Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File: MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier: zl1X4j+YQNIv590BKWsdyVdwx7JImGKwcbjriwCzL4o=
Subject key identifier: 9D:E5:F2:B9:99:B5:0C:4E:2E:BE:E5:0B:F3:6D:99:5E:95:17:A5:51
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 019D9AE34AE1E2A648393FC098917993BB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number: 0EE0
Signing time: Fri 17 Apr 2026 10:01:20 +0000
Manifest this update: Fri 17 Apr 2026 10:01:20 +0000
Manifest next update: Sat 18 Apr 2026 10:01:20 +0000
Files and hashes: 1: LMyd5AVVPstuPC5E7pVL_2qH79c.roa (hash: tZV4ibO3L7V8SZM1mv/sUwiQCz0xJaX2spb6v95tdyA=)
2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: pL4fDtQJAA7MGBRA2/QJpZHzz+ZgmT1wWzgqjJa/toM=)
3: N5As3_5f02c5s8zn2uyxGXeV7es.roa (hash: agj60RbD37HPgv9kIsdcj8QWRgmWH3ok7Fvf9vYBX/k=)
4: f69K1aG7WjoLOs2Y1pAtNPdEc1U.roa (hash: cGXoJfZUx/B5ZqQ+rwCKHOTNtBGcpBtjUB50pxeKDJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:4a:e1:e2:a6:48:39:3f:c0:98:91:79:93:bb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Apr 17 10:01:20 2026 GMT
Not After : Apr 18 10:01:20 2026 GMT
Subject: CN=9de5f2b999b50c4e2ebee50bf36d995e9517a551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:03:35:8a:4c:b4:ba:8a:af:fb:7e:97:3e:
8e:98:90:d7:1d:cd:e3:0e:4b:3d:a5:9b:12:7b:e4:
9c:2a:78:fe:cb:d3:e8:c5:82:8f:70:3f:98:97:b7:
0e:bc:a6:b7:3d:af:e6:4d:77:3b:19:34:f4:44:5d:
fe:15:e6:6f:49:7c:b8:a3:6d:8b:3f:a0:ee:86:fb:
63:6c:d8:47:c4:2c:bd:39:70:9e:29:fd:c0:b3:f7:
6e:8a:50:4d:41:e1:92:b9:93:59:41:57:71:72:02:
76:fe:d9:93:7b:02:eb:96:cf:b4:49:2b:99:9d:8a:
42:af:34:c8:3c:b2:6a:7a:ad:5c:e7:ef:7a:c3:ef:
32:e7:48:3f:51:4e:6f:9b:21:17:9b:8f:85:8b:72:
ab:8d:34:5b:51:e7:c8:82:58:7f:91:2d:34:d4:10:
31:68:02:32:4f:5d:4e:35:17:bb:9a:e7:0f:a7:11:
90:4b:6e:65:db:cb:f9:12:21:29:f6:9d:a8:f8:bb:
a9:35:00:be:6a:07:53:36:b4:ec:ec:d6:1b:a0:36:
a7:16:57:27:48:4a:a5:1e:e6:a2:de:90:5a:91:7a:
b4:63:78:fd:fd:fc:07:d3:af:11:71:7b:13:dd:62:
ad:16:9c:b8:82:b5:01:2d:4d:fe:be:6f:b7:cb:20:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E5:F2:B9:99:B5:0C:4E:2E:BE:E5:0B:F3:6D:99:5E:95:17:A5:51
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:10:40:e6:c7:5e:08:47:e9:11:a3:0d:38:4c:69:65:56:7a:
38:2a:42:49:55:03:89:92:b1:a2:54:5a:20:3b:ab:1c:b7:87:
52:a4:45:63:16:40:ae:3a:f2:41:e7:5a:b4:51:fe:24:a1:d2:
d0:10:45:98:45:60:da:20:c5:e1:4c:d0:ea:26:74:b4:71:c4:
9f:02:3b:56:f4:e4:4a:3f:aa:db:17:f0:d2:76:e8:be:86:76:
75:a4:c1:ca:50:4b:c9:f5:90:85:e0:6c:73:6a:3f:13:ba:71:
86:7b:b6:43:9c:eb:d9:5c:5c:9a:40:c7:7d:6d:21:65:63:5f:
47:06:a1:a9:ea:af:2f:d4:68:21:6d:dc:50:fe:86:4a:2c:bf:
bd:97:ee:fc:90:ee:35:d4:41:07:0e:e0:6b:0c:1c:7e:76:29:
7e:25:ac:2d:a1:5c:77:ce:bc:b9:58:07:2d:1a:43:5f:cd:56:
0e:c9:10:5d:c8:58:48:83:75:2c:c8:a4:80:3a:ea:a6:0e:82:
c7:04:ee:d1:8c:dd:6d:c4:eb:e3:5a:e3:3b:4d:88:43:89:e5:
34:45:57:93:99:a0:fb:a6:48:96:4e:e9:e3:ee:c6:00:fb:39:
bb:37:58:fb:a9:f3:37:98:17:9e:b4:ce:a5:6c:e2:54:88:7b:
b1:80:02:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:36 2026 by rpki-client