Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: W5WEvJCx0D/i1NZJQEW7Iv3Yc8zxx3QLUx1DX7VBzbY=
Subject key identifier: 43:4E:CF:40:B9:EF:E4:74:89:06:0C:68:6A:BC:D7:95:32:6F:CE:80
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 01A0D3EF91D3EE2B2C0C35CA3C524151C81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 180C
Signing time: Thu 24 Sep 2026 15:01:28 +0000
Manifest this update: Thu 24 Sep 2026 15:01:28 +0000
Manifest next update: Fri 25 Sep 2026 15:01:28 +0000
Files and hashes: 1: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: mn9o6RfGjT35SDQHaWSMoej25QJ+v94IOamPJIhRtWo=)
2: W8EXtY-krtG948bMW6fNLmFvObQ.roa (hash: /Mw8ZZAkQ7Cam52nmslN8jl5Gh3RIhYdhuibTCP4pNc=)
3: hsUdN5AH-_WZM1oy6ZaXEs1Pgkc.roa (hash: 5DMQKgnCdfv9+elfbQuigH3vAHijYLKsjKk2UMsJGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:91:d3:ee:2b:2c:0c:35:ca:3c:52:41:51:c8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Sep 24 15:01:28 2026 GMT
Not After : Sep 25 15:01:28 2026 GMT
Subject: CN=434ecf40b9efe47489060c686abcd795326fce80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:c3:27:c4:e7:4e:8a:a7:85:da:52:dc:20:
32:6b:24:c3:bc:09:71:33:12:2b:e7:98:00:d7:eb:
7e:56:84:b3:16:98:8f:99:6f:af:60:53:33:5f:21:
31:d0:8b:a2:c9:e3:3a:89:e7:30:38:dc:10:a3:91:
8c:4f:72:db:27:d6:c4:32:03:b5:aa:e1:5f:b8:45:
7b:6e:f7:71:df:2f:91:fd:b3:c7:a9:4c:3a:63:4a:
19:73:9e:49:65:05:01:68:2d:e1:b5:53:f4:20:e6:
02:65:cd:6d:ec:1d:5d:56:22:c6:a4:6e:98:1d:12:
70:16:7b:50:1a:b0:1a:51:bf:c4:2a:6d:ae:8c:ae:
9f:d6:af:4f:fd:dc:a0:37:c0:e8:66:84:bd:bb:d0:
48:be:7e:de:c7:02:a8:3f:a4:36:df:da:1e:45:bf:
b6:30:5c:96:be:25:84:15:a2:8d:93:0f:c7:44:1a:
f4:5b:18:b9:f0:3f:f6:a7:6f:ff:d3:15:cf:80:b7:
bb:e2:16:8b:a5:c7:a9:04:2f:31:fe:ef:3e:a1:83:
4a:4e:6e:cc:da:25:0f:14:0c:0c:54:60:ef:00:59:
82:3c:1c:37:6b:a7:35:2f:de:82:ab:56:24:cd:6c:
b2:2d:b5:ee:b6:f8:8d:9f:31:20:3e:c9:61:05:d4:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4E:CF:40:B9:EF:E4:74:89:06:0C:68:6A:BC:D7:95:32:6F:CE:80
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:04:61:0f:44:e1:86:6c:29:c0:df:3a:41:97:67:67:36:7b:
37:dd:0c:74:23:06:e7:3a:a0:14:21:51:93:5b:cb:1d:8e:5b:
71:48:e7:8a:a4:95:1c:79:59:49:d3:2e:8e:3c:dc:a8:2e:84:
45:bf:80:c9:64:26:3d:3a:1a:92:49:62:7c:2d:76:00:2c:45:
1f:c9:92:f6:a3:87:2d:c7:0f:8a:f9:ec:62:36:e6:c7:34:33:
d7:9c:21:d9:d4:a7:6a:3d:a8:b3:f4:2a:d9:30:43:1a:79:b8:
17:cb:64:3b:15:e6:03:98:dd:33:05:87:4b:ce:f5:6a:b9:fd:
24:e9:21:8a:44:65:c9:b2:1e:64:f8:9e:8a:da:93:ae:28:78:
80:2f:12:84:1c:03:35:8e:c7:27:d6:66:ee:80:81:f8:85:d1:
9f:22:f5:39:e4:4c:a2:f8:2f:4f:5d:d8:e6:dc:c7:1d:09:21:
05:6a:61:7d:3f:cc:53:5d:49:1a:8f:52:f1:a7:3c:8d:60:93:
90:8b:c9:08:5b:c7:5f:48:08:ed:f8:14:f0:55:86:31:6e:cc:
2d:4c:8c:09:2b:07:e0:46:cb:d3:cf:7b:1e:7e:10:df:e0:33:
d8:94:68:fb:92:40:0e:ff:04:1c:63:e8:a3:94:cc:5b:6b:99:
13:f9:97:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT75HT7issDDXKPFJBUcgaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNDY3OTVhZDY4YTZiYWRkNWFmY2I2YmE0NjUzZTljMDkw
ZmM4NWEwHhcNMjYwOTI0MTUwMTI4WhcNMjYwOTI1MTUwMTI4WjAzMTEwLwYDVQQD
Eyg0MzRlY2Y0MGI5ZWZlNDc0ODkwNjBjNjg2YWJjZDc5NTMyNmZjZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkjDJ8TnToqnhdpS3CAyayTDvAlx
MxIr55gA1+t+VoSzFpiPmW+vYFMzXyEx0IuiyeM6iecwONwQo5GMT3LbJ9bEMgO1
quFfuEV7bvdx3y+R/bPHqUw6Y0oZc55JZQUBaC3htVP0IOYCZc1t7B1dViLGpG6Y
HRJwFntQGrAaUb/EKm2ujK6f1q9P/dygN8DoZoS9u9BIvn7exwKoP6Q239oeRb+2
MFyWviWEFaKNkw/HRBr0Wxi58D/2p2//0xXPgLe74haLpcepBC8x/u8+oYNKTm7M
2iUPFAwMVGDvAFmCPBw3a6c1L96Cq1YkzWyyLbXutviNnzEgPslhBdR3PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENOz0C57+R0iQYMaGq815Uyb86AMB8GA1UdIwQY
MBaAFDJGeVrWimut1a/La6RlPpwJD8haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMt
NzMwYjE3ZjA2OWFiLzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMtNzMwYjE3ZjA2OWFi
LzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwRhD0Th
hmwpwN86QZdnZzZ7N90MdCMG5zqgFCFRk1vLHY5bcUjniqSVHHlZSdMujjzcqC6E
Rb+AyWQmPToakklifC12ACxFH8mS9qOHLccPivnsYjbmxzQz15wh2dSnaj2os/Qq
2TBDGnm4F8tkOxXmA5jdMwWHS871arn9JOkhikRlybIeZPieitqTrih4gC8ShBwD
NY7HJ9Zm7oCB+IXRnyL1OeRMovgvT13Y5tzHHQkhBWphfT/MU11JGo9S8ac8jWCT
kIvJCFvHX0gI7fgU8FWGMW7MLUyMCSsH4EbL0897Hn4Q3+Az2JRo+5JADv8EHGPo
o5TMW2uZE/mXwA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:42:27 2026 by rpki-client