Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
File: mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json)
Hash identifier: +jdn4Zb3L3iN8ytSIl/GYCvTpU1LSyBG30PFYGOCKH8=
Subject key identifier: DE:C4:ED:BD:8A:4F:CE:91:F7:FF:7F:D5:5B:73:1B:01:5A:02:60:E5
Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
Certificate issuer: /CN=9a754c71d62cb23948d9119eda772fde38e67b67
Certificate serial: 019D25F12C746998EFEE4F4E2E42FC943CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:00:55 +0000
Manifest this update: Wed 25 Mar 2026 17:00:55 +0000
Manifest next update: Thu 26 Mar 2026 17:00:55 +0000
Files and hashes: 1: 0gT4DLtTdM_CyVsv9Vw60QKs1N4.roa (hash: zFRwzZzrDs5I9AtJqZurIqmSmEX2LYuF+rvsMKclqlE=)
2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: WOyVtHGgdxT/rSDIbXHblLpsqDiNaC8kX56pAH+RrNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:2c:74:69:98:ef:ee:4f:4e:2e:42:fc:94:3c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67
Validity
Not Before: Mar 25 17:00:55 2026 GMT
Not After : Mar 26 17:00:55 2026 GMT
Subject: CN=dec4edbd8a4fce91f7ff7fd55b731b015a0260e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:0b:13:4f:ad:d6:43:e9:f5:70:0e:01:3d:
6a:21:e2:de:bb:74:62:76:2d:a8:c3:27:5a:85:f3:
27:96:1b:a1:6d:41:bc:1e:98:23:c5:7c:26:3a:2d:
b6:61:6a:91:01:36:5f:54:7d:b4:a4:3a:ca:af:a6:
88:5b:14:f0:69:bc:23:cb:08:68:12:8f:9c:9b:0c:
e8:f8:23:21:81:3c:d8:86:db:2f:6b:73:98:00:66:
f4:83:48:06:47:85:34:62:57:50:63:3c:b2:c3:61:
47:06:00:6b:77:5c:4e:c1:24:fe:c2:38:66:4f:f7:
ac:25:74:26:3e:77:1c:44:61:fd:47:c4:b6:ee:46:
08:20:8c:0b:f8:fe:80:e1:ac:2b:07:e8:03:28:30:
4b:c5:bb:1f:ee:7c:2e:56:a5:c1:8b:af:89:da:c6:
60:c1:13:40:9b:d6:cb:c3:0f:4a:1b:92:c3:5c:00:
8b:85:02:5d:6c:b4:86:13:4b:f3:53:7a:3e:56:c4:
a1:3d:06:18:ce:c4:34:8c:35:78:8d:f7:ad:c0:c7:
3a:85:97:e7:63:b6:b7:6e:67:b5:17:13:32:0f:f2:
b1:17:ea:f2:9e:d8:d9:f7:27:97:78:2e:fd:eb:ca:
98:a0:6a:3c:5e:81:7a:8e:54:f7:2f:f6:7d:af:c3:
a6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C4:ED:BD:8A:4F:CE:91:F7:FF:7F:D5:5B:73:1B:01:5A:02:60:E5
X509v3 Authority Key Identifier:
keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0b:cc:8e:7b:9a:99:9b:35:8f:8f:e0:1e:bb:c8:a8:49:f2:
44:c9:c9:ec:59:e4:b7:0f:5f:18:e7:8f:0b:66:b8:ae:37:9e:
3f:b2:83:75:d7:39:1c:c3:d8:db:f1:78:16:90:0c:c2:29:bb:
61:03:d1:14:2a:ef:88:6b:db:64:7d:bd:9d:da:74:30:03:ea:
30:73:39:6f:67:80:42:2b:7f:c9:9b:12:bc:56:d0:9c:32:dd:
c1:b0:fc:f5:a7:b2:4c:2d:74:8e:e8:92:4e:07:9d:ad:be:3a:
23:58:79:c1:68:ef:4b:e0:70:74:3c:f8:99:10:5b:8d:e5:78:
30:93:20:6a:13:fb:1f:5b:d9:cb:dd:3d:10:94:af:bc:b7:64:
36:3a:68:f3:46:6c:39:00:06:19:09:e7:77:26:41:eb:80:df:
ca:da:be:09:1b:b6:9c:05:65:5a:99:c6:f1:49:58:00:28:d8:
d9:9b:44:f8:e1:c3:5f:41:7e:a0:ec:a5:7a:62:59:a0:35:96:
9c:47:e3:3f:48:13:32:64:2d:a1:16:2d:63:6c:f2:1e:4f:66:
3a:b5:54:59:ec:85:e5:a2:31:a9:04:02:f0:25:db:97:f5:ca:
ca:0c:15:db:67:ad:a6:f5:09:26:0b:bf:f9:d0:2e:af:9d:e5:
d4:bb:f5:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8Sx0aZjv7k9OLkL8lDy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzU0YzcxZDYyY2IyMzk0OGQ5MTE5ZWRhNzcyZmRlMzhl
NjdiNjcwHhcNMjYwMzI1MTcwMDU1WhcNMjYwMzI2MTcwMDU1WjAzMTEwLwYDVQQD
EyhkZWM0ZWRiZDhhNGZjZTkxZjdmZjdmZDU1YjczMWIwMTVhMDI2MGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnoLE0+t1kPp9XAOAT1qIeLeu3Ri
di2owydahfMnlhuhbUG8HpgjxXwmOi22YWqRATZfVH20pDrKr6aIWxTwabwjywho
Eo+cmwzo+CMhgTzYhtsva3OYAGb0g0gGR4U0YldQYzyyw2FHBgBrd1xOwST+wjhm
T/esJXQmPnccRGH9R8S27kYIIIwL+P6A4awrB+gDKDBLxbsf7nwuVqXBi6+J2sZg
wRNAm9bLww9KG5LDXACLhQJdbLSGE0vzU3o+VsShPQYYzsQ0jDV4jfetwMc6hZfn
Y7a3bme1FxMyD/KxF+ryntjZ9yeXeC7968qYoGo8XoF6jlT3L/Z9r8OmewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7E7b2KT86R9/9/1VtzGwFaAmDlMB8GA1UdIwQY
MBaAFJp1THHWLLI5SNkRntp3L9445ntnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDJlNjctNWFjMi00MjdkLThiN2It
ZDI1YTlkZjE1OTI1LzEvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80ZDJlNjctNWFjMi00MjdkLThiN2ItZDI1YTlkZjE1OTI1
LzEvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgvMjnua
mZs1j4/gHrvIqEnyRMnJ7Fnktw9fGOePC2a4rjeeP7KDddc5HMPY2/F4FpAMwim7
YQPRFCrviGvbZH29ndp0MAPqMHM5b2eAQit/yZsSvFbQnDLdwbD89aeyTC10juiS
Tgedrb46I1h5wWjvS+BwdDz4mRBbjeV4MJMgahP7H1vZy909EJSvvLdkNjpo80Zs
OQAGGQnndyZB64Dfytq+CRu2nAVlWpnG8UlYACjY2ZtE+OHDX0F+oOylemJZoDWW
nEfjP0gTMmQtoRYtY2zyHk9mOrVUWeyF5aIxqQQC8CXbl/XKygwV22etpvUJJgu/
+dAur53l1Lv1ow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:40 2026 by rpki-client