Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
File: MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft (raw, json)
Hash identifier: AZXZ7BmCqhKBQ896Zea5SiUBnPGe6KoXm8xo0qfyhQc=
Subject key identifier: 7D:FB:78:20:AE:04:1F:F3:A2:A8:CC:98:26:1F:D7:9C:97:B0:76:BC
Authority key identifier: 30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58
Certificate issuer: /CN=30aab02b654e915cadca339292e28c15c47df858
Certificate serial: 019D2771EF1F8F5F19EDF61189ED0E9D981B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
Manifest number: 06E8
Signing time: Thu 26 Mar 2026 00:01:11 +0000
Manifest this update: Thu 26 Mar 2026 00:01:11 +0000
Manifest next update: Fri 27 Mar 2026 00:01:11 +0000
Files and hashes: 1: MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl (hash: mLZ83ruQaxO4SJRbvMDISfkz7guOzThDYS3oJsw7j3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ef:1f:8f:5f:19:ed:f6:11:89:ed:0e:9d:98:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aab02b654e915cadca339292e28c15c47df858
Validity
Not Before: Mar 26 00:01:11 2026 GMT
Not After : Mar 27 00:01:11 2026 GMT
Subject: CN=7dfb7820ae041ff3a2a8cc98261fd79c97b076bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:e5:ad:f1:36:33:a6:4f:bf:48:ed:c2:94:
c5:10:ea:82:85:52:64:da:fe:6d:8b:d0:e7:54:0c:
91:ca:07:24:f0:db:b1:4e:7d:92:d9:dd:7e:34:06:
62:d5:6c:fe:e2:b5:2a:92:e3:4e:e1:d1:32:a2:02:
d0:02:b1:19:59:a4:ad:65:21:01:ed:4e:35:d7:f5:
3e:62:75:bb:07:95:5b:85:e8:84:66:8a:d4:fe:20:
3d:c8:d1:48:a0:d5:db:94:78:26:cf:39:47:29:d1:
76:5a:0d:db:cb:4b:83:c5:8b:20:5e:38:a6:4c:7e:
e8:67:a8:73:53:05:e3:a6:9e:74:73:01:39:d4:b1:
6e:4c:40:a5:96:38:a6:86:41:98:dc:b1:fa:96:92:
d2:07:6b:39:b6:b9:f9:52:1d:63:af:c3:5c:39:f5:
f2:78:3c:c1:67:22:42:ee:cf:fe:96:c7:6a:f5:9b:
92:1f:9c:cc:62:ff:a7:02:1a:2e:da:b9:4c:51:ac:
11:52:da:ba:ab:f7:b7:a3:b6:94:fb:9a:2d:0f:92:
1f:ef:db:2d:31:d0:b6:d7:89:d6:3c:c7:00:52:8d:
77:3c:b3:54:6d:79:d5:75:0a:2a:22:a3:1e:33:ca:
9d:34:1f:44:7e:72:24:a4:4f:91:db:4a:ac:5e:9c:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FB:78:20:AE:04:1F:F3:A2:A8:CC:98:26:1F:D7:9C:97:B0:76:BC
X509v3 Authority Key Identifier:
keyid:30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e5:d9:68:04:1a:19:bd:6e:8e:e1:3e:e5:62:ab:27:a9:35:
0e:62:6d:0b:aa:63:5a:5b:96:e4:af:2c:d7:37:de:13:77:b1:
97:bb:e9:d3:5f:19:53:37:66:23:2a:f5:89:46:f4:5f:37:31:
38:3a:f7:23:15:0f:c2:f8:f6:95:72:3b:3d:70:c1:70:64:49:
07:44:c9:de:94:2c:7f:50:7b:b0:c0:05:38:4d:0c:89:d9:c0:
f9:5d:06:82:5c:2a:1c:5d:48:3c:0f:b5:00:80:13:6a:a5:11:
ab:b6:6f:a4:91:d3:fa:9f:0f:8d:e6:a9:f4:14:43:4a:bc:79:
58:97:f3:0b:b9:85:8f:02:89:e2:c3:7b:d1:27:e7:94:7f:39:
45:91:cb:22:44:55:62:7d:d6:21:fc:a4:49:f6:59:6a:1c:05:
3a:c9:06:aa:a5:2e:69:f6:86:dd:fd:e9:65:dd:09:37:3b:44:
e0:37:af:4e:1c:19:96:80:84:88:bd:9a:d7:5a:3f:43:50:56:
06:2b:a4:7b:b9:ea:a7:38:9d:bb:6a:d8:86:6c:b4:ef:2c:a3:
dd:6a:c7:c8:38:5e:ce:d0:08:44:89:a1:93:5c:2b:bf:dd:a1:
1f:2d:4e:48:76:0b:01:ee:c6:e8:c2:46:6c:8e:b4:8a:c5:86:
95:c6:5c:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nce8fj18Z7fYRie0OnZgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYWFiMDJiNjU0ZTkxNWNhZGNhMzM5MjkyZTI4YzE1YzQ3
ZGY4NTgwHhcNMjYwMzI2MDAwMTExWhcNMjYwMzI3MDAwMTExWjAzMTEwLwYDVQQD
Eyg3ZGZiNzgyMGFlMDQxZmYzYTJhOGNjOTgyNjFmZDc5Yzk3YjA3NmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MnlrfE2M6ZPv0jtwpTFEOqChVJk
2v5ti9DnVAyRygck8NuxTn2S2d1+NAZi1Wz+4rUqkuNO4dEyogLQArEZWaStZSEB
7U411/U+YnW7B5VbheiEZorU/iA9yNFIoNXblHgmzzlHKdF2Wg3by0uDxYsgXjim
TH7oZ6hzUwXjpp50cwE51LFuTEClljimhkGY3LH6lpLSB2s5trn5Uh1jr8NcOfXy
eDzBZyJC7s/+lsdq9ZuSH5zMYv+nAhou2rlMUawRUtq6q/e3o7aU+5otD5If79st
MdC214nWPMcAUo13PLNUbXnVdQoqIqMeM8qdNB9EfnIkpE+R20qsXpz1BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH37eCCuBB/zoqjMmCYf15yXsHa8MB8GA1UdIwQY
MBaAFDCqsCtlTpFcrcozkpLijBXEffhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85YWZmNTQtNTk3MS00MDJmLWFiNjkt
YTQxOTY3MGQxN2UxLzEvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85YWZmNTQtNTk3MS00MDJmLWFiNjktYTQxOTY3MGQxN2Ux
LzEvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuXZaAQa
Gb1ujuE+5WKrJ6k1DmJtC6pjWluW5K8s1zfeE3exl7vp018ZUzdmIyr1iUb0Xzcx
ODr3IxUPwvj2lXI7PXDBcGRJB0TJ3pQsf1B7sMAFOE0MidnA+V0GglwqHF1IPA+1
AIATaqURq7ZvpJHT+p8Pjeap9BRDSrx5WJfzC7mFjwKJ4sN70SfnlH85RZHLIkRV
Yn3WIfykSfZZahwFOskGqqUuafaG3f3pZd0JNztE4DevThwZloCEiL2a11o/Q1BW
Biuke7nqpzidu2rYhmy07yyj3WrHyDheztAIRImhk1wrv92hHy1OSHYLAe7G6MJG
bI60isWGlcZc1A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:17 2026 by rpki-client