Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier: zrnYBTl6f2OKdHm5YTI4bhOj9IGZlFkVy0pPJ+dzTeg=
Subject key identifier: DF:DC:8C:7B:72:97:B8:DC:C4:27:FC:66:42:4E:DF:E8:58:7B:93:AF
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 019D29610704D9805576F2D6BF45BE989290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number: 0F6E
Signing time: Thu 26 Mar 2026 09:01:57 +0000
Manifest this update: Thu 26 Mar 2026 09:01:57 +0000
Manifest next update: Fri 27 Mar 2026 09:01:57 +0000
Files and hashes: 1: FnV4siConvZq8mk9CbOlR5a9DjI.roa (hash: IZ5c3lykfIm9IkvU3L26cQr7DSQZqq6fwwu8m+5tYDw=)
2: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: dEzhHSIX82VaEP6qcjg2LXQnWPfOBh3Xq4YYDxrixb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:07:04:d9:80:55:76:f2:d6:bf:45:be:98:92:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: Mar 26 09:01:57 2026 GMT
Not After : Mar 27 09:01:57 2026 GMT
Subject: CN=dfdc8c7b7297b8dcc427fc66424edfe8587b93af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:23:2d:8d:a5:bb:33:d7:cb:fa:a2:18:62:
16:00:5e:cb:9e:26:b5:32:f3:c3:9e:a6:4c:ca:03:
91:8a:7e:35:08:56:dd:b3:00:cb:ed:cd:17:3a:f3:
f4:5f:2f:17:ca:04:28:a0:53:ba:c4:13:1f:8e:a6:
17:4b:92:c7:e2:1b:9d:d5:bc:a9:8e:27:49:85:cf:
12:fa:85:f1:2a:16:bf:aa:2d:09:ed:c5:97:34:a1:
6f:60:5b:71:9c:d0:5e:cf:e8:2a:a2:bc:54:1c:6c:
c3:c1:ee:b2:e9:a3:ec:c1:9b:4d:9e:8f:f4:1c:a0:
ac:ff:55:4f:a3:ed:26:67:d9:ef:36:e6:9c:8d:60:
f1:e8:f2:b2:2e:1d:b2:c6:71:84:62:72:c8:85:4e:
ef:98:86:b0:c6:13:35:fa:48:f0:d4:a2:89:9d:7a:
e9:f3:70:53:0e:e7:e0:4c:e1:33:6c:aa:bd:95:93:
e8:ab:84:a9:07:46:14:91:f0:71:bf:b3:15:da:6c:
8a:69:01:a5:18:02:b6:59:4c:82:c7:3f:9f:e6:7b:
52:6d:db:03:b1:26:08:71:73:d5:11:84:d4:3a:62:
7d:8a:11:be:05:51:55:4b:2b:f1:d6:f1:86:57:f4:
36:5e:5d:5c:a4:8c:86:aa:86:67:30:98:75:f2:eb:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DC:8C:7B:72:97:B8:DC:C4:27:FC:66:42:4E:DF:E8:58:7B:93:AF
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:19:23:30:39:1f:a6:0c:cd:e4:00:76:a0:ef:b0:9e:35:a1:
62:5b:26:79:d9:a5:02:58:ba:d3:5b:0e:c7:20:31:59:86:00:
9a:d1:aa:a0:3e:24:6e:ff:0c:b9:25:52:9d:3e:7f:5b:da:4b:
f7:b1:82:02:14:0d:64:47:3a:83:1e:16:1d:18:f0:96:7f:8b:
d0:19:f8:bf:05:cf:50:65:21:11:cc:90:d6:f8:9f:d0:49:d7:
ae:30:2a:6b:df:c7:e7:01:9e:39:09:fe:ae:6e:a7:df:21:57:
1c:81:6f:b6:7e:f6:ef:e9:ca:7c:45:33:dd:45:e4:3f:01:11:
a6:c7:b8:62:13:7b:7e:98:12:4d:a1:28:85:67:32:52:3b:03:
9c:5d:a8:9b:97:fd:5e:1b:c7:b8:59:41:a9:b1:b4:49:c2:b1:
f6:25:37:11:1a:49:ad:cc:e5:11:3d:ea:fe:d5:68:80:06:e3:
e1:b6:e3:f9:25:70:45:ca:2e:48:bf:53:a5:92:9f:2e:99:b5:
e1:c3:74:ef:38:9b:3c:ca:05:73:0a:40:40:6a:ab:09:91:5d:
88:fe:bb:18:44:6e:53:3f:79:6a:8b:3a:13:97:10:cd:55:c4:
9c:0f:a1:5d:73:f4:42:4c:00:0c:6b:28:7d:28:7a:52:19:47:
ca:89:06:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYQcE2YBVdvLWv0W+mJKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNzU1N2NmMjI2MjlkMDU4YTUxMTQ5NjViMmY5ZGY4ZWY0
ZGI2OTAwHhcNMjYwMzI2MDkwMTU3WhcNMjYwMzI3MDkwMTU3WjAzMTEwLwYDVQQD
EyhkZmRjOGM3YjcyOTdiOGRjYzQyN2ZjNjY0MjRlZGZlODU4N2I5M2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvUjLY2luzPXy/qiGGIWAF7Lnia1
MvPDnqZMygORin41CFbdswDL7c0XOvP0Xy8XygQooFO6xBMfjqYXS5LH4hud1byp
jidJhc8S+oXxKha/qi0J7cWXNKFvYFtxnNBez+gqorxUHGzDwe6y6aPswZtNno/0
HKCs/1VPo+0mZ9nvNuacjWDx6PKyLh2yxnGEYnLIhU7vmIawxhM1+kjw1KKJnXrp
83BTDufgTOEzbKq9lZPoq4SpB0YUkfBxv7MV2myKaQGlGAK2WUyCxz+f5ntSbdsD
sSYIcXPVEYTUOmJ9ihG+BVFVSyvx1vGGV/Q2Xl1cpIyGqoZnMJh18ut+6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/cjHtyl7jcxCf8ZkJO3+hYe5OvMB8GA1UdIwQY
MBaAFDJ1V88iYp0FilEUllsvnfjvTbaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUt
ZmQ3MjViODI1MjkxLzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUtZmQ3MjViODI1Mjkx
LzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxkjMDkf
pgzN5AB2oO+wnjWhYlsmedmlAli601sOxyAxWYYAmtGqoD4kbv8MuSVSnT5/W9pL
97GCAhQNZEc6gx4WHRjwln+L0Bn4vwXPUGUhEcyQ1vif0EnXrjAqa9/H5wGeOQn+
rm6n3yFXHIFvtn727+nKfEUz3UXkPwERpse4YhN7fpgSTaEohWcyUjsDnF2om5f9
XhvHuFlBqbG0ScKx9iU3ERpJrczlET3q/tVogAbj4bbj+SVwRcouSL9TpZKfLpm1
4cN07zibPMoFcwpAQGqrCZFdiP67GERuUz95aos6E5cQzVXEnA+hXXP0QkwADGso
fSh6UhlHyokGnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:48 2026 by rpki-client