Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier: 0bhQ9oGZERKcXUdAbxmQLzNJwnoaQiuRz8j3oGAeSFs=
Subject key identifier: 2F:26:DD:3A:A6:60:90:6B:DA:8A:44:8B:47:2D:75:33:4F:87:03:F9
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 019D333E95BD7AFD756B8B420C301551722F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number: 158A
Signing time: Sat 28 Mar 2026 07:00:32 +0000
Manifest this update: Sat 28 Mar 2026 07:00:32 +0000
Manifest next update: Sun 29 Mar 2026 07:00:32 +0000
Files and hashes: 1: 6gns6SXWZHRNUOeXxrnaYPt2iPI.roa (hash: 2K/ErF0fBlInTkrCVmgWybpgbKNM5gwfUM6rQZ6+hmo=)
2: 8nV4vFfsDdbYHG_8dhnhA4saFx4.roa (hash: yK23USlyZ4ypyu72ZSS+wzmBEI3NT4eQI2K3BvZ7Rr8=)
3: H0WuN-evx28DphAbnO4rgqyNUII.roa (hash: Z7/OMFG5EnjIGx0KFxCCkYkOVMTzdARLKHmfYN06UUo=)
4: cCEk2ZBKCpMVhF8SRJgY9iNKU4U.roa (hash: mXYq5QS9xnl4sRFedgWj9pBtcqZFgiaHE6J/4WbD9rw=)
5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: 5zc9cYP2qaviba4KTutHxWTXJqiHLxal/wSCb/mdDAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:95:bd:7a:fd:75:6b:8b:42:0c:30:15:51:72:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Mar 28 07:00:32 2026 GMT
Not After : Mar 29 07:00:32 2026 GMT
Subject: CN=2f26dd3aa660906bda8a448b472d75334f8703f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:e5:2d:0b:ca:b5:3d:3d:ef:97:bf:e3:84:
ce:d9:90:59:27:e8:6d:50:08:51:f3:03:1f:d3:43:
ee:ef:a8:23:97:e9:84:01:99:88:a7:a3:6f:b0:cc:
01:8b:3b:9b:89:66:7b:31:dc:e7:4d:ea:4f:87:ee:
a9:57:37:4c:4a:7c:e0:06:ff:d6:82:9a:21:10:77:
b7:79:ff:d3:e4:9b:40:ce:e1:5d:09:f1:aa:94:81:
03:62:88:a3:3a:b3:8b:f7:a5:4a:b4:2f:66:3c:1a:
b8:84:78:03:17:51:bf:be:c7:d1:28:bd:51:6f:b3:
be:94:8d:78:67:d3:25:19:a9:54:fe:08:64:b6:16:
c3:13:c6:0b:c1:70:d7:4f:13:77:78:20:6f:f5:1d:
b3:e0:bd:2a:df:93:6e:5a:6e:af:63:e9:18:5f:08:
50:7d:3c:8e:79:94:b0:d1:ca:fd:f2:08:fa:b5:ed:
04:90:7d:4b:0b:8f:2c:80:8c:7e:43:6e:fd:7e:10:
67:0d:8c:ee:11:ae:71:5a:be:be:b4:b7:3c:55:b4:
6c:36:0e:9f:f8:bd:10:96:6a:23:e8:4f:7f:1d:8b:
67:23:63:4a:0d:f9:7d:e8:77:40:4f:04:6f:7a:9b:
a9:de:1c:36:b9:96:59:86:cf:96:0c:a2:49:ce:95:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:26:DD:3A:A6:60:90:6B:DA:8A:44:8B:47:2D:75:33:4F:87:03:F9
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b9:4b:54:dd:b1:56:6d:2b:e3:82:7b:07:47:8e:e3:1e:a4:
47:7c:a2:cf:67:c8:ec:a0:7b:4b:e2:e3:ce:1f:c8:f5:56:9c:
4a:ce:c4:62:49:7d:47:35:52:5d:10:6c:a0:35:9a:b9:91:5b:
ae:1c:ba:bc:44:2d:ea:1f:d9:aa:64:dd:ba:9b:1c:99:bc:98:
21:68:f3:49:ea:de:e6:9c:4f:86:7a:e5:40:27:ac:08:49:56:
5a:27:a1:2e:57:ec:fd:19:ab:ec:34:21:bb:86:19:41:ca:af:
b8:fc:60:cc:a4:08:a2:60:f6:24:77:18:5b:03:4a:6c:14:19:
87:d6:a4:2c:d4:39:76:1c:10:9e:2e:ef:a3:16:09:49:d9:ce:
6c:08:61:14:ee:84:4e:14:62:9c:2d:9e:5f:0f:0d:09:f6:49:
be:96:86:6e:ed:3b:0e:cf:54:0b:3c:6f:47:7d:ee:17:6d:8c:
8c:b3:8d:e1:e8:a1:d0:83:2f:93:12:42:49:82:5a:e8:fa:fb:
ca:fb:ca:78:de:21:ca:2c:01:5b:f6:7c:7e:e2:a3:a6:39:56:
5a:9a:f0:5f:eb:82:4c:13:fb:f6:ea:c8:e9:b5:47:8f:fc:77:
e1:44:1a:3b:37:3d:f0:40:8a:b4:34:b6:80:81:ec:60:22:27:
33:72:bc:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPpW9ev11a4tCDDAVUXIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2U3N2Y3ZDkxNjUxM2I4NDkxNDg0OTk1MGZlNDNmNTU2
OTRmZGEwHhcNMjYwMzI4MDcwMDMyWhcNMjYwMzI5MDcwMDMyWjAzMTEwLwYDVQQD
EygyZjI2ZGQzYWE2NjA5MDZiZGE4YTQ0OGI0NzJkNzUzMzRmODcwM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuLlLQvKtT0975e/44TO2ZBZJ+ht
UAhR8wMf00Pu76gjl+mEAZmIp6NvsMwBizubiWZ7MdznTepPh+6pVzdMSnzgBv/W
gpohEHe3ef/T5JtAzuFdCfGqlIEDYoijOrOL96VKtC9mPBq4hHgDF1G/vsfRKL1R
b7O+lI14Z9MlGalU/ghkthbDE8YLwXDXTxN3eCBv9R2z4L0q35NuWm6vY+kYXwhQ
fTyOeZSw0cr98gj6te0EkH1LC48sgIx+Q279fhBnDYzuEa5xWr6+tLc8VbRsNg6f
+L0Qlmoj6E9/HYtnI2NKDfl96HdATwRvepup3hw2uZZZhs+WDKJJzpWFCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8m3TqmYJBr2opEi0ctdTNPhwP5MB8GA1UdIwQY
MBaAFJnOd/fZFlE7hJFISZUP5D9VaU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAt
ZjM1MzczZGE3ZGViLzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAtZjM1MzczZGE3ZGVi
LzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrlLVN2x
Vm0r44J7B0eO4x6kR3yiz2fI7KB7S+Ljzh/I9VacSs7EYkl9RzVSXRBsoDWauZFb
rhy6vEQt6h/ZqmTdupscmbyYIWjzSere5pxPhnrlQCesCElWWiehLlfs/Rmr7DQh
u4YZQcqvuPxgzKQIomD2JHcYWwNKbBQZh9akLNQ5dhwQni7voxYJSdnObAhhFO6E
ThRinC2eXw8NCfZJvpaGbu07Ds9UCzxvR33uF22MjLON4eih0IMvkxJCSYJa6Pr7
yvvKeN4hyiwBW/Z8fuKjpjlWWprwX+uCTBP79urI6bVHj/x34UQaOzc98ECKtDS2
gIHsYCInM3K8wQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:02 2026 by rpki-client