Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier: 3IbBpIxIgwHY1vDiJ3ZrercvvEya9ezf2N3arUcRrJw=
Subject key identifier: 4B:C8:13:90:71:DF:C6:8F:2E:D2:B5:F4:C9:5C:90:DE:45:8B:DA:AA
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 019D25BA8FA0662EA827FD2E91B5CFD89500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number: 06CF
Signing time: Wed 25 Mar 2026 16:01:16 +0000
Manifest this update: Wed 25 Mar 2026 16:01:16 +0000
Manifest next update: Thu 26 Mar 2026 16:01:16 +0000
Files and hashes: 1: AdH5Pv_yZHR3VpVIKZ5T98qIBYQ.roa (hash: PaFAX4cYCUSQ989JdqFr+sKEgVGux2BKRdzjdwg/7DM=)
2: KwhaP0QeniVGjiTkn66bneMlJeY.roa (hash: iAwNlU5aGm8yC+EuRcL1q9j42YQqvBEOhpW7b2OSjjU=)
3: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: PFq4GxRH7fXbC3R4tp+PWvP79Im32Fo+teSTwlyDVok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:8f:a0:66:2e:a8:27:fd:2e:91:b5:cf:d8:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Mar 25 16:01:16 2026 GMT
Not After : Mar 26 16:01:16 2026 GMT
Subject: CN=4bc8139071dfc68f2ed2b5f4c95c90de458bdaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:5c:cd:54:28:7d:46:dd:81:7c:0e:da:0e:
dd:36:2c:7c:84:36:d0:13:51:9a:c1:fa:2d:f8:c5:
01:97:82:3e:50:90:21:42:c7:28:8d:99:c1:a8:7e:
18:ea:9d:e5:f7:2e:a9:b5:85:bc:bc:82:75:2c:3c:
30:cc:69:a3:3b:cb:ba:ff:53:5e:1b:37:43:48:77:
e1:7b:01:83:7b:0e:3e:3a:a3:3c:85:73:4d:ca:9b:
84:cc:ea:ee:32:64:a7:6a:28:5c:4b:e3:b8:0f:39:
9c:91:23:73:14:75:4d:92:14:81:1b:cb:9f:d6:94:
6b:b8:4b:bd:fb:a8:9d:02:8c:c7:76:20:bc:ec:d9:
52:b5:fb:fa:a5:4a:8e:7f:3d:2b:38:8b:69:31:ac:
82:21:7b:eb:23:22:7a:49:44:be:5e:dd:c4:07:dd:
6c:ea:06:2e:83:f8:17:72:ad:cb:41:5a:1f:a5:e0:
2e:f2:ef:a9:2c:3e:c1:f6:09:9a:0d:9a:a3:1d:2b:
29:bb:96:ec:a6:3d:81:9d:64:9e:8f:b2:19:9b:1c:
93:32:20:41:a6:b7:48:63:ae:57:52:9f:f5:65:b3:
42:94:96:b8:f4:52:55:c9:41:92:a3:8b:49:4d:83:
ea:60:9e:7e:18:db:bc:ba:8a:27:90:5c:db:68:0f:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:13:90:71:DF:C6:8F:2E:D2:B5:F4:C9:5C:90:DE:45:8B:DA:AA
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4c:61:0b:63:54:46:bb:ea:3b:2c:3f:66:03:6e:b3:ee:5f:
ea:87:02:e0:49:06:b3:80:8d:09:43:81:7b:d9:ea:c7:95:b3:
73:f7:58:f3:1e:fc:1d:65:21:37:a7:3d:77:ed:66:f1:48:8c:
9e:c6:82:f7:c4:a7:bd:6f:19:de:89:34:f0:85:cf:be:26:18:
1f:1a:c5:2d:b7:3d:0a:88:d7:f9:61:b7:7c:d0:79:1d:d9:2c:
7e:f1:a0:c8:16:5e:a3:fd:60:7a:63:b4:ba:ff:45:85:d6:d7:
31:9a:7a:21:9d:9b:8b:47:30:1b:0a:a4:2e:78:69:38:6a:cd:
f6:c6:d9:4d:0a:25:6c:e5:b4:f3:95:ca:82:0c:8a:66:a0:04:
9a:db:39:20:e4:ad:a5:9b:47:f9:9d:0d:fa:97:58:d2:c4:10:
73:ce:33:74:78:84:f7:ef:91:df:0c:87:a1:0c:63:26:59:6d:
4e:38:0a:6b:ad:45:9a:37:de:19:92:c0:ae:71:2a:11:7a:c5:
66:40:b8:f9:25:07:2e:15:67:92:66:27:ff:d6:89:73:f6:0e:
3a:c7:a2:c7:97:61:a6:74:9d:83:67:47:b2:a4:b1:d5:4b:1b:
87:70:0b:3d:c4:3c:ea:86:96:13:17:eb:92:63:c1:b1:7e:f7:
5b:69:de:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luo+gZi6oJ/0ukbXP2JUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNGVmNzZlYjc5MDc0ZTY5YzczMzAyY2U0YzJlMGFmNDdm
NDUzMDcwHhcNMjYwMzI1MTYwMTE2WhcNMjYwMzI2MTYwMTE2WjAzMTEwLwYDVQQD
Eyg0YmM4MTM5MDcxZGZjNjhmMmVkMmI1ZjRjOTVjOTBkZTQ1OGJkYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOpczVQofUbdgXwO2g7dNix8hDbQ
E1Gawfot+MUBl4I+UJAhQscojZnBqH4Y6p3l9y6ptYW8vIJ1LDwwzGmjO8u6/1Ne
GzdDSHfhewGDew4+OqM8hXNNypuEzOruMmSnaihcS+O4DzmckSNzFHVNkhSBG8uf
1pRruEu9+6idAozHdiC87NlStfv6pUqOfz0rOItpMayCIXvrIyJ6SUS+Xt3EB91s
6gYug/gXcq3LQVofpeAu8u+pLD7B9gmaDZqjHSspu5bspj2BnWSej7IZmxyTMiBB
prdIY65XUp/1ZbNClJa49FJVyUGSo4tJTYPqYJ5+GNu8uoonkFzbaA+s2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvIE5Bx38aPLtK19MlckN5Fi9qqMB8GA1UdIwQY
MBaAFDJO9263kHTmnHMwLOTC4K9H9FMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kNGI1NDItNjM5Mi00M2QwLWE4YzIt
MmNhZGNmNjY1OGNhLzEvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kNGI1NDItNjM5Mi00M2QwLWE4YzItMmNhZGNmNjY1OGNh
LzEvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkxhC2NU
RrvqOyw/ZgNus+5f6ocC4EkGs4CNCUOBe9nqx5Wzc/dY8x78HWUhN6c9d+1m8UiM
nsaC98SnvW8Z3ok08IXPviYYHxrFLbc9CojX+WG3fNB5HdksfvGgyBZeo/1gemO0
uv9FhdbXMZp6IZ2bi0cwGwqkLnhpOGrN9sbZTQolbOW085XKggyKZqAEmts5IOSt
pZtH+Z0N+pdY0sQQc84zdHiE9++R3wyHoQxjJlltTjgKa61FmjfeGZLArnEqEXrF
ZkC4+SUHLhVnkmYn/9aJc/YOOseix5dhpnSdg2dHsqSx1Usbh3ALPcQ86oaWExfr
kmPBsX73W2nelA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:25 2026 by rpki-client