Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: S4vVJjlM/HaN/3ACH1xW4CI096rIW5K//Vd5NUXD5Ho=
Subject key identifier: C2:24:8B:D1:ED:8B:B3:FA:11:48:FF:F7:63:41:A6:01:C4:9A:F3:EC
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 019F90FEB8CE828240499AC8C382339ECE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 195A
Signing time: Thu 23 Jul 2026 22:00:40 +0000
Manifest this update: Thu 23 Jul 2026 22:00:40 +0000
Manifest next update: Fri 24 Jul 2026 22:00:40 +0000
Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: 6fz5umBXlt94o6PpXvfvixxSwXB3Do53Kd/Kw4RRpjs=)
2: dDj4-eFRfq_UroSu2HQ22smKlA8.roa (hash: ahRStajN/bb570o/RBHvcfEKEL2KTD1bW5s9wAnONq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:b8:ce:82:82:40:49:9a:c8:c3:82:33:9e:ce:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: Jul 23 22:00:40 2026 GMT
Not After : Jul 24 22:00:40 2026 GMT
Subject: CN=c2248bd1ed8bb3fa1148fff76341a601c49af3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:61:95:b0:88:56:88:71:eb:8e:4d:01:e3:
d9:07:54:7b:ee:a1:d0:26:71:8f:78:98:89:2c:3c:
ab:9a:c7:4d:31:46:53:25:2d:20:89:17:9d:70:16:
46:91:7f:25:77:c6:46:b9:95:ba:1c:f8:5f:db:f2:
2b:99:6c:76:b1:65:da:a9:f0:bc:2e:75:0f:71:e9:
b3:75:63:49:13:4a:df:bf:13:af:f2:76:3f:d4:fc:
7d:e1:96:6a:90:59:28:d5:9a:53:43:47:31:64:53:
b0:ff:3c:be:24:98:69:c6:85:c7:9b:b8:c2:2f:3e:
13:60:69:7b:be:a6:8a:2c:bf:d9:a0:9a:b7:5c:2a:
07:e7:7a:c3:c7:40:3d:64:c8:ce:a9:52:5e:d1:6c:
6f:20:ee:f3:4a:90:b1:17:cc:34:df:6e:a6:cb:de:
9d:19:1b:18:b1:0e:78:b0:23:e4:ce:f0:f9:17:56:
e9:2d:ca:e7:06:94:0e:05:74:31:90:74:1b:f1:f8:
de:26:ea:1a:ce:2f:5e:3e:9b:bf:87:9e:ba:5f:72:
c7:66:bc:ea:d5:21:1b:6e:2b:0c:b6:df:ad:7c:d0:
c9:2f:ae:82:b3:cb:8d:f4:36:0a:51:e2:2d:9b:7c:
8e:51:6b:2e:5a:8e:e8:45:ee:40:50:a5:a9:2a:49:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:24:8B:D1:ED:8B:B3:FA:11:48:FF:F7:63:41:A6:01:C4:9A:F3:EC
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cb:fb:be:ca:c9:50:d5:6d:e0:02:c9:00:b4:db:5f:91:56:
c5:51:07:cb:22:c9:7e:a8:c9:30:08:d1:74:66:0c:12:87:79:
55:71:d9:ff:e0:fc:8d:b2:a8:a2:08:48:51:b8:c1:9f:63:7d:
15:06:74:7c:95:0a:28:ef:a0:6b:c1:0e:3d:32:26:ae:bd:f8:
bc:f5:d5:94:58:87:c1:f2:67:4c:54:87:5a:f1:3e:61:68:3c:
8e:c4:82:61:43:d8:3a:58:4e:4a:48:46:19:78:04:32:ef:cf:
65:a8:6a:66:55:30:c4:a0:d5:7f:24:14:58:77:e4:ff:8e:1e:
a9:c8:c5:d7:8e:5a:c7:a7:f9:b6:f4:a6:8a:91:eb:dc:33:52:
57:a6:c5:68:b9:38:b2:88:52:15:bc:08:d4:18:c7:42:49:a6:
2b:fb:73:8a:fb:52:79:3f:d9:33:99:04:a3:84:83:89:23:ba:
de:ae:0e:25:56:c1:c7:92:0d:7d:53:2c:72:09:07:76:56:87:
3b:c7:9e:7d:2b:2f:65:10:18:1b:ad:b4:5f:b8:c0:61:98:af:
e8:47:36:e8:a1:ab:ce:a6:69:c1:41:4f:af:28:f1:5f:3a:e3:
ec:a9:7c:9e:e4:eb:65:83:bb:d4:47:a7:4f:a2:5a:4c:02:22:
a8:61:ff:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/rjOgoJASZrIw4Izns4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOTgwNTZiODA2YTdiN2NjMTYzMzM0NWRjNTU4MzZhNDVh
MjQ0YzcwHhcNMjYwNzIzMjIwMDQwWhcNMjYwNzI0MjIwMDQwWjAzMTEwLwYDVQQD
EyhjMjI0OGJkMWVkOGJiM2ZhMTE0OGZmZjc2MzQxYTYwMWM0OWFmM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy41hlbCIVohx645NAePZB1R77qHQ
JnGPeJiJLDyrmsdNMUZTJS0giRedcBZGkX8ld8ZGuZW6HPhf2/IrmWx2sWXaqfC8
LnUPcemzdWNJE0rfvxOv8nY/1Px94ZZqkFko1ZpTQ0cxZFOw/zy+JJhpxoXHm7jC
Lz4TYGl7vqaKLL/ZoJq3XCoH53rDx0A9ZMjOqVJe0WxvIO7zSpCxF8w0326my96d
GRsYsQ54sCPkzvD5F1bpLcrnBpQOBXQxkHQb8fjeJuoazi9ePpu/h566X3LHZrzq
1SEbbisMtt+tfNDJL66Cs8uN9DYKUeItm3yOUWsuWo7oRe5AUKWpKkmfRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIki9Hti7P6EUj/92NBpgHEmvPsMB8GA1UdIwQY
MBaAFDKYBWuAant8wWMzRdxVg2pFokTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iZjJiYjQtMzZkMy00YjE3LThiY2Yt
NDRhOTU3MTMyNjM5LzEvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iZjJiYjQtMzZkMy00YjE3LThiY2YtNDRhOTU3MTMyNjM5
LzEvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMv7vsrJ
UNVt4ALJALTbX5FWxVEHyyLJfqjJMAjRdGYMEod5VXHZ/+D8jbKooghIUbjBn2N9
FQZ0fJUKKO+ga8EOPTImrr34vPXVlFiHwfJnTFSHWvE+YWg8jsSCYUPYOlhOSkhG
GXgEMu/PZahqZlUwxKDVfyQUWHfk/44eqcjF145ax6f5tvSmipHr3DNSV6bFaLk4
sohSFbwI1BjHQkmmK/tzivtSeT/ZM5kEo4SDiSO63q4OJVbBx5INfVMscgkHdlaH
O8eefSsvZRAYG620X7jAYZiv6Ec26KGrzqZpwUFPryjxXzrj7Kl8nuTrZYO71Een
T6JaTAIiqGH/SQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:21 2026 by rpki-client