Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: YNKYfctu7Evv0x699NN1n+SlOheCKx85LIl2Dy9wHyc=
Subject key identifier: E7:A2:EC:49:4E:A7:D2:80:73:65:E5:97:E2:B0:74:D0:45:67:59:C9
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 019D2A3B850AF3F78DB84FCDEDDF5AA6B85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 141C
Signing time: Thu 26 Mar 2026 13:00:36 +0000
Manifest this update: Thu 26 Mar 2026 13:00:36 +0000
Manifest next update: Fri 27 Mar 2026 13:00:36 +0000
Files and hashes: 1: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: 8XtDWKw6eSJH/DXxj4BgCl1XJ9FqbrbF/atj8pKRw+0=)
2: ru9Lv6OqB7V-7WaM7CY9CuYMU9U.roa (hash: pn31EwFoa+kLu5aisTeRHil2IKacpnZCCu4FI8vc0Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:85:0a:f3:f7:8d:b8:4f:cd:ed:df:5a:a6:b8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Mar 26 13:00:36 2026 GMT
Not After : Mar 27 13:00:36 2026 GMT
Subject: CN=e7a2ec494ea7d2807365e597e2b074d0456759c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:3c:23:fc:c4:09:20:0e:8f:42:6b:be:76:
c9:fc:46:56:12:7a:21:e5:84:39:99:ad:c0:52:5f:
49:e1:9a:f7:3a:f9:c7:f4:41:cd:c6:f6:98:b1:b1:
03:10:e6:a5:86:fa:a6:b2:71:60:c2:eb:e0:6e:f8:
16:af:78:7d:6d:39:22:08:59:bc:2b:2d:a5:66:f4:
da:23:c7:91:35:70:39:9d:42:40:b7:50:f3:7c:0c:
bf:c8:b8:ae:bd:f1:01:83:19:69:2d:e1:b8:c3:fb:
13:aa:f5:4b:e2:df:32:1e:41:0a:65:5a:4a:ca:1f:
56:d6:49:7d:c6:fe:1c:67:6a:c5:f7:96:3a:8d:1d:
c2:c5:06:dd:b5:f5:d2:fb:f7:df:11:3a:47:1d:93:
5e:18:44:40:d2:0d:6a:d6:89:da:52:b0:49:2c:ae:
77:99:93:cf:ad:b1:0b:6d:9c:f5:2a:c4:10:ec:9c:
db:fb:27:ee:d6:1e:c3:78:09:5f:22:26:11:69:fe:
17:61:2d:3c:a7:1f:b4:80:17:e2:51:03:3b:86:a9:
39:72:d8:79:89:16:ed:04:51:97:84:e9:66:69:47:
ea:ea:cc:59:e1:2a:5c:8f:aa:79:82:7c:46:dc:08:
97:01:00:69:6a:54:52:c0:3f:74:cf:e1:00:fc:87:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A2:EC:49:4E:A7:D2:80:73:65:E5:97:E2:B0:74:D0:45:67:59:C9
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f4:2e:45:c6:d5:b8:44:ca:fc:dd:e0:4a:f6:c8:54:b3:19:
e7:49:78:5d:a1:c5:88:95:b0:01:76:a2:cf:68:72:c6:24:3b:
a9:39:93:e8:f3:82:70:37:3f:4d:de:c8:f9:c5:b1:5a:7d:b6:
ed:5f:ec:59:13:de:25:70:e0:f2:da:a5:dc:a6:81:bd:a7:8f:
b7:47:c9:b4:8d:05:79:a2:ee:02:53:da:8a:ee:d7:9e:8d:1b:
b0:55:e3:5d:73:38:b6:fb:29:59:e3:60:43:85:fa:f2:30:17:
12:c7:93:ee:7b:52:3d:b1:9b:5f:11:a4:5e:ee:20:ad:e2:7e:
28:4b:64:ef:dd:bc:69:d2:55:8b:33:53:78:0e:0e:c7:7e:1c:
4d:96:fa:9c:e2:2c:d0:66:b4:18:7b:c0:4b:c5:19:ba:58:ba:
a8:48:6b:37:cd:fe:98:42:3c:e5:da:7d:1e:f1:38:ac:df:43:
04:0f:76:71:48:1f:d6:cb:c9:43:33:40:f9:55:15:8e:c6:3f:
8f:b3:d1:18:7a:e8:95:c2:40:25:27:53:62:e3:d7:e0:de:a9:
cd:07:56:4e:9c:a6:8f:7d:04:fe:c0:62:d3:72:94:34:43:3d:
10:fb:dc:42:ba:03:57:e3:2d:83:3c:45:d6:32:83:a7:70:93:
0c:3b:85:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO4UK8/eNuE/N7d9aprheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YTk4N2M2Y2QwYTM2Zjk0ZGJlZjEwZWYyYTJjNjYwMjBh
OTU2MTEwHhcNMjYwMzI2MTMwMDM2WhcNMjYwMzI3MTMwMDM2WjAzMTEwLwYDVQQD
EyhlN2EyZWM0OTRlYTdkMjgwNzM2NWU1OTdlMmIwNzRkMDQ1Njc1OWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgQ8I/zECSAOj0JrvnbJ/EZWEnoh
5YQ5ma3AUl9J4Zr3OvnH9EHNxvaYsbEDEOalhvqmsnFgwuvgbvgWr3h9bTkiCFm8
Ky2lZvTaI8eRNXA5nUJAt1DzfAy/yLiuvfEBgxlpLeG4w/sTqvVL4t8yHkEKZVpK
yh9W1kl9xv4cZ2rF95Y6jR3CxQbdtfXS+/ffETpHHZNeGERA0g1q1onaUrBJLK53
mZPPrbELbZz1KsQQ7Jzb+yfu1h7DeAlfIiYRaf4XYS08px+0gBfiUQM7hqk5cth5
iRbtBFGXhOlmaUfq6sxZ4Spcj6p5gnxG3AiXAQBpalRSwD90z+EA/IfU7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOei7ElOp9KAc2Xll+KwdNBFZ1nJMB8GA1UdIwQY
MBaAFJiph8bNCjb5Tb7xDvKixmAgqVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYjgzMDctNWY5Yy00OWM2LThhMGIt
ZjNiNDU4MTlmMmIwLzEvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hYjgzMDctNWY5Yy00OWM2LThhMGItZjNiNDU4MTlmMmIw
LzEvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffQuRcbV
uETK/N3gSvbIVLMZ50l4XaHFiJWwAXaiz2hyxiQ7qTmT6POCcDc/Td7I+cWxWn22
7V/sWRPeJXDg8tql3KaBvaePt0fJtI0FeaLuAlPaiu7Xno0bsFXjXXM4tvspWeNg
Q4X68jAXEseT7ntSPbGbXxGkXu4greJ+KEtk7928adJVizNTeA4Ox34cTZb6nOIs
0Ga0GHvAS8UZuli6qEhrN83+mEI85dp9HvE4rN9DBA92cUgf1svJQzNA+VUVjsY/
j7PRGHrolcJAJSdTYuPX4N6pzQdWTpymj30E/sBi03KUNEM9EPvcQroDV+MtgzxF
1jKDp3CTDDuFBA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:57:10 2026 by rpki-client