Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.mft
File: mNzlp5yzGxSLLmNpBacEIvtlxmA.mft (raw, json)
Hash identifier: WJ1vV14wjsQFytTwJSk54f/pR/WXELPeHC91WW4grYU=
Subject key identifier: CE:09:E2:69:18:64:71:6C:FA:F9:82:C0:D5:48:AF:57:87:DA:B6:15
Authority key identifier: 98:DC:E5:A7:9C:B3:1B:14:8B:2E:63:69:05:A7:04:22:FB:65:C6:60
Certificate issuer: /CN=98dce5a79cb31b148b2e636905a70422fb65c660
Certificate serial: 019D9BF57C006071CFCAF962EADFF89C78B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNzlp5yzGxSLLmNpBacEIvtlxmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.mft
Manifest number: 29
Signing time: Fri 17 Apr 2026 15:00:49 +0000
Manifest this update: Fri 17 Apr 2026 15:00:49 +0000
Manifest next update: Sat 18 Apr 2026 15:00:49 +0000
Files and hashes: 1: HXp2yl8CcctEYFf-SbEVW8usejY.roa (hash: ICCLYm8ogyONUQBR09bvk3yeGyG9hrCQ2LhYQ/hIOY8=)
2: hYHxC4B0dRHOWGyjfwEVbtTIcWs.roa (hash: 1Ci3i823J9C8tKoo39S7ESNqkRjK60YmjMYLCng8d1g=)
3: iFoLL08Y0RSZXmxN-OjujZRiXWo.roa (hash: OvbS7GRntI/C8IuP2kjijRom3YriGFk8ZqDEFtaH/hE=)
4: mNzlp5yzGxSLLmNpBacEIvtlxmA.crl (hash: l9doms2HHG9Zk899fA/FmA4ncC/Txa4v5j0h9a67hrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNzlp5yzGxSLLmNpBacEIvtlxmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:7c:00:60:71:cf:ca:f9:62:ea:df:f8:9c:78:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98dce5a79cb31b148b2e636905a70422fb65c660
Validity
Not Before: Apr 17 15:00:49 2026 GMT
Not After : Apr 18 15:00:49 2026 GMT
Subject: CN=ce09e2691864716cfaf982c0d548af5787dab615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:ac:76:f1:58:3f:dd:c8:c7:55:be:85:bf:
56:4d:e9:4d:ac:b5:70:f2:ca:eb:f7:01:b6:21:f6:
6b:7f:30:63:3f:38:68:a5:a7:81:90:6b:a7:85:e2:
47:cb:23:cd:e9:f9:41:97:8b:8c:a0:dd:c8:8b:76:
ee:a9:16:d1:51:0d:0e:ea:3f:6a:1e:b5:39:f5:b2:
44:21:56:a4:11:36:c4:41:4e:36:1a:2d:f4:d5:f9:
fe:03:4f:4c:67:cb:05:0c:a3:32:8a:c3:f8:2b:75:
50:d0:72:18:a1:86:ca:59:f4:90:fb:c2:38:e9:49:
9e:67:d4:dc:fa:db:86:ea:f7:e7:a0:01:67:6f:3d:
f4:af:e9:7a:c8:4e:a2:0f:0e:b7:57:42:b3:58:70:
12:1a:5f:14:48:41:60:cc:6f:41:13:a8:7e:a1:f1:
e5:6c:a5:38:09:da:93:c8:f4:12:f9:17:38:65:9b:
fb:75:dd:82:7d:ae:3c:cb:9e:de:e9:5e:c9:a9:35:
89:71:43:5e:00:25:3f:60:f7:0b:a6:f1:e2:8e:6a:
31:24:25:aa:c3:6b:af:7d:ff:85:ec:98:05:4e:c6:
8a:dd:d6:cb:cb:99:1e:d8:af:d5:06:d4:60:e2:ec:
fa:ee:4d:74:a1:49:ff:d2:bf:b9:b8:9a:36:37:9f:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:09:E2:69:18:64:71:6C:FA:F9:82:C0:D5:48:AF:57:87:DA:B6:15
X509v3 Authority Key Identifier:
keyid:98:DC:E5:A7:9C:B3:1B:14:8B:2E:63:69:05:A7:04:22:FB:65:C6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNzlp5yzGxSLLmNpBacEIvtlxmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/13b451-9e86-4bf5-b651-296b59f6d2b5/1/mNzlp5yzGxSLLmNpBacEIvtlxmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4b:7d:d0:a5:32:ff:2e:8b:14:f1:33:26:7d:b8:3d:31:b5:
6f:56:44:1a:69:43:f4:c3:6c:1f:dc:25:87:da:e6:22:35:d9:
f7:4d:93:8b:c9:fc:ea:51:22:89:44:88:4d:ce:d4:74:ae:c5:
46:50:af:bb:b7:b3:75:db:75:41:d4:db:43:1f:a6:2d:9d:3d:
00:44:89:44:9b:54:b7:51:88:35:34:ee:64:da:28:91:29:e7:
b4:90:74:fb:c6:0f:1c:8a:30:a6:6c:4f:07:a5:c2:50:49:0d:
80:dd:7f:ee:bb:66:f9:af:6f:63:00:84:6a:95:ab:d5:fb:c4:
42:d4:89:68:99:38:bf:f2:74:31:c3:7b:35:00:a8:4c:da:bf:
05:e6:51:2c:23:c3:f5:b8:1c:8f:44:13:8c:7f:fd:2e:71:22:
f4:1c:a6:92:94:84:74:24:df:d0:37:85:a3:a5:59:f3:4b:d7:
7d:56:98:fb:c7:7a:2b:49:64:1e:68:1c:a1:a1:b8:6e:9e:f2:
b9:8f:dd:7e:7b:eb:9e:b2:08:50:88:da:f7:64:cf:60:66:55:
2d:5a:a0:57:1b:2e:84:3f:1c:51:b6:a8:0e:d4:4f:c0:b6:97:
a4:a8:53:19:50:8c:d1:0c:78:91:6c:cc:ef:de:38:89:ae:3e:
7c:69:7a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:31 2026 by rpki-client