Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
File: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft (raw, json)
Hash identifier: 6UcUuGsWdbzD2iA7ODsrFYq1TxErNTibqUc/PP8gA5E=
Subject key identifier: 32:54:65:EE:19:1F:EF:58:B2:2D:04:89:41:11:FC:F8:04:EC:F3:13
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Certificate issuer: /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial: 019D25BA7B8B860E4EDC49479C59828438C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
Manifest number: CB
Signing time: Wed 25 Mar 2026 16:01:11 +0000
Manifest this update: Wed 25 Mar 2026 16:01:11 +0000
Manifest next update: Thu 26 Mar 2026 16:01:11 +0000
Files and hashes: 1: iS_RjiJ5hKPzS36a9K6GI2jCpSc.roa (hash: oKmLMmS60dhNLyeJppUGpS47iPqdNIjtFfF23b9zJgg=)
2: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl (hash: zTxCqv4+A5tvDsvBUxsYxqvhP6PnCBQfVJcaaWfiGUU=)
3: qoT5stHghDnRteVtg_Px7AZoT7U.asa (hash: TskbWZWjs4ecsqraIt5QOAc8VDAfdc2BCzb4CrrRpfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:7b:8b:86:0e:4e:dc:49:47:9c:59:82:84:38:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Validity
Not Before: Mar 25 16:01:11 2026 GMT
Not After : Mar 26 16:01:11 2026 GMT
Subject: CN=325465ee191fef58b22d04894111fcf804ecf313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:68:7e:94:b4:bc:16:9a:60:98:50:59:1c:
6b:f1:a6:66:34:db:dd:06:4d:6c:95:03:31:5a:f6:
c1:c3:0e:35:3f:fb:3d:3f:54:4f:1a:e6:52:23:e2:
2e:6e:85:9e:f1:4c:bc:e7:d6:03:26:d4:d9:c0:d2:
2c:4e:c4:0c:74:06:45:85:21:bc:da:2b:57:30:83:
db:c3:12:3e:99:05:53:d4:bd:4c:73:79:02:10:a1:
cb:70:db:4b:11:4d:a7:fc:c1:e0:52:6c:5b:d0:ef:
44:10:75:c5:a0:c9:bf:aa:28:31:d9:39:da:5b:e0:
ac:89:14:44:3c:46:9f:37:e8:35:19:7c:67:95:eb:
57:53:26:1c:20:8e:37:0c:d5:27:c7:5c:32:f9:2f:
27:eb:67:2a:f2:9a:d5:a4:12:e0:40:c8:c4:d2:26:
ba:84:45:07:08:58:5b:96:d9:60:7e:34:ae:76:99:
72:e9:59:b4:37:4f:d9:f5:3e:b9:53:13:b2:6e:ce:
65:5d:6a:ba:ee:5a:8a:a1:05:a1:44:52:7c:89:f5:
4a:b1:f4:c5:76:51:0a:6c:d3:4c:5b:b3:88:a5:ad:
8f:be:50:e0:5d:32:e9:f9:6d:04:82:47:a7:09:4e:
da:8f:92:9f:b6:1f:1a:78:96:f6:06:d2:e0:fe:a0:
bf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:54:65:EE:19:1F:EF:58:B2:2D:04:89:41:11:FC:F8:04:EC:F3:13
X509v3 Authority Key Identifier:
keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a2:43:3b:13:59:00:69:22:a6:a6:f9:c7:15:3d:78:aa:a8:
ba:4b:b2:2d:33:b1:03:48:38:18:2d:c3:db:66:e8:0c:d6:5f:
e9:07:4e:d6:fb:f1:6b:a1:58:73:e4:bb:d3:cb:ab:9d:c4:87:
3f:97:29:17:ff:26:7c:da:23:ab:76:a4:20:6c:06:5f:cd:1f:
42:83:d8:ec:12:81:5b:32:57:44:ca:9d:d7:16:cf:bb:c8:b9:
51:4f:d2:71:4d:75:9a:52:23:f8:9e:60:64:86:bd:64:a9:99:
46:06:88:ba:28:88:23:ad:44:0a:45:52:94:25:9e:b6:eb:05:
bc:a9:2b:80:f2:67:20:e2:05:8c:62:9c:bd:fe:6d:7c:bf:27:
5a:da:3b:43:45:2c:34:14:b8:0d:ca:6b:d1:94:4a:28:48:67:
70:33:b3:e8:5e:a3:ab:87:3e:07:5c:ce:14:b3:1d:44:5f:7a:
2f:d0:43:69:5b:8e:97:ab:cc:4e:c2:e6:ba:a1:b2:66:0a:5b:
5e:6f:85:f8:a0:23:49:b5:43:a9:61:19:1e:cd:6e:23:0d:77:
f8:63:73:38:03:03:3c:09:f5:61:40:d2:75:6d:cc:b0:5e:47:
df:23:2f:5e:1e:dc:2d:a8:ed:f7:3e:58:90:c2:2c:e1:cd:18:
6e:f0:07:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lunuLhg5O3ElHnFmChDjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YTNkMDlkMmI0NTYxMjVhMTVkNTNmNTUyMDkyNWY0ZmJm
NjE3MjgwHhcNMjYwMzI1MTYwMTExWhcNMjYwMzI2MTYwMTExWjAzMTEwLwYDVQQD
EygzMjU0NjVlZTE5MWZlZjU4YjIyZDA0ODk0MTExZmNmODA0ZWNmMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4BofpS0vBaaYJhQWRxr8aZmNNvd
Bk1slQMxWvbBww41P/s9P1RPGuZSI+IuboWe8Uy859YDJtTZwNIsTsQMdAZFhSG8
2itXMIPbwxI+mQVT1L1Mc3kCEKHLcNtLEU2n/MHgUmxb0O9EEHXFoMm/qigx2Tna
W+CsiRREPEafN+g1GXxnletXUyYcII43DNUnx1wy+S8n62cq8prVpBLgQMjE0ia6
hEUHCFhbltlgfjSudply6Vm0N0/Z9T65UxOybs5lXWq67lqKoQWhRFJ8ifVKsfTF
dlEKbNNMW7OIpa2PvlDgXTLp+W0EgkenCU7aj5Kfth8aeJb2BtLg/qC/TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJUZe4ZH+9Ysi0EiUER/PgE7PMTMB8GA1UdIwQY
MBaAFJij0J0rRWEloV1T9VIJJfT79hcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lN2IzMDQtZTc3OS00MjFkLWIwYTYt
MDQzMjBiMWZjMjI3LzEvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lN2IzMDQtZTc3OS00MjFkLWIwYTYtMDQzMjBiMWZjMjI3
LzEvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6JDOxNZ
AGkipqb5xxU9eKqoukuyLTOxA0g4GC3D22boDNZf6QdO1vvxa6FYc+S708urncSH
P5cpF/8mfNojq3akIGwGX80fQoPY7BKBWzJXRMqd1xbPu8i5UU/ScU11mlIj+J5g
ZIa9ZKmZRgaIuiiII61ECkVSlCWetusFvKkrgPJnIOIFjGKcvf5tfL8nWto7Q0Us
NBS4Dcpr0ZRKKEhncDOz6F6jq4c+B1zOFLMdRF96L9BDaVuOl6vMTsLmuqGyZgpb
Xm+F+KAjSbVDqWEZHs1uIw13+GNzOAMDPAn1YUDSdW3MsF5H3yMvXh7cLajt9z5Y
kMIs4c0YbvAHmQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:21 2026 by rpki-client