Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: 7WVvVgfjNz9G74idqJnpksJY2P+nxhwjnjsC0d7sEWI=
Subject key identifier: B4:E3:6C:50:28:AF:3B:19:8C:67:BF:C2:2C:14:13:A9:2A:E3:94:DE
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 019F935AB5CC3F6F1561443616B3846365CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 1766
Signing time: Fri 24 Jul 2026 09:00:23 +0000
Manifest this update: Fri 24 Jul 2026 09:00:23 +0000
Manifest next update: Sat 25 Jul 2026 09:00:23 +0000
Files and hashes: 1: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: Aghhf09PweMBQjgxFFe2fn5P4vGtxvyJ72Z4HB/fN2s=)
2: W8EXtY-krtG948bMW6fNLmFvObQ.roa (hash: /Mw8ZZAkQ7Cam52nmslN8jl5Gh3RIhYdhuibTCP4pNc=)
3: hsUdN5AH-_WZM1oy6ZaXEs1Pgkc.roa (hash: 5DMQKgnCdfv9+elfbQuigH3vAHijYLKsjKk2UMsJGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:b5:cc:3f:6f:15:61:44:36:16:b3:84:63:65:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Jul 24 09:00:23 2026 GMT
Not After : Jul 25 09:00:23 2026 GMT
Subject: CN=b4e36c5028af3b198c67bfc22c1413a92ae394de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:88:09:ba:b5:02:c4:1d:5c:7c:b5:89:24:6a:
2f:46:d4:06:e8:5d:4a:fe:41:04:73:55:41:91:f2:
ba:8b:dc:be:8b:24:8c:63:7a:cf:52:d8:06:34:42:
dc:7f:23:20:09:94:74:03:55:c6:0b:0b:4d:6f:dc:
13:17:85:cf:ab:50:6e:8b:4d:ed:6b:96:3d:1c:6e:
c7:92:5c:41:e1:d8:87:56:39:dd:3a:ce:b2:d3:0c:
f6:f0:dc:2f:10:64:1b:2f:0d:5d:6d:eb:70:e7:41:
08:3c:2e:59:74:06:ec:eb:3a:c0:7c:da:c0:81:b7:
24:f6:66:f8:9c:2c:bc:a5:b2:7b:89:2f:17:f1:75:
31:59:f2:ec:35:7a:89:1c:8a:cf:b1:c1:97:90:9f:
ba:af:87:56:10:fe:b7:e3:82:9c:3a:bb:9b:be:3e:
44:10:9e:b3:c0:fc:2f:22:02:a3:40:51:04:05:cf:
ef:9c:a3:f3:ee:38:ba:28:01:d5:d1:4c:62:3b:76:
d3:18:3a:36:cc:bc:ff:2c:fc:36:25:e0:78:02:38:
74:e0:d7:91:37:cb:7e:4c:be:77:1a:42:9b:08:e4:
a6:e1:75:2e:f2:fa:46:f0:55:77:a6:39:c4:88:6b:
50:2f:8f:3b:c5:e1:65:a6:1a:80:72:84:d4:13:d7:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E3:6C:50:28:AF:3B:19:8C:67:BF:C2:2C:14:13:A9:2A:E3:94:DE
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:96:a6:5a:6b:81:71:65:08:3c:41:74:0b:23:3a:4a:73:92:
11:87:ec:d7:ba:e0:82:85:69:c8:6f:1b:95:f7:51:a6:45:53:
8c:0b:96:9e:31:f1:ff:c2:06:34:51:dc:d6:c2:f9:bc:d9:0f:
e0:61:ca:b0:4d:6a:ff:1e:4d:9e:24:4f:d0:e6:6b:e5:25:e7:
73:e2:8e:33:2f:2c:a8:89:f1:59:15:b8:8e:73:a6:75:5c:73:
3c:17:ba:ef:71:95:da:89:e3:18:15:4f:79:f9:3e:d0:50:6b:
3a:a3:85:e7:aa:af:68:59:59:0b:0e:91:fe:f4:9d:77:b9:f3:
e8:5a:e0:64:e9:2b:6c:23:b5:b6:a3:a7:e7:7d:af:3b:f9:a1:
7e:8b:40:53:96:79:a5:51:cc:c4:78:53:6a:7d:5c:de:4b:cf:
f3:c9:a7:f6:9b:bb:5d:54:96:bc:4e:8a:ed:6f:86:3b:26:9f:
5b:e6:39:fe:c3:ef:81:6e:33:51:5b:74:70:44:eb:59:d7:96:
76:9c:a7:96:34:85:68:39:de:c6:48:e2:87:86:62:d8:8d:12:
d4:1e:8f:5a:b2:7d:42:93:11:ea:e1:94:6e:90:06:e5:a2:d4:
14:77:a5:35:74:0d:75:70:ba:2b:df:e9:2e:6d:0d:8d:99:bf:
cd:a4:ef:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWrXMP28VYUQ2FrOEY2XPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNDY3OTVhZDY4YTZiYWRkNWFmY2I2YmE0NjUzZTljMDkw
ZmM4NWEwHhcNMjYwNzI0MDkwMDIzWhcNMjYwNzI1MDkwMDIzWjAzMTEwLwYDVQQD
EyhiNGUzNmM1MDI4YWYzYjE5OGM2N2JmYzIyYzE0MTNhOTJhZTM5NGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYgJurUCxB1cfLWJJGovRtQG6F1K
/kEEc1VBkfK6i9y+iySMY3rPUtgGNELcfyMgCZR0A1XGCwtNb9wTF4XPq1Bui03t
a5Y9HG7HklxB4diHVjndOs6y0wz28NwvEGQbLw1dbetw50EIPC5ZdAbs6zrAfNrA
gbck9mb4nCy8pbJ7iS8X8XUxWfLsNXqJHIrPscGXkJ+6r4dWEP6344KcOrubvj5E
EJ6zwPwvIgKjQFEEBc/vnKPz7ji6KAHV0UxiO3bTGDo2zLz/LPw2JeB4Ajh04NeR
N8t+TL53GkKbCOSm4XUu8vpG8FV3pjnEiGtQL487xeFlphqAcoTUE9cawQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTjbFAorzsZjGe/wiwUE6kq45TeMB8GA1UdIwQY
MBaAFDJGeVrWimut1a/La6RlPpwJD8haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMt
NzMwYjE3ZjA2OWFiLzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMtNzMwYjE3ZjA2OWFi
LzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJamWmuB
cWUIPEF0CyM6SnOSEYfs17rggoVpyG8blfdRpkVTjAuWnjHx/8IGNFHc1sL5vNkP
4GHKsE1q/x5NniRP0OZr5SXnc+KOMy8sqInxWRW4jnOmdVxzPBe673GV2onjGBVP
efk+0FBrOqOF56qvaFlZCw6R/vSdd7nz6FrgZOkrbCO1tqOn532vO/mhfotAU5Z5
pVHMxHhTan1c3kvP88mn9pu7XVSWvE6K7W+GOyafW+Y5/sPvgW4zUVt0cETrWdeW
dpynljSFaDnexkjih4Zi2I0S1B6PWrJ9QpMR6uGUbpAG5aLUFHelNXQNdXC6K9/p
Lm0NjZm/zaTvbg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:22 2026 by rpki-client