Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
File: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft (raw, json)
Hash identifier: D7JmQkzjpEU/zC3AEZxUvwjk/l95anp6xvPrBaDb+EA=
Subject key identifier: E5:CF:47:8F:2D:B4:70:7C:75:E8:22:56:BB:84:CA:BB:D8:A0:9F:4B
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Certificate issuer: /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial: 019E1C7D8C8FEF673802626E81289BC3929D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
Manifest number: 014B
Signing time: Tue 12 May 2026 14:00:50 +0000
Manifest this update: Tue 12 May 2026 14:00:50 +0000
Manifest next update: Wed 13 May 2026 14:00:50 +0000
Files and hashes: 1: HAvcKkRLr_-FXcfu2XV7UUaU5F8.asa (hash: Ern+cmfZwFsU2HhkvPFkDC0xdjwIG4SYe7YBQ5RzsPs=)
2: iS_RjiJ5hKPzS36a9K6GI2jCpSc.roa (hash: oKmLMmS60dhNLyeJppUGpS47iPqdNIjtFfF23b9zJgg=)
3: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl (hash: +w3FuIwBgONFMB3UJAFIrE7GCQMbqQMyTv4hU/rAHCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:8c:8f:ef:67:38:02:62:6e:81:28:9b:c3:92:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Validity
Not Before: May 12 14:00:50 2026 GMT
Not After : May 13 14:00:50 2026 GMT
Subject: CN=e5cf478f2db4707c75e82256bb84cabbd8a09f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:45:d0:1a:b3:10:a7:6f:2b:6b:f3:be:b8:
75:d9:c9:45:bf:34:71:a9:ce:4b:36:c1:54:1e:a9:
f7:82:bf:bc:82:b4:ef:3f:0e:18:11:c6:05:be:ba:
e0:00:30:f5:f0:1a:eb:2b:78:8c:40:ac:d8:b5:46:
e4:86:61:83:39:2d:47:b4:61:3c:7d:e4:4b:06:25:
fe:4e:c6:2d:e7:32:c7:32:39:0d:5d:9c:4b:90:dc:
7f:2c:e7:0c:3e:7e:05:f6:2b:9a:d8:cc:9b:42:c2:
3e:22:1d:72:4c:27:d2:0c:94:d8:c9:5f:9d:a5:a8:
fc:1f:7f:6e:6a:b2:76:4f:97:64:e2:f4:0e:e8:5c:
1d:d1:29:d5:61:cf:6a:37:55:34:01:61:aa:9a:32:
c4:ec:54:9c:0d:8d:4e:81:99:9a:25:11:28:22:96:
70:a6:73:3f:d3:a8:7d:64:94:60:7e:88:ea:b8:7f:
a2:4f:b6:5e:f7:2b:cf:af:27:87:cc:63:66:60:6b:
bc:ae:60:b1:f7:78:8c:39:2a:93:d4:db:f1:18:37:
4e:93:b2:c1:93:36:23:48:82:24:eb:db:4a:8e:b5:
d3:84:50:a1:7b:6f:be:fb:82:70:9c:11:77:4a:b9:
1d:3b:f2:6c:22:a3:ab:b6:ff:a4:41:5f:c8:e2:2a:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CF:47:8F:2D:B4:70:7C:75:E8:22:56:BB:84:CA:BB:D8:A0:9F:4B
X509v3 Authority Key Identifier:
keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e6:ca:83:36:e5:08:cf:6c:44:fc:33:2a:dc:27:9a:06:ba:
ce:54:a7:68:f7:1d:94:f4:df:37:7a:70:bf:1e:bf:65:8c:df:
55:15:3a:40:9a:69:70:d5:e5:ab:56:e0:25:d7:ee:d0:20:fc:
4d:a1:95:b8:76:a0:34:c1:e2:7c:36:26:db:ec:42:28:d8:eb:
19:14:c4:15:d8:84:ed:f5:14:dd:ba:25:96:46:d9:a2:4d:ca:
61:d9:6b:24:16:7b:10:ca:0b:03:28:8e:5a:e2:16:b3:83:51:
f5:38:1c:06:74:c5:60:59:ed:a7:98:61:b6:d6:cb:62:2e:d0:
3f:6d:6f:37:a2:83:79:65:e6:e7:83:cc:8a:21:8e:a2:fb:a6:
01:17:e4:1c:c6:24:2e:eb:86:50:b3:2a:d9:8f:6d:b8:62:9b:
13:03:f2:fa:c5:d3:58:73:4c:d4:a1:1b:8b:6e:db:fc:e5:78:
0e:5f:13:e8:fc:72:ca:5f:fe:c4:01:ee:44:94:d2:86:99:71:
e0:6e:9c:97:a5:fd:ea:61:05:03:a8:b7:df:ea:30:5d:1b:17:
3d:f1:ab:ff:78:51:5d:8f:30:b6:d7:f3:20:63:9e:8e:b0:05:
f9:21:42:8b:9a:34:67:dd:9e:55:03:38:b7:b7:cb:ba:10:c1:
70:27:51:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfYyP72c4AmJugSibw5KdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YTNkMDlkMmI0NTYxMjVhMTVkNTNmNTUyMDkyNWY0ZmJm
NjE3MjgwHhcNMjYwNTEyMTQwMDUwWhcNMjYwNTEzMTQwMDUwWjAzMTEwLwYDVQQD
EyhlNWNmNDc4ZjJkYjQ3MDdjNzVlODIyNTZiYjg0Y2FiYmQ4YTA5ZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX1F0BqzEKdvK2vzvrh12clFvzRx
qc5LNsFUHqn3gr+8grTvPw4YEcYFvrrgADD18BrrK3iMQKzYtUbkhmGDOS1HtGE8
feRLBiX+TsYt5zLHMjkNXZxLkNx/LOcMPn4F9iua2MybQsI+Ih1yTCfSDJTYyV+d
paj8H39uarJ2T5dk4vQO6Fwd0SnVYc9qN1U0AWGqmjLE7FScDY1OgZmaJREoIpZw
pnM/06h9ZJRgfojquH+iT7Ze9yvPryeHzGNmYGu8rmCx93iMOSqT1NvxGDdOk7LB
kzYjSIIk69tKjrXThFChe2+++4JwnBF3SrkdO/JsIqOrtv+kQV/I4iofFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXPR48ttHB8degiVruEyrvYoJ9LMB8GA1UdIwQY
MBaAFJij0J0rRWEloV1T9VIJJfT79hcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lN2IzMDQtZTc3OS00MjFkLWIwYTYt
MDQzMjBiMWZjMjI3LzEvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lN2IzMDQtZTc3OS00MjFkLWIwYTYtMDQzMjBiMWZjMjI3
LzEvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbubKgzbl
CM9sRPwzKtwnmga6zlSnaPcdlPTfN3pwvx6/ZYzfVRU6QJppcNXlq1bgJdfu0CD8
TaGVuHagNMHifDYm2+xCKNjrGRTEFdiE7fUU3bollkbZok3KYdlrJBZ7EMoLAyiO
WuIWs4NR9TgcBnTFYFntp5hhttbLYi7QP21vN6KDeWXm54PMiiGOovumARfkHMYk
LuuGULMq2Y9tuGKbEwPy+sXTWHNM1KEbi27b/OV4Dl8T6Pxyyl/+xAHuRJTShplx
4G6cl6X96mEFA6i33+owXRsXPfGr/3hRXY8wttfzIGOejrAF+SFCi5o0Z92eVQM4
t7fLuhDBcCdRhg==
-----END CERTIFICATE-----
Generated at Wed May 13 00:49:32 2026 by rpki-client