Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
File: mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json)
Hash identifier: 2aNCRNe9KsKa6ZZtYel5TLJGEKl6BlIDjvIAkudPDjs=
Subject key identifier: 08:36:4E:B1:C8:89:FB:BB:BC:3D:D7:A9:CD:32:B4:FE:26:6B:D7:64
Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
Certificate issuer: /CN=99252ff7f4dcf62234d22f86a1135b344923daab
Certificate serial: 019CAB33F43784EE0B0ACE5CDC2866556D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
Manifest number: 0AFD
Signing time: Sun 01 Mar 2026 21:00:34 +0000
Manifest this update: Sun 01 Mar 2026 21:00:34 +0000
Manifest next update: Mon 02 Mar 2026 21:00:34 +0000
Files and hashes: 1: RQkXmpWajYBXor9So-wL840KNkQ.roa (hash: X3j2x3fF0ht1rXuyx9TYCfG+9AORrgkuoTZ6MublhHE=)
2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: iXSqzZ9q0eG0GqizfTTbJx6iSjByOqgZRLkZu3EX2C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f4:37:84:ee:0b:0a:ce:5c:dc:28:66:55:6d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab
Validity
Not Before: Mar 1 21:00:34 2026 GMT
Not After : Mar 2 21:00:34 2026 GMT
Subject: CN=08364eb1c889fbbbbc3dd7a9cd32b4fe266bd764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:8b:45:18:ec:1f:09:57:1f:61:89:4f:58:
34:0c:a7:4a:14:ff:26:c2:97:1b:8f:7d:25:15:73:
15:cb:da:80:5d:bc:25:ce:0e:94:1c:fb:1e:b8:95:
40:6b:4c:4a:78:1b:4d:10:2e:9d:e4:20:cf:54:42:
2e:c1:d6:c5:a4:35:0f:b9:8e:90:f8:cc:7a:74:f2:
52:42:88:58:a4:ec:94:5a:1f:3b:01:36:a7:49:76:
88:23:a4:35:db:49:07:17:c8:14:ec:9f:87:54:63:
54:e7:c7:0d:25:89:cf:47:df:fb:6b:85:3b:b9:8f:
22:6b:23:77:65:57:fc:34:fa:1e:a9:cd:a8:9f:7e:
33:e4:3f:38:dc:f7:6b:b5:bc:9f:de:4c:ef:8c:34:
d7:d3:ec:3e:f1:12:13:f9:fa:f0:0d:df:9f:de:88:
3a:f8:a5:0d:16:a3:3b:21:50:38:1e:78:a9:d3:2a:
c2:71:4e:0b:9d:18:60:cb:25:57:7e:05:cc:1f:d6:
92:c4:3b:1a:ed:af:c5:7d:cb:9f:ee:09:ad:3d:6b:
bc:e7:24:48:2b:1a:4f:85:69:9f:ab:c9:43:53:2d:
bb:27:d1:76:15:cd:02:39:aa:8f:a4:e3:b9:30:b7:
0a:5b:85:45:57:d4:85:3e:fa:a0:45:13:43:b5:7e:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:36:4E:B1:C8:89:FB:BB:BC:3D:D7:A9:CD:32:B4:FE:26:6B:D7:64
X509v3 Authority Key Identifier:
keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0a:ae:ca:64:4f:85:f9:53:b7:db:a7:21:82:b6:cb:0f:74:
da:32:c3:99:91:b5:df:f6:c1:0e:3b:9e:60:5c:f7:2d:3d:71:
ef:8b:46:4f:07:b6:c9:ed:33:21:86:f0:7c:56:56:5f:ae:b0:
3e:91:3e:51:23:5d:c9:14:a6:f0:17:1f:c8:d2:22:e7:83:62:
94:74:74:2c:43:50:d4:12:9d:8a:65:1b:22:2a:4c:d3:71:8c:
f1:ec:ef:dd:d0:2b:70:d1:91:66:b2:d8:ea:c3:93:f8:0a:f8:
02:cd:a8:63:92:7d:cd:96:4f:d0:fd:8c:58:bf:f3:f9:4b:8f:
93:64:5c:67:bf:d7:a8:c9:90:1f:94:06:60:01:00:9a:18:49:
f7:05:54:50:b6:54:4b:ff:2d:97:d4:e2:4f:75:8e:03:df:8b:
b0:32:c8:51:d9:62:b5:bf:87:35:4e:0a:76:12:8c:31:7d:50:
fc:ba:46:50:ec:e2:e7:3d:a0:04:c0:b1:90:90:c0:93:3d:16:
71:82:36:3e:f6:8f:0f:66:0f:bf:3c:e9:1c:c5:3b:3a:76:fa:
07:4c:0a:09:5a:60:83:27:37:3e:ce:32:cf:59:41:a2:0a:0d:
08:93:90:6b:96:cd:56:ee:a2:71:25:5e:26:73:61:01:13:53:
55:82:54:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:13 2026 by rpki-client