Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File: mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier: z+xxgVcOgM2ZB1sPMRnyprowoqu2GF7VDY5mCVmc+d0=
Subject key identifier: 1A:A1:E8:E2:FD:5E:A9:4A:51:D1:62:16:FA:89:90:BF:3A:D4:C4:CC
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 019D25F1B3C6FC1052819FC329ACA84BD46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number: 18A8
Signing time: Wed 25 Mar 2026 17:01:30 +0000
Manifest this update: Wed 25 Mar 2026 17:01:30 +0000
Manifest next update: Thu 26 Mar 2026 17:01:30 +0000
Files and hashes: 1: D0gnpWfBBKSRYWj8s3v4J_aCJMI.roa (hash: 45JN/2vbVLlDusn7s9SwK/NY3HUP/bKxrVAXGIGtMdk=)
2: VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa (hash: nZT5dviNLBhgGj5zg6mzO60GRglFXHbvUdAHc/xzhdo=)
3: m72BlK4pK3nz4quwny73cERWUUU.roa (hash: 3sQVvJAEO+cZVJVe28TC5M0aUTp2A0mSxPgJfwLQboM=)
4: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: orzy6CZXQijOLyrYK0uzFLpeqgOKQD+Gma71FWrVrZE=)
5: nbN6QTJFxRMXWB7BZSEIH-SMH3g.roa (hash: pyiyGBs40xwh8+LBH6NUqQq8ar9YtwxRrDXfuF15LbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b3:c6:fc:10:52:81:9f:c3:29:ac:a8:4b:d4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Mar 25 17:01:30 2026 GMT
Not After : Mar 26 17:01:30 2026 GMT
Subject: CN=1aa1e8e2fd5ea94a51d16216fa8990bf3ad4c4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:28:4b:00:eb:16:48:11:7d:dd:12:49:d3:
0f:8f:9d:c8:aa:1d:bb:f6:8a:06:8d:98:65:e8:eb:
44:a2:b4:db:af:f1:d8:55:14:5b:d6:77:d4:33:3b:
e5:8d:40:c5:bc:0c:2e:81:3e:00:e1:3c:7b:56:f8:
6a:3d:13:46:9f:29:15:54:e5:e8:26:9f:39:e7:ea:
83:bd:fd:c0:64:9b:67:e3:83:07:84:29:05:7f:f5:
3e:e8:bf:47:d7:cb:90:ae:e2:d1:97:90:ca:d1:77:
72:73:81:0a:91:c0:1c:e8:66:d1:e5:4d:f8:f0:39:
9d:e1:e9:1b:2a:a3:62:15:87:0f:17:3f:08:42:5b:
4b:89:c4:73:78:d0:0a:1c:72:e9:88:8f:06:76:fb:
a0:6f:1a:6a:b9:a7:cd:ce:3c:ec:53:83:39:53:c7:
ee:8d:de:97:ee:16:c4:84:ea:2f:b7:81:4a:d5:c5:
0c:75:5c:2a:1d:18:86:dd:40:fe:ff:70:3c:8d:c9:
1d:64:f0:52:17:d1:09:f2:4d:53:00:2f:6c:81:0d:
fc:04:2e:5f:cd:8e:bc:47:c5:f9:79:43:5a:e7:16:
98:91:1f:86:e2:8f:23:d2:91:36:6b:3e:82:d2:93:
b9:78:20:ef:f2:48:7f:a2:04:23:ef:80:8b:2d:a1:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A1:E8:E2:FD:5E:A9:4A:51:D1:62:16:FA:89:90:BF:3A:D4:C4:CC
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a2:1e:f5:90:03:51:8d:9e:99:19:02:12:59:32:e0:95:24:
5b:21:88:c5:18:fe:fe:85:c0:34:b8:37:d9:5e:a5:44:d2:b3:
5c:b7:dc:f3:34:12:04:a6:c4:f9:11:9a:97:1c:0b:7a:04:21:
12:31:a6:3f:21:0b:99:32:f1:aa:7d:6d:dc:da:3f:ca:b7:e9:
de:bc:80:4a:76:56:46:c9:2a:c3:52:a3:5a:b0:ba:56:eb:68:
5e:ca:2b:55:c3:8a:b9:29:dd:08:6d:54:d8:2c:55:c4:69:45:
39:10:01:67:d5:2e:d0:ae:41:f4:f2:13:be:d9:12:d3:c9:11:
64:48:6d:fb:e1:13:29:43:6f:12:4e:3a:d5:3f:22:b2:00:c6:
dc:ee:4d:8b:91:70:5d:53:8f:1c:b8:9c:17:fa:77:e8:01:41:
eb:8e:64:2c:4c:62:79:a3:83:c7:6b:c3:32:65:e3:e9:ea:d8:
3a:e9:f3:e5:5b:b4:a0:d2:5d:8d:d4:ba:e9:be:c2:10:ce:b2:
b2:91:26:8e:c8:77:1e:8a:51:30:43:47:d0:60:33:8f:fd:a8:
4b:11:36:5e:5b:fa:ad:d1:aa:3a:5a:09:81:ef:20:5b:55:51:
fc:73:09:f4:43:92:63:55:b8:2c:38:b6:82:c3:9d:35:99:50:
36:13:5e:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8bPG/BBSgZ/DKayoS9RvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NjcyMTgzMWFmYjhiMzgzMDdiNDlmNWI5ZWU2MjkyYWQx
ZTU4NTAwHhcNMjYwMzI1MTcwMTMwWhcNMjYwMzI2MTcwMTMwWjAzMTEwLwYDVQQD
EygxYWExZThlMmZkNWVhOTRhNTFkMTYyMTZmYTg5OTBiZjNhZDRjNGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0soSwDrFkgRfd0SSdMPj53Iqh27
9ooGjZhl6OtEorTbr/HYVRRb1nfUMzvljUDFvAwugT4A4Tx7VvhqPRNGnykVVOXo
Jp855+qDvf3AZJtn44MHhCkFf/U+6L9H18uQruLRl5DK0Xdyc4EKkcAc6GbR5U34
8Dmd4ekbKqNiFYcPFz8IQltLicRzeNAKHHLpiI8GdvugbxpquafNzjzsU4M5U8fu
jd6X7hbEhOovt4FK1cUMdVwqHRiG3UD+/3A8jckdZPBSF9EJ8k1TAC9sgQ38BC5f
zY68R8X5eUNa5xaYkR+G4o8j0pE2az6C0pO5eCDv8kh/ogQj74CLLaG4fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqh6OL9XqlKUdFiFvqJkL861MTMMB8GA1UdIwQY
MBaAFJlnIYMa+4s4MHtJ9bnuYpKtHlhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzIt
YjRiZmU0NTZkZGUwLzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzItYjRiZmU0NTZkZGUw
LzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6Ie9ZAD
UY2emRkCElky4JUkWyGIxRj+/oXANLg32V6lRNKzXLfc8zQSBKbE+RGalxwLegQh
EjGmPyELmTLxqn1t3No/yrfp3ryASnZWRskqw1KjWrC6VutoXsorVcOKuSndCG1U
2CxVxGlFORABZ9Uu0K5B9PITvtkS08kRZEht++ETKUNvEk461T8isgDG3O5Ni5Fw
XVOPHLicF/p36AFB645kLExieaODx2vDMmXj6erYOunz5Vu0oNJdjdS66b7CEM6y
spEmjsh3HopRMENH0GAzj/2oSxE2Xlv6rdGqOloJge8gW1VR/HMJ9EOSY1W4LDi2
gsOdNZlQNhNexg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:23 2026 by rpki-client