Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
File: mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json)
Hash identifier: gKn0wmmKbB9j0LPgIqPX5NOpwRc7nHG+bzenqBjeqIk=
Subject key identifier: A1:4E:00:73:38:D3:82:E1:BA:EA:02:F9:AE:77:E2:B4:E3:0C:C2:15
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Certificate issuer: /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial: 019D27A89EF9922DC9A9FB848B39FBD51500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:00:55 +0000
Manifest this update: Thu 26 Mar 2026 01:00:55 +0000
Manifest next update: Fri 27 Mar 2026 01:00:55 +0000
Files and hashes: 1: 3uI2T4FscmS1g4BxDBywDIRN1EM.roa (hash: GmArLm5Y723dPyhpNiMZSbQoSTY/TP5XBjOwFVSZTfc=)
2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: P8Doszg1GpF2yIXKacF/Xfn5NKhDwpsMaoBn8AsAazo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:9e:f9:92:2d:c9:a9:fb:84:8b:39:fb:d5:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Validity
Not Before: Mar 26 01:00:55 2026 GMT
Not After : Mar 27 01:00:55 2026 GMT
Subject: CN=a14e007338d382e1baea02f9ae77e2b4e30cc215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:c5:0b:f1:08:a7:96:15:e8:5e:4c:7d:52:
7e:d5:df:c3:54:90:b7:11:a3:7e:01:07:58:b3:a6:
64:ef:93:de:16:87:30:13:f2:01:80:46:59:a8:71:
61:b4:cf:55:32:89:f3:9c:a5:b8:80:45:89:f6:fc:
98:d9:84:84:89:54:a5:7f:75:20:c6:71:69:ab:d5:
c5:68:4e:0d:6a:bd:02:94:a6:bf:dc:2b:79:49:ed:
71:f4:d0:51:15:ed:1a:7b:56:f2:d2:24:e3:0c:b9:
6a:6d:4c:8d:79:1b:d3:f3:41:0c:95:86:49:36:68:
32:d3:19:11:44:b4:01:43:28:28:e7:b4:76:e6:c7:
f5:ab:58:ce:52:ff:b8:05:e2:b4:db:94:de:4f:53:
e7:2d:11:1f:ae:16:66:80:af:83:45:21:1f:a7:52:
d3:0f:5a:84:6a:a3:e4:0c:c4:de:82:35:5f:2b:84:
ff:9e:9f:82:5c:17:ff:9a:ca:dd:a3:a5:f5:41:b5:
bb:03:6a:ef:d6:5f:3b:99:89:75:5a:0b:6c:84:83:
fb:61:2f:05:79:e5:fb:bf:40:1c:f9:30:5d:28:f9:
03:82:b8:e5:32:4b:27:62:8e:4a:48:cc:ed:b2:bd:
8f:7a:95:10:ed:d8:62:2a:ce:a3:6e:c7:16:ed:ba:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4E:00:73:38:D3:82:E1:BA:EA:02:F9:AE:77:E2:B4:E3:0C:C2:15
X509v3 Authority Key Identifier:
keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:22:a2:94:1f:7c:d8:f3:b0:b6:f2:5a:94:eb:50:d2:31:0d:
cf:98:35:da:a9:83:04:b2:a9:fc:82:b2:13:e1:a4:0d:cd:80:
3a:de:9a:18:73:62:f3:36:39:34:47:43:96:55:12:e8:71:e5:
dc:72:b4:28:c3:cc:c7:2b:6d:a4:af:c8:92:8c:9a:9e:f6:cb:
6e:b3:a4:56:32:67:bd:3d:35:1e:44:f8:94:de:f7:32:df:0b:
9a:7a:ac:9e:6f:99:a4:de:2c:31:9a:a3:bb:7b:14:5c:cb:79:
44:3e:75:65:60:c4:fc:a8:89:ad:d1:0c:d3:6d:5e:c0:60:08:
f4:b0:e4:df:c4:ac:d2:9b:7b:00:88:d9:c1:bb:b7:ab:16:6d:
d9:86:03:77:d2:2b:dc:f9:e4:31:cd:fb:ad:f9:37:0c:e3:c9:
c2:c9:9d:b0:fa:e7:7a:68:da:91:a7:f9:fc:5d:29:74:60:da:
06:3f:9c:df:25:c8:50:3e:d1:7f:c1:c5:00:bb:df:fe:a5:74:
c9:16:1c:ed:43:00:84:47:89:ab:a7:2c:56:0d:f9:e9:e9:69:
5d:d7:10:9f:8a:d4:e8:43:c3:6a:d0:e7:f9:ad:e3:5c:2a:60:
eb:00:6d:98:85:13:ba:9f:fc:53:14:a9:d7:df:7c:cc:12:6b:
91:ce:3e:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqJ75ki3JqfuEizn71RUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjkwYWYwNjJlYTliM2FlNWY2NGNmOWE5ZmVhNTYzMjRj
NmJkOTcwHhcNMjYwMzI2MDEwMDU1WhcNMjYwMzI3MDEwMDU1WjAzMTEwLwYDVQQD
EyhhMTRlMDA3MzM4ZDM4MmUxYmFlYTAyZjlhZTc3ZTJiNGUzMGNjMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25jFC/EIp5YV6F5MfVJ+1d/DVJC3
EaN+AQdYs6Zk75PeFocwE/IBgEZZqHFhtM9VMonznKW4gEWJ9vyY2YSEiVSlf3Ug
xnFpq9XFaE4Nar0ClKa/3Ct5Se1x9NBRFe0ae1by0iTjDLlqbUyNeRvT80EMlYZJ
Nmgy0xkRRLQBQygo57R25sf1q1jOUv+4BeK025TeT1PnLREfrhZmgK+DRSEfp1LT
D1qEaqPkDMTegjVfK4T/np+CXBf/msrdo6X1QbW7A2rv1l87mYl1WgtshIP7YS8F
eeX7v0Ac+TBdKPkDgrjlMksnYo5KSMztsr2PepUQ7dhiKs6jbscW7bpXQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFOAHM404LhuuoC+a534rTjDMIVMB8GA1UdIwQY
MBaAFJhpCvBi6ps65fZM+an+pWMkxr2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdrSzhHTHFtenJsOWt6NXFmNmxZeVRHdlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81MTIzMTMtYWZjZC00ZTlhLWJiNzAt
NzEwMDVmN2YwMmE4LzEvbUdrSzhHTHFtenJsOWt6NXFmNmxZeVRHdlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81MTIzMTMtYWZjZC00ZTlhLWJiNzAtNzEwMDVmN2YwMmE4
LzEvbUdrSzhHTHFtenJsOWt6NXFmNmxZeVRHdlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCKilB98
2POwtvJalOtQ0jENz5g12qmDBLKp/IKyE+GkDc2AOt6aGHNi8zY5NEdDllUS6HHl
3HK0KMPMxyttpK/IkoyanvbLbrOkVjJnvT01HkT4lN73Mt8Lmnqsnm+ZpN4sMZqj
u3sUXMt5RD51ZWDE/KiJrdEM021ewGAI9LDk38Ss0pt7AIjZwbu3qxZt2YYDd9Ir
3PnkMc37rfk3DOPJwsmdsPrnemjakaf5/F0pdGDaBj+c3yXIUD7Rf8HFALvf/qV0
yRYc7UMAhEeJq6csVg356elpXdcQn4rU6EPDatDn+a3jXCpg6wBtmIUTup/8UxSp
1998zBJrkc4+lw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:03 2026 by rpki-client