Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: 7UUqZ8apFdLbQEMl+f2qyFESty88r/H7Sx7aMSfKWC8=
Subject key identifier: 83:D0:F7:40:2A:82:C1:14:70:2F:4E:E3:3F:74:89:64:C5:90:C3:EF
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 019D2584623DCC24C062FD1D9F01DF3B76AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 1624
Signing time: Wed 25 Mar 2026 15:02:06 +0000
Manifest this update: Wed 25 Mar 2026 15:02:06 +0000
Manifest next update: Thu 26 Mar 2026 15:02:06 +0000
Files and hashes: 1: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: xiykAdUkKFsG4UzAljgeo+r4lmLqWHQJb6ZaOQ/WDWs=)
2: W8EXtY-krtG948bMW6fNLmFvObQ.roa (hash: /Mw8ZZAkQ7Cam52nmslN8jl5Gh3RIhYdhuibTCP4pNc=)
3: hsUdN5AH-_WZM1oy6ZaXEs1Pgkc.roa (hash: 5DMQKgnCdfv9+elfbQuigH3vAHijYLKsjKk2UMsJGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:62:3d:cc:24:c0:62:fd:1d:9f:01:df:3b:76:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Mar 25 15:02:06 2026 GMT
Not After : Mar 26 15:02:06 2026 GMT
Subject: CN=83d0f7402a82c114702f4ee33f748964c590c3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:02:3d:01:f7:48:7a:4e:8a:98:96:e5:f3:
b9:9d:16:94:f8:e5:e8:2c:7e:a4:7c:79:3e:b0:96:
20:7b:de:70:90:a1:cd:01:82:bc:e6:b9:9d:15:af:
ea:4e:c7:99:e6:fc:61:65:81:8e:70:a6:af:55:d3:
ea:71:1b:6c:d3:3c:7f:92:22:8f:25:7e:03:86:ff:
4e:29:5f:17:df:db:2a:08:3c:6d:c0:9e:a9:c3:03:
84:21:c0:13:38:eb:5c:30:cd:1e:6b:97:2d:ef:a4:
88:4f:88:c5:34:ac:fb:96:1e:bc:ac:0c:ea:fb:56:
71:d6:cf:2d:ac:e0:cb:93:18:7c:34:34:11:e9:bc:
4c:2a:4c:01:06:45:9d:d6:d0:7c:59:a0:1b:09:fc:
86:97:0e:7c:cd:65:83:be:c3:1f:77:b3:cb:6d:cf:
f0:06:08:a0:78:34:85:9d:eb:1e:b9:53:e4:11:3c:
a7:56:d3:0c:47:56:19:73:82:cb:74:a7:f9:e6:bc:
55:99:53:3f:b2:d7:56:d0:e7:90:0e:5a:fe:a2:c1:
c9:cf:cb:02:8f:9b:44:e9:2e:63:e5:e8:26:bd:34:
bb:a0:18:94:07:23:8e:57:41:d0:8c:8a:8f:62:2d:
e3:2e:ba:b4:d7:71:8c:aa:37:54:a3:21:35:f2:04:
ad:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D0:F7:40:2A:82:C1:14:70:2F:4E:E3:3F:74:89:64:C5:90:C3:EF
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:50:09:f8:1a:09:d6:84:00:86:9f:4c:45:5b:fe:1c:a9:2b:
e8:2d:21:c6:15:53:f2:36:a1:9b:19:b9:11:7e:dd:db:eb:15:
3a:3a:a0:3f:8f:c8:ee:83:9d:6a:fd:04:8c:e2:49:5c:58:43:
96:53:f7:76:ed:ff:e5:9d:d7:cb:1c:92:ba:60:57:ac:dd:11:
e1:52:86:41:69:e5:49:24:c8:ed:57:af:cf:cf:71:d5:f9:65:
5f:4e:ed:3f:e7:c0:e2:8d:8f:d5:57:94:45:e8:d3:d7:30:d0:
92:a5:29:a6:06:2c:e0:09:48:5f:5a:22:d4:e8:28:d3:78:a1:
ef:4d:16:a6:5c:57:53:ff:05:eb:37:f9:22:b8:c4:fc:00:0c:
18:f2:f5:8f:75:11:5f:65:ab:fa:b4:6f:34:f7:ac:2e:16:1f:
15:fb:52:2e:95:83:bb:12:26:33:4c:dc:c1:be:53:d5:8a:6a:
a4:fd:73:6e:3f:62:3c:e6:53:0f:9d:c5:b0:79:14:85:7c:fb:
14:35:a6:6f:45:da:a9:2e:1d:1f:59:68:82:b0:19:3d:ea:60:
16:a0:41:ae:cf:94:a8:4f:ec:d9:18:72:42:61:51:36:32:13:
90:be:11:38:da:e5:37:e8:71:35:06:07:17:e5:dd:9e:de:9a:
1a:ef:d0:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhGI9zCTAYv0dnwHfO3aqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNDY3OTVhZDY4YTZiYWRkNWFmY2I2YmE0NjUzZTljMDkw
ZmM4NWEwHhcNMjYwMzI1MTUwMjA2WhcNMjYwMzI2MTUwMjA2WjAzMTEwLwYDVQQD
Eyg4M2QwZjc0MDJhODJjMTE0NzAyZjRlZTMzZjc0ODk2NGM1OTBjM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WgCPQH3SHpOipiW5fO5nRaU+OXo
LH6kfHk+sJYge95wkKHNAYK85rmdFa/qTseZ5vxhZYGOcKavVdPqcRts0zx/kiKP
JX4Dhv9OKV8X39sqCDxtwJ6pwwOEIcATOOtcMM0ea5ct76SIT4jFNKz7lh68rAzq
+1Zx1s8trODLkxh8NDQR6bxMKkwBBkWd1tB8WaAbCfyGlw58zWWDvsMfd7PLbc/w
BgigeDSFneseuVPkETynVtMMR1YZc4LLdKf55rxVmVM/stdW0OeQDlr+osHJz8sC
j5tE6S5j5egmvTS7oBiUByOOV0HQjIqPYi3jLrq013GMqjdUoyE18gStIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPQ90AqgsEUcC9O4z90iWTFkMPvMB8GA1UdIwQY
MBaAFDJGeVrWimut1a/La6RlPpwJD8haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMt
NzMwYjE3ZjA2OWFiLzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMtNzMwYjE3ZjA2OWFi
LzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFAJ+BoJ
1oQAhp9MRVv+HKkr6C0hxhVT8jahmxm5EX7d2+sVOjqgP4/I7oOdav0EjOJJXFhD
llP3du3/5Z3XyxySumBXrN0R4VKGQWnlSSTI7Vevz89x1fllX07tP+fA4o2P1VeU
RejT1zDQkqUppgYs4AlIX1oi1Ogo03ih700WplxXU/8F6zf5IrjE/AAMGPL1j3UR
X2Wr+rRvNPesLhYfFftSLpWDuxImM0zcwb5T1YpqpP1zbj9iPOZTD53FsHkUhXz7
FDWmb0XaqS4dH1logrAZPepgFqBBrs+UqE/s2RhyQmFRNjITkL4RONrlN+hxNQYH
F+Xdnt6aGu/QnA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:08 2026 by rpki-client