Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: 7qObTTJyo+9Mp2quILxi63OeJpAektKGFZOKPtgH8nc=
Subject key identifier: E5:12:CD:F7:05:A3:E5:C8:4F:5A:AB:29:6C:1F:C4:12:CD:C1:62:8D
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 019D258336DC7534FF4E5FEF1C2440104414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:00:49 +0000
Manifest this update: Wed 25 Mar 2026 15:00:49 +0000
Manifest next update: Thu 26 Mar 2026 15:00:49 +0000
Files and hashes: 1: 1S2bZZj9qdyRRB7nR_b4PQ0z1Sw.roa (hash: u9ro5Rvo3czSNujsVQtq0Ez7XFyuHSIaTIk3k7PO73o=)
2: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: kyoe+oZPiBD0FxQdj+Qj1JPmtN3peqGvFTLGXMaZH00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:36:dc:75:34:ff:4e:5f:ef:1c:24:40:10:44:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Mar 25 15:00:49 2026 GMT
Not After : Mar 26 15:00:49 2026 GMT
Subject: CN=e512cdf705a3e5c84f5aab296c1fc412cdc1628d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:82:89:b6:33:14:02:f9:1b:c3:2f:97:d1:
0c:60:eb:bf:6b:71:5f:d2:6c:5c:d0:9f:c4:6f:4a:
29:e7:18:24:46:6d:52:70:2c:32:75:93:ee:0c:15:
ea:db:af:70:0c:c9:c7:e9:37:73:6a:35:16:93:d0:
12:54:a3:9a:0c:73:22:92:28:70:a8:f7:1e:53:9c:
2c:0d:88:a5:71:36:af:1b:79:85:e0:a3:75:8d:66:
70:52:ff:69:eb:2c:7a:e6:4e:e0:5e:eb:4d:3d:51:
70:a6:ed:f4:84:a5:e5:9f:af:44:28:e4:a8:f4:bf:
e9:ae:98:5a:b0:bb:70:8f:bc:43:3a:96:81:ab:48:
23:e2:69:a8:32:bd:fa:26:9b:b9:57:5e:a0:4d:a0:
b2:15:73:22:fe:fc:ec:73:2b:89:74:21:60:9d:8f:
2d:0a:23:42:a1:e7:73:39:3d:7a:01:aa:60:7f:26:
3a:e9:42:1a:fa:74:21:e3:34:09:c4:55:96:31:13:
f6:cb:44:69:9d:b6:58:80:a1:50:5c:cd:78:29:e2:
60:21:17:92:ab:01:0b:e7:06:c8:82:f3:2c:cb:d5:
65:21:18:77:4c:6b:ff:a6:30:6d:18:ed:cf:43:30:
6d:0b:e5:5c:29:c6:36:92:65:f3:f4:3f:82:be:fb:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:12:CD:F7:05:A3:E5:C8:4F:5A:AB:29:6C:1F:C4:12:CD:C1:62:8D
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:18:25:11:82:ca:ad:ee:da:75:5f:43:5d:2b:47:59:e3:3b:
b7:d3:d1:13:1c:61:30:09:58:96:d5:42:68:b6:d7:0a:01:62:
cb:de:d8:a4:4e:ad:1e:80:8b:62:be:18:3a:6e:3d:b1:94:74:
ce:19:3e:d3:0d:6c:ab:83:fe:36:65:f2:3a:1b:7f:44:30:4d:
c8:fe:82:a2:bc:f3:e1:a0:f3:12:c8:6d:68:6d:ea:d1:a9:f0:
f2:34:a5:17:d3:1c:0d:fb:d2:e4:e0:19:78:31:fd:c1:98:45:
f1:db:48:04:1e:bf:05:06:90:7c:63:26:d1:4b:97:41:4e:74:
41:f3:70:df:c4:ae:bd:89:66:f5:23:c7:e8:2d:4e:33:ed:a1:
40:f2:ae:c1:c2:44:ed:a5:6c:f1:3d:e3:1d:a9:83:41:92:05:
4c:f6:71:89:7b:0b:ed:ba:f0:93:9e:31:a5:0a:db:b5:9d:61:
ec:64:84:a8:cb:b4:40:2e:0c:d5:8f:c4:b9:61:4e:72:9a:c4:
7c:e1:38:ac:ea:d1:7d:67:6a:e8:a7:8b:e9:0f:4d:e7:0d:cb:
10:ba:e8:f7:f2:c1:84:3c:df:c1:e5:48:66:3d:1b:ca:a1:f1:
49:8d:fa:20:c5:13:6d:9b:ac:ee:1e:b3:71:31:72:77:1e:15:
11:50:3f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:57 2026 by rpki-client