Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
File: mAPED3e8iPryCfMdNh67q1yurEo.mft (raw, json)
Hash identifier: 7gGgtgLHZjRlHL5J3zxfUh+WstOLCi0kebMY2G+hraU=
Subject key identifier: 45:AD:D2:82:84:B0:BA:FE:18:E0:8A:C9:C1:E5:9F:A9:D8:C9:72:88
Authority key identifier: 98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
Certificate issuer: /CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Certificate serial: 019D25BA0E81057BDFDCEC33CB851423A7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 16:00:43 +0000
Manifest this update: Wed 25 Mar 2026 16:00:43 +0000
Manifest next update: Thu 26 Mar 2026 16:00:43 +0000
Files and hashes: 1: 3Ahjdp__ozJo5M-VgaAWwmrVaPM.roa (hash: giC1iif4sPjQDIVLnsnSJ6c2IhGqS5e5kDwDkf1ROlk=)
2: HHj1qeApV1_9bNuvEkTW3j5vL90.roa (hash: KLPygpT87u/2yKmitGRFI+aNUJyyRivcM9M/ADLfY/8=)
3: fY8UJD_E50eB0yipwToYj85Cx8o.roa (hash: 3UwSH6mqK8pEzOO4NVg1cMjmkDGfg2/9djiPaM/siXw=)
4: mAPED3e8iPryCfMdNh67q1yurEo.crl (hash: uczK+XwrLN7XusLLkbn3tZZICSVU6UPdqg8u0pDuBok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:0e:81:05:7b:df:dc:ec:33:cb:85:14:23:a7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Validity
Not Before: Mar 25 16:00:43 2026 GMT
Not After : Mar 26 16:00:43 2026 GMT
Subject: CN=45add28284b0bafe18e08ac9c1e59fa9d8c97288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:08:45:78:cd:10:6e:6a:9a:10:63:ca:98:
fe:99:e7:f9:c8:59:64:ff:c6:df:6c:0f:bb:e5:7f:
ca:f9:7e:3e:e2:84:82:a7:eb:ba:35:ff:08:19:61:
f9:b6:bf:75:fb:ba:52:54:d4:32:81:61:fe:9e:95:
97:3b:0c:9f:85:0b:37:e8:2a:86:19:26:eb:f4:4e:
a3:bb:eb:34:f2:88:f1:3f:f3:23:07:9f:a7:df:23:
d6:04:dd:be:70:17:5c:7c:5a:fa:20:a3:94:3e:c7:
d0:95:0f:be:12:ea:20:e9:20:7d:7a:70:6b:aa:ab:
ca:26:d7:cb:6d:e7:32:84:59:c6:5b:12:c7:39:65:
ca:84:1d:07:21:11:78:18:93:25:e3:6b:f3:da:47:
46:d9:bd:8a:25:d9:29:6a:bd:6d:f3:ba:da:4a:cb:
dc:bd:1d:d1:e3:77:a4:ef:3a:64:bf:4c:c2:e1:79:
7b:2c:08:c1:76:18:51:5d:f1:76:c3:81:8f:30:a8:
79:fb:62:d0:c0:77:d4:88:c5:0d:44:fd:bc:1a:38:
33:eb:0a:bf:2e:0e:bd:f4:72:65:11:83:8d:62:75:
da:58:53:a1:3d:93:dc:dd:e5:6d:fd:7d:b7:10:5d:
da:3c:d2:59:51:e6:1e:ec:c2:9c:8c:1c:06:46:0f:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AD:D2:82:84:B0:BA:FE:18:E0:8A:C9:C1:E5:9F:A9:D8:C9:72:88
X509v3 Authority Key Identifier:
keyid:98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:54:4d:0c:11:32:61:6c:96:72:21:39:8b:5f:7e:03:32:05:
d5:51:30:c9:8e:33:6e:26:dc:09:c9:de:f7:5c:77:66:c6:07:
95:56:77:bc:9a:1b:d4:34:14:50:e6:eb:3b:85:0d:41:b3:91:
33:f0:a6:24:34:c8:a7:7d:ae:ed:59:11:8f:46:9c:7d:fe:c6:
c1:4b:fd:96:dc:c0:b4:76:bc:8b:5d:c6:3d:ed:e3:33:e5:9f:
af:ae:2c:fb:79:a9:b9:de:94:26:3c:64:c1:14:0d:a0:fe:02:
17:84:2b:ce:1f:a9:8a:53:2c:99:2a:f5:f8:72:51:b7:d9:a4:
0a:48:0a:5a:1f:a7:e6:b2:f4:89:27:2b:56:cf:cc:3f:e0:c3:
60:2e:07:d8:43:df:bc:c7:04:94:46:86:2a:5f:1f:5f:9a:25:
db:4c:2d:4e:0c:90:a1:c4:2a:e6:15:3b:ea:b8:2c:f5:8f:d3:
97:6f:b5:a3:36:8f:85:54:e3:29:ab:59:39:76:00:36:9f:bb:
80:de:2b:9c:4f:a5:88:9b:74:1f:35:62:83:6e:44:16:92:76:
bd:cd:f9:87:19:64:1f:5a:16:65:e7:95:fd:e5:d8:df:6f:eb:
1e:fa:00:36:2f:67:b4:9a:ec:ec:0e:a1:aa:d2:3e:5a:4b:b0:
c3:84:7f:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lug6BBXvf3Owzy4UUI6erMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MDNjNDBmNzdiYzg4ZmFmMjA5ZjMxZDM2MWViYmFiNWNh
ZWFjNGEwHhcNMjYwMzI1MTYwMDQzWhcNMjYwMzI2MTYwMDQzWjAzMTEwLwYDVQQD
Eyg0NWFkZDI4Mjg0YjBiYWZlMThlMDhhYzljMWU1OWZhOWQ4Yzk3Mjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0UIRXjNEG5qmhBjypj+mef5yFlk
/8bfbA+75X/K+X4+4oSCp+u6Nf8IGWH5tr91+7pSVNQygWH+npWXOwyfhQs36CqG
GSbr9E6ju+s08ojxP/MjB5+n3yPWBN2+cBdcfFr6IKOUPsfQlQ++Euog6SB9enBr
qqvKJtfLbecyhFnGWxLHOWXKhB0HIRF4GJMl42vz2kdG2b2KJdkpar1t87raSsvc
vR3R43ek7zpkv0zC4Xl7LAjBdhhRXfF2w4GPMKh5+2LQwHfUiMUNRP28Gjgz6wq/
Lg699HJlEYONYnXaWFOhPZPc3eVt/X23EF3aPNJZUeYe7MKcjBwGRg8bPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWt0oKEsLr+GOCKycHln6nYyXKIMB8GA1UdIwQY
MBaAFJgDxA93vIj68gnzHTYeu6tcrqxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUFQRUQzZThpUHJ5Q2ZNZE5oNjdxMXl1ckVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iYWQ0YTAtM2U5Yi00NzY0LThhMjQt
ZjNhMjZmMDU1ZjRlLzEvbUFQRUQzZThpUHJ5Q2ZNZE5oNjdxMXl1ckVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iYWQ0YTAtM2U5Yi00NzY0LThhMjQtZjNhMjZmMDU1ZjRl
LzEvbUFQRUQzZThpUHJ5Q2ZNZE5oNjdxMXl1ckVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFRNDBEy
YWyWciE5i19+AzIF1VEwyY4zbibcCcne91x3ZsYHlVZ3vJob1DQUUObrO4UNQbOR
M/CmJDTIp32u7VkRj0acff7GwUv9ltzAtHa8i13GPe3jM+Wfr64s+3mpud6UJjxk
wRQNoP4CF4Qrzh+pilMsmSr1+HJRt9mkCkgKWh+n5rL0iScrVs/MP+DDYC4H2EPf
vMcElEaGKl8fX5ol20wtTgyQocQq5hU76rgs9Y/Tl2+1ozaPhVTjKatZOXYANp+7
gN4rnE+liJt0HzVig25EFpJ2vc35hxlkH1oWZeeV/eXY32/rHvoANi9ntJrs7A6h
qtI+Wkuww4R/lw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:19 2026 by rpki-client