Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: EhfH2Rc7fN8wI9JJ7TtdTewuHIJh1+DM94GUH5krKMw=
Subject key identifier: AC:54:9A:1A:A8:B7:CB:49:79:EC:FE:8F:DC:46:59:9A:97:18:05:C9
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 019D273A84078C7485AAAF03BF94612BC95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 0C50
Signing time: Wed 25 Mar 2026 23:00:39 +0000
Manifest this update: Wed 25 Mar 2026 23:00:39 +0000
Manifest next update: Thu 26 Mar 2026 23:00:39 +0000
Files and hashes: 1: KTlXY_GhxQ5VW4pMYqOYscTdOZM.roa (hash: je5ss0aWHni0ph4zaP7Hn858wJvG8bGTjlHPySsmlgw=)
2: iaDbFzCGuAlwzl6bRW55-YwI7tA.roa (hash: 6F9zTT+j/4thBUAM1E97eqvGP/DYTAVmPQOGCVMj6V0=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: S3ViWpv4g3V1VqpRT3DGh6O7rooXi5FYsVLE1IIAbPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:84:07:8c:74:85:aa:af:03:bf:94:61:2b:c9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Mar 25 23:00:39 2026 GMT
Not After : Mar 26 23:00:39 2026 GMT
Subject: CN=ac549a1aa8b7cb4979ecfe8fdc46599a971805c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:07:af:67:d5:9a:4f:ba:c7:16:ed:b8:78:
34:43:cf:77:05:cd:0a:9e:41:4c:bc:8e:16:cf:d0:
22:67:37:a4:7f:71:05:02:87:dd:36:6d:3f:34:97:
29:79:9e:d2:b0:2e:b2:b6:52:66:6a:fe:45:b6:3c:
a3:d3:c7:66:99:33:d2:25:52:a5:e0:cf:0b:0a:f4:
4a:f1:5a:9e:0a:3d:d2:a7:e7:eb:27:4b:8e:cd:22:
c1:07:fd:5b:07:c4:bf:f9:a1:c4:8f:ae:90:70:dc:
fa:5d:00:21:7d:7c:f2:44:79:2b:f0:a9:d7:c3:eb:
25:40:cb:9b:9d:a1:93:27:6b:30:e3:69:82:4c:d7:
94:2b:a0:74:6f:48:01:77:ec:6d:a5:5e:71:2b:e6:
ce:50:32:15:5e:03:38:09:89:32:bb:3e:40:f9:2c:
bd:91:d6:ee:d5:e5:03:47:1c:20:06:9c:6b:a2:a4:
6f:50:98:35:c8:fe:14:41:65:ef:05:67:33:d7:42:
cf:14:57:c0:ca:00:e2:d7:48:dd:57:0f:ae:2b:34:
43:8e:02:18:0e:c2:0d:6f:a3:ca:5c:ba:5f:67:4b:
23:90:88:99:6b:df:91:38:a6:1b:15:4e:74:af:99:
23:33:e5:ea:b5:e7:7f:9a:a9:e5:9d:9e:83:75:f6:
da:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:54:9A:1A:A8:B7:CB:49:79:EC:FE:8F:DC:46:59:9A:97:18:05:C9
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:99:d7:d3:49:95:aa:5d:27:08:cb:43:d1:1c:39:68:1c:98:
93:f1:62:4b:7c:11:d4:da:21:82:b1:1d:7b:0c:e5:5f:d7:58:
2a:c6:ee:e7:76:4f:86:9e:c9:84:47:dd:fc:f1:42:18:82:14:
0c:3d:7b:d9:96:60:ba:f1:46:a2:9c:a3:94:a3:9d:fb:9a:c0:
04:1a:73:04:9d:d8:98:4c:d6:8c:f5:9a:53:4f:d2:bc:55:5c:
b5:27:8c:a0:2d:16:dd:19:0b:4e:37:2d:d9:16:4a:b7:54:6b:
94:3b:87:da:2d:48:b1:df:b2:fc:28:59:41:f2:41:41:4b:a2:
a6:ea:58:be:dc:23:8d:2b:dd:89:0c:7a:cf:06:0b:83:87:59:
50:9d:0d:b8:1d:ac:92:b5:2a:dd:4b:39:b4:5f:d9:39:32:ab:
af:e0:f0:8e:c8:fb:77:33:13:ce:a3:aa:90:c0:4b:2e:e7:c6:
39:c1:0d:84:1c:3e:45:e9:13:3f:94:2e:f4:19:58:83:f0:cd:
ac:d5:6a:00:0f:a1:d3:96:94:1f:a9:4c:ad:3d:2b:18:2f:4f:
5a:e8:d6:b9:4b:e5:17:74:ca:8a:d0:4b:25:dc:16:a2:c7:5b:
ea:a2:8c:42:07:e2:73:0d:ab:b7:42:40:b7:88:79:56:b3:25:
0d:dd:be:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOoQHjHSFqq8Dv5RhK8laMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YzljMzE4OWJlYzEzNzkzMTFiZDEzNTNmYTk3NDlhNjhk
ZDk5MmQwHhcNMjYwMzI1MjMwMDM5WhcNMjYwMzI2MjMwMDM5WjAzMTEwLwYDVQQD
EyhhYzU0OWExYWE4YjdjYjQ5NzllY2ZlOGZkYzQ2NTk5YTk3MTgwNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI0Hr2fVmk+6xxbtuHg0Q893Bc0K
nkFMvI4Wz9AiZzekf3EFAofdNm0/NJcpeZ7SsC6ytlJmav5Ftjyj08dmmTPSJVKl
4M8LCvRK8VqeCj3Sp+frJ0uOzSLBB/1bB8S/+aHEj66QcNz6XQAhfXzyRHkr8KnX
w+slQMubnaGTJ2sw42mCTNeUK6B0b0gBd+xtpV5xK+bOUDIVXgM4CYkyuz5A+Sy9
kdbu1eUDRxwgBpxroqRvUJg1yP4UQWXvBWcz10LPFFfAygDi10jdVw+uKzRDjgIY
DsINb6PKXLpfZ0sjkIiZa9+ROKYbFU50r5kjM+Xqted/mqnlnZ6Ddfba7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxUmhqot8tJeez+j9xGWZqXGAXJMB8GA1UdIwQY
MBaAFJjJwxib7BN5MRvRNT+pdJpo3ZktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEt
OWM4MTZhNDA0OTBlLzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEtOWM4MTZhNDA0OTBl
LzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZnX00mV
ql0nCMtD0Rw5aByYk/FiS3wR1NohgrEdewzlX9dYKsbu53ZPhp7JhEfd/PFCGIIU
DD172ZZguvFGopyjlKOd+5rABBpzBJ3YmEzWjPWaU0/SvFVctSeMoC0W3RkLTjct
2RZKt1RrlDuH2i1Isd+y/ChZQfJBQUuipupYvtwjjSvdiQx6zwYLg4dZUJ0NuB2s
krUq3Us5tF/ZOTKrr+Dwjsj7dzMTzqOqkMBLLufGOcENhBw+RekTP5Qu9BlYg/DN
rNVqAA+h05aUH6lMrT0rGC9PWujWuUvlF3TKitBLJdwWosdb6qKMQgficw2rt0JA
t4h5VrMlDd2+XQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:57 2026 by rpki-client