Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
File: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft (raw, json)
Hash identifier: yV4uhnvkv1aCdaNP07+59f84egItXsxxefD7+GSrATY=
Subject key identifier: A4:00:26:19:5B:90:21:46:5B:6E:27:3F:A4:4A:65:FE:7A:29:A8:0F
Authority key identifier: 30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
Certificate issuer: /CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Certificate serial: 019DA378F01A8FE8C95DA6386CE3E8184EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 02:01:45 +0000
Manifest this update: Sun 19 Apr 2026 02:01:45 +0000
Manifest next update: Mon 20 Apr 2026 02:01:45 +0000
Files and hashes: 1: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl (hash: F/b3/ncS4r1dGyV2a2ocqxcebCHqze6ejCMGCVJL3BA=)
2: obgVf-JtsYpCUbCziUNUZUCJX0s.roa (hash: elZk4GLccy9BtoLZB3Moi/HhDxse12ofYTVsYp+AUXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:f0:1a:8f:e8:c9:5d:a6:38:6c:e3:e8:18:4e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Validity
Not Before: Apr 19 02:01:45 2026 GMT
Not After : Apr 20 02:01:45 2026 GMT
Subject: CN=a40026195b9021465b6e273fa44a65fe7a29a80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:26:7c:46:8f:2d:4e:f0:ff:3b:46:75:ba:28:
b6:68:44:5d:38:44:38:66:da:a3:5d:59:b7:76:e8:
32:70:11:bb:d7:84:78:4d:74:73:a7:cf:30:2e:2f:
a2:af:7b:3a:dc:fe:7b:19:e7:ab:bb:b5:5a:1e:1d:
c2:7f:95:cb:dc:48:d1:d6:07:88:b2:b8:9e:cc:16:
83:6c:64:1c:06:11:49:bd:90:8b:a1:a2:51:79:32:
da:10:20:00:52:73:9b:6b:22:db:23:13:35:ee:34:
82:ff:ba:99:c3:2a:75:08:07:5b:6e:5f:6f:99:c4:
c9:ec:56:30:dd:c8:67:f5:c1:78:78:8b:4c:2b:4b:
8d:51:f6:28:87:c5:e5:c0:d6:21:3d:cc:68:6a:2a:
73:12:46:e2:6c:19:34:6d:3e:c8:88:dc:4a:9a:f4:
cb:50:62:56:c4:e3:8d:e3:c3:5a:24:c4:1b:dc:a4:
f7:34:b2:85:9f:69:62:63:1a:9c:7a:42:42:53:78:
28:1b:3d:47:3a:fe:ba:5c:9c:1e:99:c4:97:60:b8:
b8:47:27:1c:4e:c0:e7:2b:67:49:b6:e7:f4:0a:de:
6c:57:ed:3d:21:22:61:e2:bd:52:7b:dd:65:8c:96:
3f:02:83:09:26:84:2e:f3:66:e4:9b:28:6d:17:86:
cd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:00:26:19:5B:90:21:46:5B:6E:27:3F:A4:4A:65:FE:7A:29:A8:0F
X509v3 Authority Key Identifier:
keyid:30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:e5:7e:0b:4e:f7:3f:e7:11:53:3d:8d:30:1a:10:11:26:a1:
4f:e1:a2:9a:99:81:2f:66:fa:8b:1e:8f:c1:47:ec:94:82:6f:
8a:91:98:a4:4a:0f:fa:44:16:0d:8f:15:ff:7b:56:4d:a3:a7:
ba:81:b3:50:eb:28:a9:67:d3:43:3d:0f:ea:2a:0a:74:50:89:
c9:6a:a3:a5:f8:ad:c0:18:a1:73:95:1a:27:cc:35:2e:70:4d:
85:9f:b9:d2:b0:05:a1:26:5a:dc:74:dc:d9:ad:17:65:5b:af:
bb:5f:f0:a9:41:f7:af:f5:0f:52:fe:fe:8e:24:0b:c6:46:36:
00:c0:9b:50:68:e7:42:e8:5b:87:c9:39:38:81:f3:bd:e1:b7:
9c:94:ec:4d:6d:a2:ce:83:de:1c:ca:92:01:60:6e:c7:a1:62:
e1:df:a1:c0:d0:71:f1:60:f8:8f:42:3c:56:5a:92:8b:5f:ea:
61:9c:02:de:db:c4:ec:88:3c:c8:32:d2:f8:25:2b:6f:ae:a8:
40:48:08:8a:d9:c3:bf:d2:5b:e3:fb:5f:8b:54:67:87:32:df:
9e:b4:ec:6f:f5:17:36:72:d0:52:45:73:75:33:44:04:b9:23:
0e:32:07:85:e5:93:15:39:80:37:d0:21:ba:17:14:e4:c2:f7:
c4:1e:0b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jePAaj+jJXaY4bOPoGE7dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZjkwZDI1MjBhZDYxOWFjMzA2MGIzOWZiZDJjMjA0ZTI5
YTJhMTQwHhcNMjYwNDE5MDIwMTQ1WhcNMjYwNDIwMDIwMTQ1WjAzMTEwLwYDVQQD
EyhhNDAwMjYxOTViOTAyMTQ2NWI2ZTI3M2ZhNDRhNjVmZTdhMjlhODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCZ8Ro8tTvD/O0Z1uii2aERdOEQ4
ZtqjXVm3dugycBG714R4TXRzp88wLi+ir3s63P57Geeru7VaHh3Cf5XL3EjR1geI
sriezBaDbGQcBhFJvZCLoaJReTLaECAAUnObayLbIxM17jSC/7qZwyp1CAdbbl9v
mcTJ7FYw3chn9cF4eItMK0uNUfYoh8XlwNYhPcxoaipzEkbibBk0bT7IiNxKmvTL
UGJWxOON48NaJMQb3KT3NLKFn2liYxqcekJCU3goGz1HOv66XJwemcSXYLi4Rycc
TsDnK2dJtuf0Ct5sV+09ISJh4r1Se91ljJY/AoMJJoQu82bkmyhtF4bNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQAJhlbkCFGW24nP6RKZf56KagPMB8GA1UdIwQY
MBaAFDD5DSUgrWGawwYLOfvSwgTimioUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kYjUxMDEtMDE1Yy00MGM1LTkwNWIt
NjU3YjNhN2Q5Njc2LzEvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kYjUxMDEtMDE1Yy00MGM1LTkwNWItNjU3YjNhN2Q5Njc2
LzEvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx+V+C073
P+cRUz2NMBoQESahT+GimpmBL2b6ix6PwUfslIJvipGYpEoP+kQWDY8V/3tWTaOn
uoGzUOsoqWfTQz0P6ioKdFCJyWqjpfitwBihc5UaJ8w1LnBNhZ+50rAFoSZa3HTc
2a0XZVuvu1/wqUH3r/UPUv7+jiQLxkY2AMCbUGjnQuhbh8k5OIHzveG3nJTsTW2i
zoPeHMqSAWBux6Fi4d+hwNBx8WD4j0I8VlqSi1/qYZwC3tvE7Ig8yDLS+CUrb66o
QEgIitnDv9Jb4/tfi1RnhzLfnrTsb/UXNnLQUkVzdTNEBLkjDjIHheWTFTmAN9Ah
uhcU5ML3xB4L8Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:06 2026 by rpki-client