Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
File: MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft (raw, json)
Hash identifier: /xJTaIr9Uwh5Fx6whbOS/i429/ZNbon0wfyT7x1isNU=
Subject key identifier: F6:84:85:FD:25:2C:BF:B3:6D:B1:AE:76:8D:15:D8:B5:C7:D8:16:A7
Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Certificate issuer: /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Certificate serial: 019D2884336EA6529A323FE0F267BB406960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:00:45 +0000
Manifest this update: Thu 26 Mar 2026 05:00:45 +0000
Manifest next update: Fri 27 Mar 2026 05:00:45 +0000
Files and hashes: 1: M1tXxXhsBhX0I_ZbDRKd9eW6s0U.roa (hash: 6xzXp9P9AUTeSSPJaJ/qtZlUIhfXwQniMZG8y5cXdRk=)
2: MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl (hash: 3sTiUJ4efRsbsdkjQqQ9CHnFJYKJMoOUG+dxasBW+lo=)
3: qKI5wAG2ROLePU2bxpTliU4_gOI.roa (hash: 6rZKevOcyvBG0z3M8yuHlYMNPd59EunB5hcmpuXshjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:33:6e:a6:52:9a:32:3f:e0:f2:67:bb:40:69:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Validity
Not Before: Mar 26 05:00:45 2026 GMT
Not After : Mar 27 05:00:45 2026 GMT
Subject: CN=f68485fd252cbfb36db1ae768d15d8b5c7d816a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:72:bc:64:05:d6:e5:f2:aa:c2:0e:91:84:
e5:ab:2e:11:74:c3:ea:4a:db:9d:d5:8d:ea:b1:a4:
a4:1d:51:7e:e2:e6:92:e2:03:32:e2:98:54:c1:57:
96:4a:9d:53:00:e5:e5:62:3f:08:c9:44:51:cf:ca:
22:e8:ea:53:b4:92:80:94:eb:a9:f2:da:cb:fd:d3:
8a:f4:b2:ce:f6:a4:bb:d1:bd:1b:86:1d:ca:88:7e:
33:d3:00:15:f1:58:51:d8:44:af:09:5b:8e:0a:b4:
36:36:0e:f7:51:74:e1:7e:70:f7:32:ca:32:62:6a:
54:7e:fc:6f:2d:4a:c5:29:c1:fb:b1:56:aa:96:5e:
22:ee:cf:f7:c6:3b:a0:8f:f5:f3:0e:b5:4f:b2:5d:
17:85:53:7d:61:bc:c7:e5:cf:f0:4c:aa:a6:0a:28:
12:ec:44:b7:96:42:19:6b:4a:4a:01:ab:04:8d:77:
8f:44:d4:2e:29:90:7b:b5:14:ef:7a:88:d5:15:aa:
59:dc:12:05:1b:15:d3:a7:23:77:28:14:3f:4b:a2:
bb:24:15:86:69:c4:ba:78:11:27:ac:98:96:80:10:
79:e5:e5:72:5b:fb:f9:b3:0e:dc:d1:ae:88:83:49:
60:49:1c:db:8a:95:24:5b:11:33:89:01:81:c2:b7:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:84:85:FD:25:2C:BF:B3:6D:B1:AE:76:8D:15:D8:B5:C7:D8:16:A7
X509v3 Authority Key Identifier:
keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:72:70:5e:cc:d5:8c:62:00:81:11:99:d3:95:4a:2e:b8:64:
a2:e3:c5:6c:81:59:85:39:58:f3:3a:1d:0f:7b:5f:46:5d:14:
1e:c8:ac:80:7d:f8:1b:dd:ba:c1:da:72:f6:1a:44:09:57:d1:
c4:da:90:49:82:f9:43:f9:10:5d:ef:a7:f0:df:de:51:52:bd:
6a:0b:47:5a:3d:80:a6:e2:5f:32:8f:71:8a:3e:5c:97:39:ea:
8d:6e:4b:a9:81:15:c8:8e:e0:02:76:28:8c:6f:d9:35:4b:ae:
e2:f7:17:f6:d4:08:80:94:0c:40:cd:48:dc:47:f7:fe:e7:5d:
2d:ed:d4:d7:1b:ac:e1:86:a6:aa:b7:61:8d:9f:a4:42:e7:8f:
d1:ac:30:e1:c2:c2:b5:c3:0d:47:d8:1e:52:43:b7:06:d1:4e:
03:13:d1:77:42:ad:c0:fc:c4:85:31:3e:c0:a2:f1:f0:4f:c2:
ff:a1:8d:02:59:ed:b9:fa:71:c4:25:e2:fb:4c:b7:43:93:2e:
7f:e1:47:ec:11:ce:83:a9:5a:51:67:03:b5:07:75:32:be:7d:
c5:db:3a:67:07:a6:99:1f:43:5f:c2:e3:19:b6:20:8b:65:d1:
6a:14:71:c6:22:4a:e7:76:70:9f:af:ac:b4:86:73:f2:60:1f:
12:23:ba:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohDNuplKaMj/g8me7QGlgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOTY3YTc3NDczNjVjODE5ZGU2MDc2ZjdmNWFhMGJhM2M5
ZTU5OGEwHhcNMjYwMzI2MDUwMDQ1WhcNMjYwMzI3MDUwMDQ1WjAzMTEwLwYDVQQD
EyhmNjg0ODVmZDI1MmNiZmIzNmRiMWFlNzY4ZDE1ZDhiNWM3ZDgxNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmtyvGQF1uXyqsIOkYTlqy4RdMPq
Stud1Y3qsaSkHVF+4uaS4gMy4phUwVeWSp1TAOXlYj8IyURRz8oi6OpTtJKAlOup
8trL/dOK9LLO9qS70b0bhh3KiH4z0wAV8VhR2ESvCVuOCrQ2Ng73UXThfnD3Msoy
YmpUfvxvLUrFKcH7sVaqll4i7s/3xjugj/XzDrVPsl0XhVN9YbzH5c/wTKqmCigS
7ES3lkIZa0pKAasEjXePRNQuKZB7tRTveojVFapZ3BIFGxXTpyN3KBQ/S6K7JBWG
acS6eBEnrJiWgBB55eVyW/v5sw7c0a6Ig0lgSRzbipUkWxEziQGBwrew4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaEhf0lLL+zbbGudo0V2LXH2BanMB8GA1UdIwQY
MBaAFDKWendHNlyBneYHb39aoLo8nlmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXBaNmQwYzJYSUdkNWdkdmYxcWd1anllV1lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8zZTc3ZGMtNDg2OC00MWQ0LTkwYzQt
MmFjOGJjZDgzNTUwLzEvTXBaNmQwYzJYSUdkNWdkdmYxcWd1anllV1lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8zZTc3ZGMtNDg2OC00MWQ0LTkwYzQtMmFjOGJjZDgzNTUw
LzEvTXBaNmQwYzJYSUdkNWdkdmYxcWd1anllV1lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3JwXszV
jGIAgRGZ05VKLrhkouPFbIFZhTlY8zodD3tfRl0UHsisgH34G926wdpy9hpECVfR
xNqQSYL5Q/kQXe+n8N/eUVK9agtHWj2ApuJfMo9xij5clznqjW5LqYEVyI7gAnYo
jG/ZNUuu4vcX9tQIgJQMQM1I3Ef3/uddLe3U1xus4YamqrdhjZ+kQueP0aww4cLC
tcMNR9geUkO3BtFOAxPRd0KtwPzEhTE+wKLx8E/C/6GNAlntufpxxCXi+0y3Q5Mu
f+FH7BHOg6laUWcDtQd1Mr59xds6ZwemmR9DX8LjGbYgi2XRahRxxiJK53Zwn6+s
tIZz8mAfEiO6lg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:06 2026 by rpki-client