Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
File: mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json)
Hash identifier: T9i9xzwwD7ZMF60XmxoK408j2jGDxYg3joNA5pN045Y=
Subject key identifier: F9:19:51:58:FD:C3:30:49:2F:E1:18:CD:CA:FE:E2:43:14:EA:09:B0
Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Certificate issuer: /CN=9a961a121c520054df4ce59e5592ac68b0506bef
Certificate serial: 019D2772983D91CC90C838612AE7AF683AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
Manifest number: 087B
Signing time: Thu 26 Mar 2026 00:01:54 +0000
Manifest this update: Thu 26 Mar 2026 00:01:54 +0000
Manifest next update: Fri 27 Mar 2026 00:01:54 +0000
Files and hashes: 1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: H0f4DCAutc58NsNK9fHP8ogJEjzYmISPMsdeRAbmzhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:98:3d:91:cc:90:c8:38:61:2a:e7:af:68:3a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef
Validity
Not Before: Mar 26 00:01:54 2026 GMT
Not After : Mar 27 00:01:54 2026 GMT
Subject: CN=f9195158fdc330492fe118cdcafee24314ea09b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:58:84:60:c3:13:c1:a2:0b:4d:84:38:eb:
5f:25:ac:96:6c:3a:a6:90:fb:11:11:a0:78:ae:16:
80:2a:cb:56:4c:02:fc:17:36:8b:6f:3d:22:e9:37:
ca:e9:42:66:c7:c6:aa:11:b0:67:48:52:5c:76:50:
00:c2:37:a5:24:4a:6d:7b:d8:fc:91:1e:65:dd:ec:
87:63:5f:39:b4:98:0b:b5:a2:8c:a5:01:83:3c:70:
95:08:6a:48:7f:65:0b:41:9f:99:89:95:af:27:f0:
33:c5:d3:cf:da:7f:45:2f:21:1d:6a:8a:d2:d1:54:
f1:1b:f0:1b:fc:8d:4e:46:a9:ed:46:35:78:9a:1c:
15:ec:ca:cc:33:b2:5d:ce:96:04:d2:d9:83:92:1a:
20:0f:f4:1b:6c:d5:fc:75:16:ff:4e:85:18:09:25:
79:04:37:23:34:4d:24:cc:e8:59:2e:18:2a:86:60:
35:9b:13:f6:f2:4d:c1:ce:21:50:89:b3:98:35:35:
1d:44:a0:f8:f6:54:60:dc:d9:53:ab:78:69:17:f2:
da:fb:72:7d:85:28:4b:42:7d:ab:8c:e0:24:98:d2:
88:f4:28:31:5d:d3:f2:be:dd:43:67:76:c2:56:d3:
44:64:a4:4d:c9:cd:ca:9d:9b:48:a0:7c:f2:f6:28:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:51:58:FD:C3:30:49:2F:E1:18:CD:CA:FE:E2:43:14:EA:09:B0
X509v3 Authority Key Identifier:
keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a9:4d:ae:32:7f:b5:47:c3:2c:e7:1a:ed:de:fa:73:cf:aa:
f3:d4:15:1d:d7:0d:d2:06:3f:a8:4f:2a:ba:c1:3d:06:8a:8d:
f6:8d:56:00:15:e4:f7:0c:f5:e4:aa:23:6b:e9:58:2d:0e:27:
5f:ff:f1:36:96:e5:4b:17:e5:3c:61:8e:e7:79:e1:d2:57:1c:
0e:03:48:d2:b7:85:10:bf:9f:c9:50:72:c2:d7:36:fb:61:f3:
0b:71:d7:4c:83:bd:6f:66:f0:81:3d:a0:94:02:51:17:29:4c:
82:3c:66:07:77:97:df:4f:4e:e7:9e:8f:1c:72:c8:9f:40:aa:
87:b7:f1:3b:f3:61:2a:bd:52:02:05:99:68:c4:32:10:46:5f:
44:29:fa:e3:62:da:df:ce:8b:86:ac:a2:1b:8a:25:29:ee:53:
3a:4d:a9:3f:21:bc:b1:b1:8a:92:6c:13:ca:0e:2f:15:81:c5:
b7:74:cb:aa:b7:3b:e7:18:e2:a7:42:c8:ef:b0:07:73:22:2a:
b9:db:45:fa:78:12:8a:2e:82:e3:0b:7b:89:b3:82:1a:28:ca:
60:42:13:a9:f4:cb:09:dd:15:c6:83:91:37:a0:86:a1:e8:62:
e4:ea:63:ec:64:11:50:6c:10:07:e6:bf:2c:c6:97:75:e3:72:
81:75:38:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncpg9kcyQyDhhKuevaDqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTYxYTEyMWM1MjAwNTRkZjRjZTU5ZTU1OTJhYzY4YjA1
MDZiZWYwHhcNMjYwMzI2MDAwMTU0WhcNMjYwMzI3MDAwMTU0WjAzMTEwLwYDVQQD
EyhmOTE5NTE1OGZkYzMzMDQ5MmZlMTE4Y2RjYWZlZTI0MzE0ZWEwOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA5YhGDDE8GiC02EOOtfJayWbDqm
kPsREaB4rhaAKstWTAL8FzaLbz0i6TfK6UJmx8aqEbBnSFJcdlAAwjelJEpte9j8
kR5l3eyHY185tJgLtaKMpQGDPHCVCGpIf2ULQZ+ZiZWvJ/AzxdPP2n9FLyEdaorS
0VTxG/Ab/I1ORqntRjV4mhwV7MrMM7JdzpYE0tmDkhogD/QbbNX8dRb/ToUYCSV5
BDcjNE0kzOhZLhgqhmA1mxP28k3BziFQibOYNTUdRKD49lRg3NlTq3hpF/La+3J9
hShLQn2rjOAkmNKI9CgxXdPyvt1DZ3bCVtNEZKRNyc3KnZtIoHzy9ihxJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkZUVj9wzBJL+EYzcr+4kMU6gmwMB8GA1UdIwQY
MBaAFJqWGhIcUgBU30zlnlWSrGiwUGvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUt
NDhiYzhjYjNjZGFhLzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUtNDhiYzhjYjNjZGFh
LzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKlNrjJ/
tUfDLOca7d76c8+q89QVHdcN0gY/qE8qusE9BoqN9o1WABXk9wz15Koja+lYLQ4n
X//xNpblSxflPGGO53nh0lccDgNI0reFEL+fyVBywtc2+2HzC3HXTIO9b2bwgT2g
lAJRFylMgjxmB3eX309O556PHHLIn0Cqh7fxO/NhKr1SAgWZaMQyEEZfRCn642La
386LhqyiG4olKe5TOk2pPyG8sbGKkmwTyg4vFYHFt3TLqrc75xjip0LI77AHcyIq
udtF+ngSii6C4wt7ibOCGijKYEITqfTLCd0VxoORN6CGoehi5Opj7GQRUGwQB+a/
LMaXdeNygXU4kw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:40:16 2026 by rpki-client