Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
File: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft (raw, json)
Hash identifier: uZKEQalk8RdExQ1iyDNkjLxJvB5mh8SGxS2sJ0V2+VU=
Subject key identifier: D8:53:4B:5E:1C:CD:4C:87:DE:CE:5A:48:69:63:69:82:8C:7F:9D:CD
Authority key identifier: 30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
Certificate issuer: /CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Certificate serial: 019CAE34F9727F48F87B2D89888D14A88919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 11:00:33 +0000
Manifest this update: Mon 02 Mar 2026 11:00:33 +0000
Manifest next update: Tue 03 Mar 2026 11:00:33 +0000
Files and hashes: 1: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl (hash: 0ZbubvZ8PseWNIL8BRk0C2iMx8FIA2UL/YLhYEOFhA0=)
2: obgVf-JtsYpCUbCziUNUZUCJX0s.roa (hash: elZk4GLccy9BtoLZB3Moi/HhDxse12ofYTVsYp+AUXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:f9:72:7f:48:f8:7b:2d:89:88:8d:14:a8:89:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Validity
Not Before: Mar 2 11:00:33 2026 GMT
Not After : Mar 3 11:00:33 2026 GMT
Subject: CN=d8534b5e1ccd4c87dece5a48696369828c7f9dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:a8:ce:e4:5f:07:5f:8e:1d:40:81:54:e5:
4c:94:8b:3b:2a:da:01:79:9c:25:d9:17:2a:0b:ad:
69:ab:19:aa:b2:2d:ba:3b:1b:b9:66:54:aa:2a:37:
69:87:5a:f8:c8:a2:5a:fc:6b:76:84:26:f4:55:97:
76:2a:8b:f1:c8:2c:35:bc:0d:30:22:1e:a2:f6:b1:
ec:23:eb:eb:0e:4e:85:a3:57:02:ab:b4:ba:cf:ff:
f3:3c:22:50:16:e4:e9:99:ec:32:ea:96:a0:da:71:
22:fb:39:c9:a8:70:6e:2e:25:9c:d0:f1:8e:53:cd:
2d:39:c3:a0:10:94:79:73:a8:08:4c:c2:bb:84:77:
67:29:77:b6:6d:be:f9:e6:ca:91:c5:2f:a6:e9:fb:
b4:bf:bb:b1:c0:76:bc:ef:41:fd:69:4d:79:6c:cb:
e1:7f:92:34:cb:d5:06:34:8f:b3:95:e0:d9:e3:c8:
cc:42:76:60:b2:eb:0f:f5:4c:41:39:b8:6f:1e:cb:
a2:b1:a7:18:3b:dc:97:f9:c7:8e:54:3d:03:40:78:
76:c9:d4:72:6d:4b:ec:8c:89:81:66:60:cd:58:a4:
76:e5:4f:08:45:23:3a:f2:db:81:b8:dc:90:fe:9f:
9b:ee:ca:d2:7f:eb:fe:99:dd:e9:2b:2f:57:c4:60:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:53:4B:5E:1C:CD:4C:87:DE:CE:5A:48:69:63:69:82:8C:7F:9D:CD
X509v3 Authority Key Identifier:
keyid:30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0a:7b:94:37:7b:24:03:9d:e7:99:86:81:58:04:25:b2:24:
44:31:d9:f4:7c:6f:73:6c:e8:f1:4e:3b:4b:59:82:6b:43:6b:
6a:2e:df:6c:95:5b:52:e2:d5:ea:40:f0:02:7b:b8:c9:8e:bb:
bc:35:0c:16:03:fb:68:55:4a:91:da:b0:72:01:03:93:34:a0:
a8:1a:ac:b0:9c:a1:fd:5d:66:1c:4e:0b:4c:39:7e:5b:83:c9:
60:8b:73:8d:b7:d7:97:4d:7d:9a:59:09:23:ed:46:97:10:87:
9e:b1:82:2b:a4:32:da:a1:4a:9f:22:63:78:f2:20:45:1b:c3:
e5:f0:b8:b7:ae:cc:c5:76:24:6b:85:9f:6d:25:d2:cc:5f:c8:
c8:08:48:50:9c:39:ba:c5:44:e2:64:66:6e:d6:b7:ee:13:0d:
9e:f6:47:c5:00:71:f2:89:2a:20:51:93:12:70:e4:0d:b4:92:
d6:34:ee:0b:98:35:83:51:9e:5a:51:ca:d9:70:04:17:c5:43:
b6:b8:cc:16:d9:40:d9:24:08:a2:de:fa:f3:ca:bc:84:ca:28:
0e:09:8a:df:8c:f1:6d:69:16:9b:4a:16:16:37:10:6f:41:39:
be:fc:72:c0:03:5f:d7:a1:16:74:5c:77:00:9c:9a:0a:21:17:
7d:d2:f8:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNPlyf0j4ey2JiI0UqIkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZjkwZDI1MjBhZDYxOWFjMzA2MGIzOWZiZDJjMjA0ZTI5
YTJhMTQwHhcNMjYwMzAyMTEwMDMzWhcNMjYwMzAzMTEwMDMzWjAzMTEwLwYDVQQD
EyhkODUzNGI1ZTFjY2Q0Yzg3ZGVjZTVhNDg2OTYzNjk4MjhjN2Y5ZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzOozuRfB1+OHUCBVOVMlIs7KtoB
eZwl2RcqC61pqxmqsi26Oxu5ZlSqKjdph1r4yKJa/Gt2hCb0VZd2KovxyCw1vA0w
Ih6i9rHsI+vrDk6Fo1cCq7S6z//zPCJQFuTpmewy6pag2nEi+znJqHBuLiWc0PGO
U80tOcOgEJR5c6gITMK7hHdnKXe2bb755sqRxS+m6fu0v7uxwHa870H9aU15bMvh
f5I0y9UGNI+zleDZ48jMQnZgsusP9UxBObhvHsuisacYO9yX+ceOVD0DQHh2ydRy
bUvsjImBZmDNWKR25U8IRSM68tuBuNyQ/p+b7srSf+v+md3pKy9XxGCfFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhTS14czUyH3s5aSGljaYKMf53NMB8GA1UdIwQY
MBaAFDD5DSUgrWGawwYLOfvSwgTimioUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kYjUxMDEtMDE1Yy00MGM1LTkwNWIt
NjU3YjNhN2Q5Njc2LzEvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kYjUxMDEtMDE1Yy00MGM1LTkwNWItNjU3YjNhN2Q5Njc2
LzEvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgp7lDd7
JAOd55mGgVgEJbIkRDHZ9Hxvc2zo8U47S1mCa0Nrai7fbJVbUuLV6kDwAnu4yY67
vDUMFgP7aFVKkdqwcgEDkzSgqBqssJyh/V1mHE4LTDl+W4PJYItzjbfXl019mlkJ
I+1GlxCHnrGCK6Qy2qFKnyJjePIgRRvD5fC4t67MxXYka4WfbSXSzF/IyAhIUJw5
usVE4mRmbta37hMNnvZHxQBx8okqIFGTEnDkDbSS1jTuC5g1g1GeWlHK2XAEF8VD
trjMFtlA2SQIot7688q8hMooDgmK34zxbWkWm0oWFjcQb0E5vvxywANf16EWdFx3
AJyaCiEXfdL4hw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:53 2026 by rpki-client