Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
File: cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json)
Hash identifier: tJhB29l099iGOrzbdJxIrKfsUxR+8vXLwAXZ1w//ASg=
Subject key identifier: 39:F3:C6:29:2B:8C:8D:ED:74:7F:35:25:C1:41:22:70:4D:0A:80:A4
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Certificate issuer: /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial: 019D29293FF6C5D50341778A95A6EA0EE7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
Manifest number: 0D1C
Signing time: Thu 26 Mar 2026 08:01:02 +0000
Manifest this update: Thu 26 Mar 2026 08:01:02 +0000
Manifest next update: Fri 27 Mar 2026 08:01:02 +0000
Files and hashes: 1: 5U0lt8-7U6Bnh1gjv-dlcNeKeTY.roa (hash: UBIs7KWUwprkJo3madxcKdCqiT7JAPNDlFNCNOeuufY=)
2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: wBSP2EtOMP9ezSUpRTzddi06qzy9/xl92zLKsRmUfhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3f:f6:c5:d5:03:41:77:8a:95:a6:ea:0e:e7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Validity
Not Before: Mar 26 08:01:02 2026 GMT
Not After : Mar 27 08:01:02 2026 GMT
Subject: CN=39f3c6292b8c8ded747f3525c14122704d0a80a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:38:8b:c6:16:f4:b6:8c:55:c4:af:88:b6:
19:89:ad:42:5b:d0:1c:80:19:2d:f0:15:cb:d5:7f:
6b:70:22:34:6e:3d:82:7b:25:db:a0:00:2b:8e:c8:
ad:61:fb:f1:0a:65:81:88:b3:ef:62:f9:79:ef:14:
4b:7d:77:ec:4d:df:fc:ca:57:42:5a:77:88:70:bb:
26:ea:f9:99:6f:b6:32:02:fe:ea:c3:43:bf:3d:a4:
80:ee:8f:e6:12:27:88:23:ed:a4:64:e1:01:5a:b7:
6d:87:2a:c1:e9:6f:c9:af:ee:23:f7:cb:16:16:89:
6c:9f:93:34:d7:c4:3a:b5:b2:41:3c:80:0f:6d:b2:
c8:f6:19:ae:d3:19:ff:14:9f:e7:26:11:43:a2:93:
18:e0:51:76:0c:19:bd:2f:27:c6:b0:59:b9:0e:fa:
81:06:e0:b0:55:87:4e:d4:72:2f:a8:78:7c:91:ca:
69:f1:ab:9c:ab:fe:0b:59:84:62:10:4a:5c:38:33:
fd:e4:d4:b8:dd:ac:e2:27:fb:48:c0:c3:6b:d2:ee:
2a:07:f3:1a:61:b1:e7:13:f6:d4:c1:66:d2:10:d2:
db:9a:52:97:10:96:f7:05:40:98:a5:17:30:6d:5c:
f3:c9:c1:09:46:3d:ed:b2:c1:8d:7e:b3:43:e8:a9:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F3:C6:29:2B:8C:8D:ED:74:7F:35:25:C1:41:22:70:4D:0A:80:A4
X509v3 Authority Key Identifier:
keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:51:92:78:ef:f2:ef:9a:92:39:69:e2:d0:7b:e6:d2:e5:0d:
05:46:58:4b:78:6c:61:8f:77:a3:f2:40:fc:bd:fd:ea:2f:ce:
75:35:8a:d7:68:af:11:71:11:be:4b:69:0f:69:b1:49:7f:e8:
a8:59:c2:f1:d4:b8:6a:25:cb:3c:83:6b:4e:19:c2:86:5c:e4:
c1:90:27:35:b9:19:c3:42:a3:39:f6:89:81:dd:e1:d0:f7:65:
8e:c4:e4:93:c0:95:d9:83:8f:4e:2a:2a:59:54:bf:19:a7:25:
73:1b:83:89:8c:8b:67:f3:43:95:a0:b2:0a:21:6f:92:cf:20:
43:9e:46:71:0f:f4:4f:9a:76:61:71:e1:4d:94:96:97:c2:d6:
ee:e7:c1:a6:9e:24:6e:5b:bf:50:f9:50:b4:1d:56:34:af:1f:
8a:5f:6e:61:f7:7d:37:5c:09:21:fa:f6:dc:af:9d:88:9b:d5:
94:d1:31:e4:27:18:04:0c:7e:43:c0:69:53:3d:64:4a:95:3a:
12:83:e3:40:c7:d6:07:b7:79:10:94:7e:21:a1:34:c9:82:9d:
45:78:96:44:d8:ae:cb:e1:31:7d:50:25:e2:bf:29:6f:ed:5c:
a8:d9:16:5a:4e:fe:ad:65:8b:69:cb:bc:cd:61:b0:dc:03:7a:
50:15:12:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKT/2xdUDQXeKlabqDufpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwY2I5NjU0M2Y3ZTE5NTcyM2U2ZDEyMmMyOTQ3OGJmZGRh
MDNlY2MwHhcNMjYwMzI2MDgwMTAyWhcNMjYwMzI3MDgwMTAyWjAzMTEwLwYDVQQD
EygzOWYzYzYyOTJiOGM4ZGVkNzQ3ZjM1MjVjMTQxMjI3MDRkMGE4MGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArko4i8YW9LaMVcSviLYZia1CW9Ac
gBkt8BXL1X9rcCI0bj2CeyXboAArjsitYfvxCmWBiLPvYvl57xRLfXfsTd/8yldC
WneIcLsm6vmZb7YyAv7qw0O/PaSA7o/mEieII+2kZOEBWrdthyrB6W/Jr+4j98sW
Folsn5M018Q6tbJBPIAPbbLI9hmu0xn/FJ/nJhFDopMY4FF2DBm9LyfGsFm5DvqB
BuCwVYdO1HIvqHh8kcpp8aucq/4LWYRiEEpcODP95NS43aziJ/tIwMNr0u4qB/Ma
YbHnE/bUwWbSENLbmlKXEJb3BUCYpRcwbVzzycEJRj3tssGNfrND6KkocQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnzxikrjI3tdH81JcFBInBNCoCkMB8GA1UdIwQY
MBaAFHDLllQ/fhlXI+bRIsKUeL/doD7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMt
Mjc0Y2Q2Y2FhM2YzLzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMtMjc0Y2Q2Y2FhM2Yz
LzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblGSeO/y
75qSOWni0Hvm0uUNBUZYS3hsYY93o/JA/L396i/OdTWK12ivEXERvktpD2mxSX/o
qFnC8dS4aiXLPINrThnChlzkwZAnNbkZw0KjOfaJgd3h0PdljsTkk8CV2YOPTioq
WVS/GaclcxuDiYyLZ/NDlaCyCiFvks8gQ55GcQ/0T5p2YXHhTZSWl8LW7ufBpp4k
blu/UPlQtB1WNK8fil9uYfd9N1wJIfr23K+diJvVlNEx5CcYBAx+Q8BpUz1kSpU6
EoPjQMfWB7d5EJR+IaE0yYKdRXiWRNiuy+ExfVAl4r8pb+1cqNkWWk7+rWWLacu8
zWGw3AN6UBUSvA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:02 2026 by rpki-client