26:4c:7e:df:1a:31:eb:08:0a:6f:44:f2:
13:68:40:fb:e2:71:50:3b:8c:51:d4:27:51:37:1f:
c7:b5:37:71:9d:36:da:96:c4:19:a1:2b:ce:4b:fd:
46:50:2f:dd:eb:3c:eb:25:0f:63:ea:fe:fd:08:5a:
a8:3d:35:30:e0:55:0c:03:de:3c:85:e0:a5:2b:60:
cf:2a:11:67:e9:77:10:1b:70:f2:83:a7:68:bc:b4:
fd:74:fa:c3:80:79:d4:ff:51:ee:c0:29:99:4f:4e:
98:e6:27:03:a2:f2:93:4d:57:db:df:0a:dc:21:2b:
83:ec:76:b3:70:b0:73:a4:65:ce:2b:d5:30:1b:f1:
73:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:77:87:D0:74:07:2C:F4:27:2F:B4:16:CE:D8:98:59:C9:3E:0A:FE
X509v3 Authority Key Identifier:
keyid:9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:83:91:34:d5:31:85:ef:c4:fc:cb:db:18:c9:5b:9f:f4:04:
d9:42:f7:71:ff:6d:bc:9a:c6:ac:42:ce:49:55:18:52:7a:dd:
a2:d4:48:fa:94:6e:c0:9b:15:0b:e7:ab:c8:e8:0e:18:2d:68:
b3:ac:e5:e9:66:be:f0:3c:19:46:16:c8:5a:33:de:d6:04:1f:
51:28:17:90:f9:e6:12:61:f2:67:bb:7e:d7:e2:3f:0d:65:f9:
ad:56:3f:2c:cc:a5:3b:30:4b:e4:31:c8:a0:fc:d4:93:3f:95:
94:30:f5:8b:ce:7c:cb:44:e1:9f:36:d3:ae:21:af:e2:82:2e:
41:f8:91:aa:02:49:25:11:a1:6f:ca:d1:2f:ca:83:92:7f:bf:
77:bb:64:a7:88:4f:2b:0a:e0:ab:01:33:4b:c3:61:4d:06:55:
78:da:e5:ef:ba:84:26:32:ac:c0:2e:02:b3:ab:58:e0:ae:56:
24:60:c9:f4:2b:39:1f:84:c3:45:ec:5d:9f:50:fc:f2:e2:1e:
12:fb:85:c2:cc:3f:83:20:84:d0:ab:4c:54:3d:1f:5e:6b:78:
b5:46:0a:23:5f:85:95:54:33:97:0b:d2:d8:42:42:ae:c2:cb:
88:dc:ce:8a:b1:a6:cd:3c:d0:87:c6:ce:d4:a0:48:6a:2f:4c:
b0:79:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:43 2026 by rpki-client