Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier: jft1HJLOFTNAXP+zNrMGWFiC0zBGM/H/uaacGaQXqMk=
Subject key identifier: 9B:27:2F:79:85:E4:DC:05:19:C0:B8:0C:82:AC:D6:1C:62:E2:10:44
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer: /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial: 019E1EA2B9574053277AC21BD6EB7289CD8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number: 0AB1
Signing time: Wed 13 May 2026 00:00:41 +0000
Manifest this update: Wed 13 May 2026 00:00:41 +0000
Manifest next update: Thu 14 May 2026 00:00:41 +0000
Files and hashes: 1: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: neiGUijC11FaCLcvnwBCiXcDam8Luf3g3tyjWL8cnos=)
2: bY4WY1iKxzvuOL6bmkVqfpfooVA.roa (hash: Ph+QZYyi/7d0WLmkOSuDFC4tOnaIRjljQNdRjvbGpWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:b9:57:40:53:27:7a:c2:1b:d6:eb:72:89:cd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
Validity
Not Before: May 13 00:00:41 2026 GMT
Not After : May 14 00:00:41 2026 GMT
Subject: CN=9b272f7985e4dc0519c0b80c82acd61c62e21044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:c7:43:cb:43:47:9f:fc:03:d5:a8:8b:91:
8b:90:d4:b5:c8:a6:c6:3f:fc:35:70:f3:4f:80:bc:
b8:0c:45:16:19:35:ea:2d:46:76:82:46:54:81:7f:
f9:79:ab:b9:78:25:85:a9:6b:5c:d5:0a:79:a3:4d:
37:fa:19:39:0a:57:d1:af:65:29:b4:1d:a8:c7:35:
ce:0a:6b:af:96:3d:a2:26:23:c3:4f:4a:c6:6b:c8:
f9:6a:8b:8f:f7:c1:90:51:06:3f:ba:1e:0b:5c:36:
47:a3:60:d6:40:3b:bb:07:b7:68:e8:ae:ff:95:ba:
78:8b:06:2e:59:67:dd:80:06:49:61:d7:ad:39:60:
99:73:0d:6a:05:43:b3:4d:b5:d4:83:0c:e2:e6:f1:
ae:6c:4b:38:af:5e:6d:43:52:bb:ee:2e:40:37:ba:
a3:7e:f8:e2:ec:78:2e:9e:c9:65:fe:cd:c6:f7:ad:
ae:ac:4f:f2:ca:9e:7c:31:ca:65:51:74:ea:f9:e8:
f1:fd:bd:04:49:94:a1:d1:3e:ab:cd:c1:eb:62:1f:
47:88:08:02:93:68:85:3f:47:56:8a:51:6f:ae:09:
ce:38:4e:fc:ee:9f:92:92:81:c8:2a:f3:14:c8:1f:
6c:56:8c:4d:21:09:4d:45:29:39:0c:e7:35:79:0b:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:27:2F:79:85:E4:DC:05:19:C0:B8:0C:82:AC:D6:1C:62:E2:10:44
X509v3 Authority Key Identifier:
keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3d:a2:56:34:80:61:c8:e7:64:5e:1f:61:e8:fb:a0:b0:1c:
28:23:47:3f:1b:8a:7d:fa:fe:80:86:63:41:92:d7:49:3b:f4:
51:bb:d6:18:ce:24:0a:56:3f:9a:a6:90:a1:30:90:96:3d:d4:
35:68:97:d2:ae:1c:c6:39:f6:f3:2b:ad:a2:97:57:1f:e9:75:
95:f7:b8:00:cf:2a:1e:89:a4:5a:c7:fb:ab:2a:eb:a1:30:5d:
03:23:7f:83:c8:87:d9:88:3a:78:b5:22:2f:c9:72:e8:58:b8:
07:dd:18:18:8f:f7:0d:b2:c5:aa:b3:c6:a3:51:58:d2:4b:89:
5e:f9:c4:42:ec:b1:29:11:65:b9:d9:66:35:b2:42:cd:3e:77:
65:f8:87:4e:7c:45:dc:a2:a3:f3:bb:de:48:94:5c:f7:44:77:
dd:21:a7:17:51:dd:a6:83:b3:ea:d2:7f:ca:52:ac:6d:7b:08:
d2:95:47:ed:2b:9b:87:7a:b7:11:85:97:50:a0:f7:16:30:bd:
d0:3e:35:68:81:af:2b:bd:95:5b:40:5b:0d:dd:ad:e1:bb:f0:
c6:a9:50:4e:6c:46:1a:85:ae:be:d1:1d:7f:d5:09:17:d9:93:
94:4d:23:4b:ed:5d:de:c5:2f:30:39:dc:1f:8d:9c:01:2a:03:
e8:44:1e:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eorlXQFMnesIb1utyic2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQ1ZmMzMTQ3MTAyODI0ZjlkMmQ1NDc3NjZhODA5YWVh
ZjI0NWEwHhcNMjYwNTEzMDAwMDQxWhcNMjYwNTE0MDAwMDQxWjAzMTEwLwYDVQQD
Eyg5YjI3MmY3OTg1ZTRkYzA1MTljMGI4MGM4MmFjZDYxYzYyZTIxMDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYHHQ8tDR5/8A9Woi5GLkNS1yKbG
P/w1cPNPgLy4DEUWGTXqLUZ2gkZUgX/5eau5eCWFqWtc1Qp5o003+hk5ClfRr2Up
tB2oxzXOCmuvlj2iJiPDT0rGa8j5aouP98GQUQY/uh4LXDZHo2DWQDu7B7do6K7/
lbp4iwYuWWfdgAZJYdetOWCZcw1qBUOzTbXUgwzi5vGubEs4r15tQ1K77i5AN7qj
fvji7Hgunsll/s3G962urE/yyp58McplUXTq+ejx/b0ESZSh0T6rzcHrYh9HiAgC
k2iFP0dWilFvrgnOOE787p+SkoHIKvMUyB9sVoxNIQlNRSk5DOc1eQvudwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsnL3mF5NwFGcC4DIKs1hxi4hBEMB8GA1UdIwQY
MBaAFDDEX8MUcQKCT50tVHdmqAmuryRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMmFkNGMtMGIwNS00NzRkLTkxOWYt
M2I1NDBhNmJjM2RjLzEvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yMmFkNGMtMGIwNS00NzRkLTkxOWYtM2I1NDBhNmJjM2Rj
LzEvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIj2iVjSA
YcjnZF4fYej7oLAcKCNHPxuKffr+gIZjQZLXSTv0UbvWGM4kClY/mqaQoTCQlj3U
NWiX0q4cxjn28yutopdXH+l1lfe4AM8qHomkWsf7qyrroTBdAyN/g8iH2Yg6eLUi
L8ly6Fi4B90YGI/3DbLFqrPGo1FY0kuJXvnEQuyxKRFludlmNbJCzT53ZfiHTnxF
3KKj87veSJRc90R33SGnF1HdpoOz6tJ/ylKsbXsI0pVH7Subh3q3EYWXUKD3FjC9
0D41aIGvK72VW0BbDd2t4bvwxqlQTmxGGoWuvtEdf9UJF9mTlE0jS+1d3sUvMDnc
H42cASoD6EQecw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:37:32 2026 by rpki-client