Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier: SXaneu5u6p7e7LAPT/JESg2xO0Ziw9zNfKmZEIIoRL0=
Subject key identifier: DF:60:E1:48:71:DC:37:9C:08:F9:6B:E1:2A:FA:DB:73:FC:BD:50:16
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial: 019E1C0FA53B88D62A68ED8254304EB6EF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number: 1805
Signing time: Tue 12 May 2026 12:00:47 +0000
Manifest this update: Tue 12 May 2026 12:00:47 +0000
Manifest next update: Wed 13 May 2026 12:00:47 +0000
Files and hashes: 1: 6RH4Xhf3454zmP7SfNkGXBdyqVs.asa (hash: aTVDJZG9k3QRu4E3b31eQbxAuvRrjFaFwYD4QvfkoTc=)
2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: Y6Ym4SrWgNT6UrCX7jFnTP/qbfkrqHp7HZtHgACwtxA=)
3: bxJSZ4QkpRqkCuO8un8htf7K_EA.roa (hash: aY6Tszvn+tw4UURnCsUt8otQUMfjQJy4b3YJ7wRT6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:a5:3b:88:d6:2a:68:ed:82:54:30:4e:b6:ef:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Validity
Not Before: May 12 12:00:47 2026 GMT
Not After : May 13 12:00:47 2026 GMT
Subject: CN=df60e14871dc379c08f96be12afadb73fcbd5016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:63:ed:2d:5d:86:9d:fe:dd:9a:95:19:03:
de:bc:31:15:63:54:9f:2c:cc:63:33:81:dc:bb:53:
bb:ea:78:ee:65:b8:34:0a:ae:7f:18:5f:98:1b:57:
a4:29:47:e0:9b:4f:19:96:91:9e:2f:48:c1:87:7e:
88:8f:7d:aa:65:13:3b:d5:c4:39:a2:a2:9f:9f:2e:
ee:43:80:1e:3c:5a:89:f5:28:50:ec:af:d8:ae:cc:
3c:3f:7e:f6:13:bb:7b:0e:53:bf:4b:82:8a:c1:0f:
3f:f0:0b:6f:a8:3d:42:60:1f:ec:a9:a7:3a:9c:44:
c4:c9:a9:9e:6e:43:ca:19:7c:ac:c1:7f:2f:a8:b4:
0f:d4:08:d2:8d:e0:b2:14:de:bd:10:4f:16:09:65:
2e:26:88:64:7c:f8:1b:24:16:d3:bb:8c:09:61:64:
22:3d:7b:fc:de:35:19:ab:9a:ae:ff:2d:fe:c3:b4:
1c:4d:e6:06:85:72:2e:7b:99:45:98:80:74:1f:c5:
88:1a:ef:75:ad:91:a0:13:33:f6:e2:b1:e3:ea:8c:
7b:b1:ef:bd:6d:ab:0e:09:ec:53:6a:95:e7:cc:90:
1a:6d:74:2b:9b:8b:c6:93:64:df:f5:19:fd:96:39:
e1:c0:f3:65:cf:88:53:80:66:9e:ce:4a:72:ea:96:
5a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:60:E1:48:71:DC:37:9C:08:F9:6B:E1:2A:FA:DB:73:FC:BD:50:16
X509v3 Authority Key Identifier:
keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ca:f0:8f:72:26:d6:93:c3:68:42:ab:3e:3f:b6:2d:b3:df:
f1:cb:42:e6:96:c1:cc:b1:b6:52:30:e4:a2:c8:03:6b:c3:a8:
02:a0:1e:ef:de:d0:45:9c:c2:65:10:c5:22:e2:ce:24:ff:6e:
bc:c2:be:b6:75:f5:1b:8d:79:78:97:93:96:7c:52:6f:0d:ad:
b1:85:8b:58:4a:bf:ea:35:4b:d2:e3:fd:d9:f3:6e:64:91:26:
f8:aa:e5:96:99:26:dd:76:ba:38:23:98:54:12:7f:f0:20:63:
9f:2c:c3:fa:49:2b:21:a3:29:fc:10:4a:d6:af:79:b3:57:03:
be:11:f5:e5:0c:c0:b0:3b:39:0b:ee:3c:8d:a3:06:55:3f:2d:
06:68:d0:5a:b7:26:69:4e:38:c4:38:d9:53:47:fb:e7:1d:28:
35:81:53:4c:5b:4a:98:7d:0c:86:66:7a:b1:3b:b3:91:d8:d4:
58:ba:ac:b6:d4:86:e4:3e:fd:99:08:ba:15:e5:b7:a6:80:45:
ea:bf:33:84:db:00:d5:aa:10:b4:6e:43:21:f9:41:e1:de:05:
1e:3a:d3:85:c0:2b:d5:7d:7e:b5:e1:41:40:dc:ae:4a:62:e6:
f8:2f:2a:db:35:42:bf:e7:9b:b5:84:e1:13:c5:a1:2b:a1:d7:
6c:3f:e7:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD6U7iNYqaO2CVDBOtu9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZjhlMmMwYzg3ZTkzNzk5ZTIzMjg0ZjM2Yjg2MTVkYjc4
NzgzYWIwHhcNMjYwNTEyMTIwMDQ3WhcNMjYwNTEzMTIwMDQ3WjAzMTEwLwYDVQQD
EyhkZjYwZTE0ODcxZGMzNzljMDhmOTZiZTEyYWZhZGI3M2ZjYmQ1MDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd5j7S1dhp3+3ZqVGQPevDEVY1Sf
LMxjM4Hcu1O76njuZbg0Cq5/GF+YG1ekKUfgm08ZlpGeL0jBh36Ij32qZRM71cQ5
oqKfny7uQ4AePFqJ9ShQ7K/Yrsw8P372E7t7DlO/S4KKwQ8/8AtvqD1CYB/sqac6
nETEyamebkPKGXyswX8vqLQP1AjSjeCyFN69EE8WCWUuJohkfPgbJBbTu4wJYWQi
PXv83jUZq5qu/y3+w7QcTeYGhXIue5lFmIB0H8WIGu91rZGgEzP24rHj6ox7se+9
basOCexTapXnzJAabXQrm4vGk2Tf9Rn9ljnhwPNlz4hTgGaezkpy6pZakQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9g4Uhx3DecCPlr4Sr623P8vVAWMB8GA1UdIwQY
MBaAFDD44sDIfpN5niMoTza4YV23h4OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2Qt
N2UxMmI4N2QwNmMyLzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2QtN2UxMmI4N2QwNmMy
LzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMrwj3Im
1pPDaEKrPj+2LbPf8ctC5pbBzLG2UjDkosgDa8OoAqAe797QRZzCZRDFIuLOJP9u
vMK+tnX1G415eJeTlnxSbw2tsYWLWEq/6jVL0uP92fNuZJEm+Krllpkm3Xa6OCOY
VBJ/8CBjnyzD+kkrIaMp/BBK1q95s1cDvhH15QzAsDs5C+48jaMGVT8tBmjQWrcm
aU44xDjZU0f75x0oNYFTTFtKmH0MhmZ6sTuzkdjUWLqsttSG5D79mQi6FeW3poBF
6r8zhNsA1aoQtG5DIflB4d4FHjrThcAr1X1+teFBQNyuSmLm+C8q2zVCv+ebtYTh
E8WhK6HXbD/n5g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:27:34 2026 by rpki-client