
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
File: mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft (raw, json)
Hash identifier: SsYHEqJihKOUXW6OzyE0rUe5mCfzICzDoGjuMX0KFx8=
Subject key identifier: F2:6E:03:28:F1:BC:07:73:B1:EC:E7:F3:17:C5:54:4F:F6:21:72:36
Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Certificate issuer: /CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Certificate serial: 019D29607B08CC476D3973CBEEF3537175B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
Manifest number: 04EC
Signing time: Thu 26 Mar 2026 09:01:21 +0000
Manifest this update: Thu 26 Mar 2026 09:01:21 +0000
Manifest next update: Fri 27 Mar 2026 09:01:21 +0000
Files and hashes: 1: 44GZoGx_x8dNbf6nAHGQWZ2UU-0.roa (hash: xOyAbQB+vtc/E2mAsjnBi6TB+IYXWamM3kKT53UfHyM=)
2: TL-Meh5RdJ5l-MnmJkkhyn9w2W0.roa (hash: EzgEDoIb1JMS2mx6GVUnK7xYt0JpP8wDuzJo3jdvw+I=)
3: mABcrs9FblDGzEalDK2YOItidt8.roa (hash: Xv28kswuEga9eK7I4vSocGSlX6M7h4HWv2G4ZfF2/ck=)
4: mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl (hash: S4iCu0gIojn+TXlWq4W/AGiO2b9CX0yIdLAY/zeL4aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:7b:08:cc:47:6d:39:73:cb:ee:f3:53:71:75:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Validity
Not Before: Mar 26 09:01:21 2026 GMT
Not After : Mar 27 09:01:21 2026 GMT
Subject: CN=f26e0328f1bc0773b1ece7f317c5544ff6217236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6c:6d:fd:60:40:ea:d8:b5:d1:e0:12:9b:56:
54:80:ca:76:c4:bb:ea:3d:07:30:cf:f7:7e:2e:9d:
54:9c:9a:26:b6:06:6f:13:1a:1f:aa:c7:94:22:3e:
8b:66:f7:30:98:f4:d9:02:20:62:53:bc:4f:c5:b0:
84:d7:0e:79:50:4d:52:4c:91:ba:19:e9:ca:4f:df:
ad:99:58:6d:ff:23:40:ba:c9:3a:fa:80:d1:11:28:
c1:ca:7e:01:00:49:07:48:ad:7d:02:e7:8f:0f:e4:
9a:e9:2e:eb:91:55:67:af:a8:45:d6:9b:5e:c6:e7:
d1:db:96:b6:ba:de:b1:d7:0e:7b:d6:04:59:c4:fa:
f5:51:52:1b:72:08:c0:c1:0c:39:ef:75:db:a7:60:
ec:ef:34:5c:45:24:1e:83:98:02:8d:3e:0f:df:fe:
01:35:09:d2:77:dc:f9:69:55:d6:c4:e9:b2:8d:c3:
e5:8d:8c:7f:b9:bb:68:68:36:f8:8f:04:74:2f:3a:
0d:55:27:fc:7d:ed:ef:7c:c9:7c:e3:8b:8b:9b:f6:
54:f1:ad:15:41:e3:a6:02:4e:53:9e:d0:97:80:11:
7e:16:70:b4:72:c2:4d:2d:64:1c:73:17:fd:51:9b:
8d:88:3d:04:7b:85:c7:91:ec:a5:b8:1e:13:1f:58:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6E:03:28:F1:BC:07:73:B1:EC:E7:F3:17:C5:54:4F:F6:21:72:36
X509v3 Authority Key Identifier:
keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e1:5f:6d:66:6d:28:e2:33:ec:dc:dd:96:07:ca:b5:b3:df:
51:1f:d6:54:da:4c:8e:25:39:9c:0b:22:05:45:eb:17:ea:8d:
d6:97:fe:7d:a4:e8:1f:03:5c:b3:26:3a:53:ed:39:74:d5:3e:
6b:de:0b:c5:f4:93:e1:29:bb:80:2d:f0:b9:3b:5f:b8:b8:57:
cf:6f:f5:c6:aa:30:aa:14:6d:6e:ca:67:36:e2:f9:ee:07:2b:
57:fc:a7:54:8c:c6:20:34:01:68:1b:68:48:64:0a:60:db:b8:
cf:99:5c:62:2f:cb:07:5e:2f:d1:6d:03:d2:f0:ee:64:01:a3:
f0:57:bb:3a:c3:73:c8:b2:34:fe:87:57:1a:61:c1:59:a2:b3:
56:38:bb:0a:9f:de:12:e3:c2:95:d5:93:1c:c6:4d:2a:ba:2c:
97:14:c7:50:c0:ff:b0:f5:18:97:82:41:6b:b1:76:61:7c:0f:
4d:c5:fb:f0:39:54:1c:61:3a:b4:ff:28:60:a0:9c:60:1a:6f:
51:0a:4b:a6:31:4f:5c:40:72:cf:ff:2d:c0:d7:7e:e1:50:42:
db:ed:c3:bb:50:56:23:0c:31:21:ab:37:c3:e8:52:a9:88:d9:
6d:a9:4b:64:0c:a0:c2:c8:65:1a:a0:9e:62:b3:6a:3b:b5:b9:
4c:f4:79:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYHsIzEdtOXPL7vNTcXW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MzkwMGY2NmU3MGIyZmZmZDljMGNlOTI2MDJmMmY0NWM2
NTk5NjEwHhcNMjYwMzI2MDkwMTIxWhcNMjYwMzI3MDkwMTIxWjAzMTEwLwYDVQQD
EyhmMjZlMDMyOGYxYmMwNzczYjFlY2U3ZjMxN2M1NTQ0ZmY2MjE3MjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42xt/WBA6ti10eASm1ZUgMp2xLvq
PQcwz/d+Lp1UnJomtgZvExofqseUIj6LZvcwmPTZAiBiU7xPxbCE1w55UE1STJG6
GenKT9+tmVht/yNAusk6+oDRESjByn4BAEkHSK19AuePD+Sa6S7rkVVnr6hF1pte
xufR25a2ut6x1w571gRZxPr1UVIbcgjAwQw573Xbp2Ds7zRcRSQeg5gCjT4P3/4B
NQnSd9z5aVXWxOmyjcPljYx/ubtoaDb4jwR0LzoNVSf8fe3vfMl844uLm/ZU8a0V
QeOmAk5TntCXgBF+FnC0csJNLWQccxf9UZuNiD0Ee4XHkeyluB4TH1jYlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJuAyjxvAdzsezn8xfFVE/2IXI2MB8GA1UdIwQY
MBaAFJk5APZucLL//ZwM6SYC8vRcZZlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVRrQTltNXdzdl85bkF6cEpnTHk5RnhsbVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jMWNmNmYtNTRjZC00MzRhLTgzN2Qt
ZGVmNmVmYjQ0MzE5LzEvbVRrQTltNXdzdl85bkF6cEpnTHk5RnhsbVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jMWNmNmYtNTRjZC00MzRhLTgzN2QtZGVmNmVmYjQ0MzE5
LzEvbVRrQTltNXdzdl85bkF6cEpnTHk5RnhsbVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAteFfbWZt
KOIz7NzdlgfKtbPfUR/WVNpMjiU5nAsiBUXrF+qN1pf+faToHwNcsyY6U+05dNU+
a94LxfST4Sm7gC3wuTtfuLhXz2/1xqowqhRtbspnNuL57gcrV/ynVIzGIDQBaBto
SGQKYNu4z5lcYi/LB14v0W0D0vDuZAGj8Fe7OsNzyLI0/odXGmHBWaKzVji7Cp/e
EuPCldWTHMZNKroslxTHUMD/sPUYl4JBa7F2YXwPTcX78DlUHGE6tP8oYKCcYBpv
UQpLpjFPXEByz/8twNd+4VBC2+3Du1BWIwwxIas3w+hSqYjZbalLZAygwshlGqCe
YrNqO7W5TPR5nA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:51:30 2026 by rpki-client