
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
File: mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json)
Hash identifier: UN/Ki8Ql+yFE11IlEVLSnyCE9VTjh6DzuVLbjPxCPt0=
Subject key identifier: 32:D6:43:6F:A5:E1:FE:6D:41:40:EC:DA:27:E7:90:3D:10:96:74:07
Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
Certificate issuer: /CN=99252ff7f4dcf62234d22f86a1135b344923daab
Certificate serial: 019D9AAB9E29F1B7C3358BECDBAA5857C230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
Manifest number: 0B79
Signing time: Fri 17 Apr 2026 09:00:31 +0000
Manifest this update: Fri 17 Apr 2026 09:00:31 +0000
Manifest next update: Sat 18 Apr 2026 09:00:31 +0000
Files and hashes: 1: RQkXmpWajYBXor9So-wL840KNkQ.roa (hash: X3j2x3fF0ht1rXuyx9TYCfG+9AORrgkuoTZ6MublhHE=)
2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: crztXXxwl5XlRzecOlJKTuulImRWTJV50o7Ah75jl3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:9e:29:f1:b7:c3:35:8b:ec:db:aa:58:57:c2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab
Validity
Not Before: Apr 17 09:00:31 2026 GMT
Not After : Apr 18 09:00:31 2026 GMT
Subject: CN=32d6436fa5e1fe6d4140ecda27e7903d10967407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:90:37:f8:14:36:71:91:71:74:15:68:5f:
cb:bf:a6:df:56:5c:52:31:a1:76:41:fa:0d:b6:b1:
71:5e:8d:ac:1a:bf:d2:b1:7c:a8:e5:c3:80:5d:6f:
4d:5b:7b:90:a7:58:89:a0:ac:cd:f8:2f:cd:4f:82:
29:5d:12:ab:3d:58:e6:3b:51:d3:ff:1c:48:77:48:
b0:49:25:d7:f8:aa:ce:19:cb:8c:cc:a1:4b:7b:1d:
be:e2:37:6a:8e:63:ec:1f:25:9a:ba:f4:34:db:c2:
53:c3:0d:04:14:1a:4e:49:de:1a:54:2f:63:34:aa:
f4:7f:97:39:6b:87:60:c5:f5:f0:48:31:76:b8:d2:
67:6e:0d:da:a3:4c:64:4e:03:b7:76:bf:5c:69:d0:
e9:13:a5:d7:0b:db:a8:6e:5d:b3:ea:9b:39:8f:73:
3e:12:d0:06:9f:aa:e6:29:2d:1a:f6:eb:5b:6c:83:
d9:98:f6:d3:32:af:3c:f7:59:7c:bd:49:ce:6c:0b:
9e:a3:bc:47:c3:f5:8e:62:4f:ca:52:94:f0:c9:9a:
f0:ec:dd:ac:66:d1:8a:53:15:c9:52:90:b8:a7:fe:
19:89:1f:96:9e:18:7d:85:2a:7d:1c:a5:9c:8a:6f:
ec:20:54:f3:85:03:da:b1:8c:03:08:81:43:18:a1:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D6:43:6F:A5:E1:FE:6D:41:40:EC:DA:27:E7:90:3D:10:96:74:07
X509v3 Authority Key Identifier:
keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b4:75:68:ee:e6:be:76:64:5c:cd:10:95:50:80:75:7c:2f:
cb:05:8c:2d:14:82:84:20:8e:ea:27:a4:51:a8:18:71:61:22:
6c:8a:f7:fe:4a:f8:a3:9e:c8:c2:49:a5:ba:d2:d7:c6:7d:16:
0e:dc:9c:56:c5:b2:e3:b7:7c:06:ab:25:74:fa:09:b1:20:20:
ff:d1:e4:57:db:ad:0c:c3:53:68:a9:13:5c:22:c8:6d:db:53:
09:e9:74:30:39:49:da:6d:e3:b9:70:32:74:34:b1:e4:3b:0e:
7d:97:38:1f:ba:7a:b2:3e:c2:89:6b:42:49:b9:19:f5:1c:c9:
5c:51:f3:d1:df:bd:d8:9c:87:1f:c2:3b:ed:e3:15:8b:76:4d:
6d:fe:7d:a9:c5:da:3d:04:f5:75:05:fb:76:22:c2:98:d5:23:
f6:fa:5a:dd:56:cf:6a:73:a1:da:5d:58:10:da:b8:bf:66:d9:
8c:34:7f:95:dd:ed:55:29:97:f2:1b:a1:9e:16:bf:a3:b7:f4:
9d:3e:93:d4:69:dd:18:7a:07:54:13:6a:4f:67:ff:b2:dc:25:
cc:8c:aa:48:08:b6:0f:14:42:62:0b:c6:0c:4c:d1:a9:a7:bc:
9c:df:64:34:8c:92:ee:1e:89:7e:67:a4:ba:25:27:e4:ac:d1:
ac:64:75:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq54p8bfDNYvs26pYV8IwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjUyZmY3ZjRkY2Y2MjIzNGQyMmY4NmExMTM1YjM0NDky
M2RhYWIwHhcNMjYwNDE3MDkwMDMxWhcNMjYwNDE4MDkwMDMxWjAzMTEwLwYDVQQD
EygzMmQ2NDM2ZmE1ZTFmZTZkNDE0MGVjZGEyN2U3OTAzZDEwOTY3NDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtiQN/gUNnGRcXQVaF/Lv6bfVlxS
MaF2QfoNtrFxXo2sGr/SsXyo5cOAXW9NW3uQp1iJoKzN+C/NT4IpXRKrPVjmO1HT
/xxId0iwSSXX+KrOGcuMzKFLex2+4jdqjmPsHyWauvQ028JTww0EFBpOSd4aVC9j
NKr0f5c5a4dgxfXwSDF2uNJnbg3ao0xkTgO3dr9cadDpE6XXC9uobl2z6ps5j3M+
EtAGn6rmKS0a9utbbIPZmPbTMq8891l8vUnObAueo7xHw/WOYk/KUpTwyZrw7N2s
ZtGKUxXJUpC4p/4ZiR+Wnhh9hSp9HKWcim/sIFTzhQPasYwDCIFDGKH4awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLWQ2+l4f5tQUDs2ifnkD0QlnQHMB8GA1UdIwQY
MBaAFJklL/f03PYiNNIvhqETWzRJI9qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEt
YWIwNjY0ZTYzZmI2LzEvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEtYWIwNjY0ZTYzZmI2
LzEvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELR1aO7m
vnZkXM0QlVCAdXwvywWMLRSChCCO6iekUagYcWEibIr3/kr4o57IwkmlutLXxn0W
DtycVsWy47d8BqsldPoJsSAg/9HkV9utDMNTaKkTXCLIbdtTCel0MDlJ2m3juXAy
dDSx5DsOfZc4H7p6sj7CiWtCSbkZ9RzJXFHz0d+92JyHH8I77eMVi3ZNbf59qcXa
PQT1dQX7diLCmNUj9vpa3VbPanOh2l1YENq4v2bZjDR/ld3tVSmX8huhnha/o7f0
nT6T1GndGHoHVBNqT2f/stwlzIyqSAi2DxRCYgvGDEzRqae8nN9kNIyS7h6Jfmek
uiUn5KzRrGR1rg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:17:55 2026 by rpki-client