Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File: mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier: fzt/dWE3NZPIYuLM8G4oaHYjwmJW+yjRCUbHEUghNAE=
Subject key identifier: 6B:6B:C0:F4:CB:44:AE:40:2A:FF:AD:B7:48:93:2A:97:E4:94:D9:78
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer: /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial: 019D27043BFDDA9E0CEE7D32D0EB37CF02AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number: 0630
Signing time: Wed 25 Mar 2026 22:01:22 +0000
Manifest this update: Wed 25 Mar 2026 22:01:22 +0000
Manifest next update: Thu 26 Mar 2026 22:01:22 +0000
Files and hashes: 1: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: MALR0bDT/UEge6X6bQyaum2pY2X9zHb39tUiE0bMMag=)
2: z_44jtrGJfD6zh9PidW-GJCCXns.roa (hash: wkQhSLVYP9oo4jjQ5UZW99eD0rUSG+lto+V5IH7d35w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3b:fd:da:9e:0c:ee:7d:32:d0:eb:37:cf:02:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
Validity
Not Before: Mar 25 22:01:22 2026 GMT
Not After : Mar 26 22:01:22 2026 GMT
Subject: CN=6b6bc0f4cb44ae402affadb748932a97e494d978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:46:d8:83:0c:86:04:82:4f:b2:d7:04:6a:
ec:08:e3:5f:a4:60:06:a4:5a:62:90:30:68:a6:01:
79:25:5d:81:a0:56:35:b6:ed:b3:36:9e:f7:d3:fa:
7e:5e:c0:5c:58:31:60:1b:b9:08:0e:a4:6a:df:7c:
24:a5:78:90:64:d4:e2:37:00:f7:b6:fe:0f:09:e3:
83:91:bc:0a:1f:fe:ff:78:39:3a:52:19:dd:b2:43:
23:a0:05:86:2d:2d:35:dc:ea:ba:8a:15:a2:80:2e:
66:08:ae:a8:bf:5e:34:2d:5b:3f:45:fb:ab:61:45:
57:41:c3:ad:22:a5:01:d5:c8:ad:33:7a:be:c0:d2:
fc:6e:0e:05:27:fb:23:ae:0d:25:9c:78:cd:49:54:
4e:64:4e:bd:5b:81:d6:bb:48:96:3b:28:55:be:de:
09:84:8f:33:70:e7:1b:60:fa:c0:18:c0:03:93:b6:
00:6e:b2:97:a0:c8:82:fa:ae:6e:97:55:14:1e:eb:
10:0a:64:2d:f7:3c:68:d6:09:89:c2:e5:ab:26:0d:
dc:81:d9:07:13:db:2a:65:0f:9f:ea:1f:d2:58:09:
10:e0:6f:83:f1:ea:df:c1:a4:4e:61:0b:c4:46:c5:
f1:2f:b0:8c:b7:02:8f:da:bb:12:92:09:73:f0:14:
ae:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6B:C0:F4:CB:44:AE:40:2A:FF:AD:B7:48:93:2A:97:E4:94:D9:78
X509v3 Authority Key Identifier:
keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e2:aa:1b:94:06:dc:66:35:8d:bc:8b:f6:0e:f1:53:31:1f:
7b:0a:66:db:9f:35:59:56:c5:b6:8d:34:38:1d:93:61:7e:c9:
2b:c4:3a:a5:57:97:da:2f:b6:35:a2:93:ad:c0:ee:62:22:36:
51:85:3f:6d:8e:06:57:ce:39:50:5e:31:17:d3:42:98:7d:5d:
f3:ba:89:f3:5e:9e:69:c8:b9:a2:32:c2:18:46:e1:a3:2e:e4:
88:ed:4d:e6:c0:13:2e:1a:d3:ae:ce:80:06:f8:9e:d1:1f:50:
57:16:80:1f:3f:e5:01:bd:bc:f1:3f:01:8f:65:29:24:d4:28:
00:40:55:ed:74:9d:76:8c:ed:d1:25:f1:54:06:2e:89:77:bc:
5c:a7:fd:e9:3f:03:0d:c0:38:c4:ad:ef:f9:79:4f:8a:b6:2d:
d9:39:62:ee:10:eb:a8:82:55:aa:c0:c9:5a:a9:63:fa:25:61:
31:06:48:7e:cc:bd:bf:ee:4d:70:e9:4e:4d:f6:f7:02:a9:1b:
71:88:1b:5a:82:1b:d2:7e:99:1f:1d:36:3a:a8:53:53:7c:cb:
c5:29:ca:cc:0e:ef:4b:28:be:64:27:20:3e:5b:d2:e5:23:62:
8d:44:66:e5:fd:ec:9a:f7:7c:e8:78:73:72:6f:63:f5:b3:83:
a3:48:aa:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBDv92p4M7n0y0Os3zwKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4Njk5ZTAwYzExNzUxZDAxYjM1ZTM1ZmMwMjk3ZGEyNmVh
Yzc5ZWEwHhcNMjYwMzI1MjIwMTIyWhcNMjYwMzI2MjIwMTIyWjAzMTEwLwYDVQQD
Eyg2YjZiYzBmNGNiNDRhZTQwMmFmZmFkYjc0ODkzMmE5N2U0OTRkOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRFG2IMMhgSCT7LXBGrsCONfpGAG
pFpikDBopgF5JV2BoFY1tu2zNp730/p+XsBcWDFgG7kIDqRq33wkpXiQZNTiNwD3
tv4PCeODkbwKH/7/eDk6UhndskMjoAWGLS013Oq6ihWigC5mCK6ov140LVs/Rfur
YUVXQcOtIqUB1citM3q+wNL8bg4FJ/sjrg0lnHjNSVROZE69W4HWu0iWOyhVvt4J
hI8zcOcbYPrAGMADk7YAbrKXoMiC+q5ul1UUHusQCmQt9zxo1gmJwuWrJg3cgdkH
E9sqZQ+f6h/SWAkQ4G+D8erfwaROYQvERsXxL7CMtwKP2rsSkglz8BSuZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtrwPTLRK5AKv+tt0iTKpfklNl4MB8GA1UdIwQY
MBaAFJhpngDBF1HQGzXjX8ApfaJurHnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xZDQ1OTYtNmFlMy00ODBlLWFkMTYt
NzYxNTFiYjk3MTlkLzEvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xZDQ1OTYtNmFlMy00ODBlLWFkMTYtNzYxNTFiYjk3MTlk
LzEvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeKqG5QG
3GY1jbyL9g7xUzEfewpm2581WVbFto00OB2TYX7JK8Q6pVeX2i+2NaKTrcDuYiI2
UYU/bY4GV845UF4xF9NCmH1d87qJ816eaci5ojLCGEbhoy7kiO1N5sATLhrTrs6A
Bvie0R9QVxaAHz/lAb288T8Bj2UpJNQoAEBV7XSddozt0SXxVAYuiXe8XKf96T8D
DcA4xK3v+XlPirYt2Tli7hDrqIJVqsDJWqlj+iVhMQZIfsy9v+5NcOlOTfb3Aqkb
cYgbWoIb0n6ZHx02OqhTU3zLxSnKzA7vSyi+ZCcgPlvS5SNijURm5f3smvd86Hhz
cm9j9bODo0iqrg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:43 2026 by rpki-client