Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.mft
File: MhbvzNFel4pwQKXUt5xBf7lmvyg.mft (raw, json)
Hash identifier: gphZD0k2dR4zMcDZi4kpO+x7tnIw5JIVWIPAv7kOC50=
Subject key identifier: D7:63:88:5B:7B:10:85:51:28:F8:DC:05:97:57:D9:8A:BC:93:39:1C
Authority key identifier: 32:16:EF:CC:D1:5E:97:8A:70:40:A5:D4:B7:9C:41:7F:B9:66:BF:28
Certificate issuer: /CN=3216efccd15e978a7040a5d4b79c417fb966bf28
Certificate serial: 019D25F18A4B0E1E2D2EE079EF7D34C0503A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhbvzNFel4pwQKXUt5xBf7lmvyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.mft
Manifest number: 02F2
Signing time: Wed 25 Mar 2026 17:01:19 +0000
Manifest this update: Wed 25 Mar 2026 17:01:19 +0000
Manifest next update: Thu 26 Mar 2026 17:01:19 +0000
Files and hashes: 1: HK3a_MSoCFsWxP7dXHlGkzJCrow.roa (hash: 9PqcF0/wOP05Xf/mJxyWiie3iSsWOLdkJsmMvxWY/NI=)
2: MhbvzNFel4pwQKXUt5xBf7lmvyg.crl (hash: SykEcUP0HHfEjCKY9NXKl1RmrKyV90pXz44DVb+yjTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhbvzNFel4pwQKXUt5xBf7lmvyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:8a:4b:0e:1e:2d:2e:e0:79:ef:7d:34:c0:50:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3216efccd15e978a7040a5d4b79c417fb966bf28
Validity
Not Before: Mar 25 17:01:19 2026 GMT
Not After : Mar 26 17:01:19 2026 GMT
Subject: CN=d763885b7b10855128f8dc059757d98abc93391c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ef:78:33:9f:f3:f6:1a:ab:9e:a9:8c:b2:cc:
90:6a:f6:e9:e0:c5:c6:2b:41:28:66:99:62:91:25:
bc:ca:ed:27:b5:1d:05:a5:b8:44:3c:c9:85:bd:74:
01:a6:fb:1a:d7:4a:b1:6e:b0:20:95:4e:ee:31:85:
71:f5:97:50:d5:50:0f:5a:33:80:1e:52:5d:97:9c:
db:84:a8:02:21:6a:5c:c6:59:e1:bc:c3:52:7e:73:
f2:94:90:4b:93:67:aa:87:3e:49:05:47:96:b0:a0:
21:7c:44:e7:7b:e4:53:9a:5c:1c:6a:86:c7:41:b9:
a6:74:74:fa:44:88:85:b9:95:d8:83:45:45:58:7f:
dc:cd:04:55:82:a8:7a:5a:4d:5e:9f:b0:e4:ab:e6:
c2:00:ea:3c:0b:ad:36:52:97:e7:d1:df:8e:58:72:
ee:c0:a4:ec:6d:67:b9:8d:d3:e9:4e:00:d1:4a:38:
d9:24:c5:ff:39:75:f6:f4:54:4c:34:a5:50:94:c9:
8b:b0:0e:31:a6:66:38:d8:e2:06:35:93:4a:81:66:
97:e2:e4:4b:76:cf:1d:ec:d6:73:56:e2:c1:d2:98:
5d:a3:b3:b7:db:1d:e0:8d:13:a5:ec:43:fe:06:0f:
ab:93:f8:c8:93:0d:e5:ca:7a:ba:71:80:c5:a6:3c:
49:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:63:88:5B:7B:10:85:51:28:F8:DC:05:97:57:D9:8A:BC:93:39:1C
X509v3 Authority Key Identifier:
keyid:32:16:EF:CC:D1:5E:97:8A:70:40:A5:D4:B7:9C:41:7F:B9:66:BF:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhbvzNFel4pwQKXUt5xBf7lmvyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:16:ca:7b:19:b0:fb:43:a0:71:d3:29:6d:4c:72:97:17:a9:
5c:b0:cb:9b:49:bb:f5:c3:96:6a:67:5e:8f:de:ea:4d:61:2c:
4c:28:00:bd:9a:4d:cd:a4:8c:3c:07:b8:50:a1:71:f7:75:cb:
51:b5:10:1c:6a:35:2c:e1:94:bf:18:38:22:45:55:d1:3c:0b:
b5:17:3f:ff:06:bf:66:97:2d:df:9e:ec:3d:54:d8:57:2b:8f:
a5:95:8b:ec:ab:2f:48:34:cb:02:b5:b9:08:ab:b2:4d:e3:9a:
3a:8b:37:60:2a:a2:d2:d3:c1:55:74:3d:9d:e9:bb:89:ae:1b:
c0:eb:5b:09:31:32:52:da:b1:3a:8f:b1:38:32:0e:45:c3:57:
3b:98:81:48:d9:91:a8:c1:0b:fe:a1:6b:fc:16:c2:36:4a:bf:
17:39:e6:49:25:af:43:e9:01:40:ac:7c:eb:30:d2:d3:14:e1:
3e:b8:a2:dd:16:3c:8a:e6:9e:de:c6:cc:ae:84:6e:05:48:86:
0b:39:67:69:32:42:1d:70:ca:b7:ff:e2:33:2c:54:ff:45:66:
7e:a4:0a:03:0e:ca:92:19:ac:8a:65:c6:7e:46:f7:e1:a9:62:
eb:69:b1:46:97:1a:78:c5:9e:e7:00:19:ee:98:03:1b:14:d5:
29:d2:f5:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8YpLDh4tLuB57300wFA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMTZlZmNjZDE1ZTk3OGE3MDQwYTVkNGI3OWM0MTdmYjk2
NmJmMjgwHhcNMjYwMzI1MTcwMTE5WhcNMjYwMzI2MTcwMTE5WjAzMTEwLwYDVQQD
EyhkNzYzODg1YjdiMTA4NTUxMjhmOGRjMDU5NzU3ZDk4YWJjOTMzOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu94M5/z9hqrnqmMssyQavbp4MXG
K0EoZplikSW8yu0ntR0FpbhEPMmFvXQBpvsa10qxbrAglU7uMYVx9ZdQ1VAPWjOA
HlJdl5zbhKgCIWpcxlnhvMNSfnPylJBLk2eqhz5JBUeWsKAhfETne+RTmlwcaobH
QbmmdHT6RIiFuZXYg0VFWH/czQRVgqh6Wk1en7Dkq+bCAOo8C602Upfn0d+OWHLu
wKTsbWe5jdPpTgDRSjjZJMX/OXX29FRMNKVQlMmLsA4xpmY42OIGNZNKgWaX4uRL
ds8d7NZzVuLB0phdo7O32x3gjROl7EP+Bg+rk/jIkw3lynq6cYDFpjxJjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdjiFt7EIVRKPjcBZdX2Yq8kzkcMB8GA1UdIwQY
MBaAFDIW78zRXpeKcECl1LecQX+5Zr8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWhidnpORmVsNHB3UUtYVXQ1eEJmN2xtdnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8zYTlkYmYtMDFkMi00ZjEwLTgxM2Qt
ZWFiNjFkZGI4OThhLzEvTWhidnpORmVsNHB3UUtYVXQ1eEJmN2xtdnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8zYTlkYmYtMDFkMi00ZjEwLTgxM2QtZWFiNjFkZGI4OThh
LzEvTWhidnpORmVsNHB3UUtYVXQ1eEJmN2xtdnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxbKexmw
+0OgcdMpbUxylxepXLDLm0m79cOWamdej97qTWEsTCgAvZpNzaSMPAe4UKFx93XL
UbUQHGo1LOGUvxg4IkVV0TwLtRc//wa/Zpct357sPVTYVyuPpZWL7KsvSDTLArW5
CKuyTeOaOos3YCqi0tPBVXQ9nem7ia4bwOtbCTEyUtqxOo+xODIORcNXO5iBSNmR
qMEL/qFr/BbCNkq/FznmSSWvQ+kBQKx86zDS0xThPrii3RY8iuae3sbMroRuBUiG
CzlnaTJCHXDKt//iMyxU/0VmfqQKAw7KkhmsimXGfkb34ali62mxRpcaeMWe5wAZ
7pgDGxTVKdL1pw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:57 2026 by rpki-client