Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier: tZGHeiFRfZGRiDLZCWopyX8Ym0qSzvx6cKa+72jyo8E=
Subject key identifier: 99:47:93:32:5C:69:EF:F6:CF:CA:66:CB:BD:DC:E3:F3:2C:97:7F:4A
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 019CAC0FA019F80E1FFD038D8BD2D39D1160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number: 0690
Signing time: Mon 02 Mar 2026 01:00:31 +0000
Manifest this update: Mon 02 Mar 2026 01:00:31 +0000
Manifest next update: Tue 03 Mar 2026 01:00:31 +0000
Files and hashes: 1: AdH5Pv_yZHR3VpVIKZ5T98qIBYQ.roa (hash: PaFAX4cYCUSQ989JdqFr+sKEgVGux2BKRdzjdwg/7DM=)
2: KwhaP0QeniVGjiTkn66bneMlJeY.roa (hash: iAwNlU5aGm8yC+EuRcL1q9j42YQqvBEOhpW7b2OSjjU=)
3: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: jQlvTXF8ce3nCOqWZmfpTJTg0icui8Ns+OzrwEO7RnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a0:19:f8:0e:1f:fd:03:8d:8b:d2:d3:9d:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Mar 2 01:00:31 2026 GMT
Not After : Mar 3 01:00:31 2026 GMT
Subject: CN=994793325c69eff6cfca66cbbddce3f32c977f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:b2:6c:ef:66:af:e9:a9:8e:78:d8:c6:8e:
ce:59:f9:bb:cd:3d:ac:57:8e:b8:99:2c:e0:e2:a5:
f9:4e:0c:7f:ba:b8:1e:e0:a1:6a:fc:2a:9f:37:6d:
8a:83:93:04:89:03:10:f3:6c:a6:7c:5e:1c:55:1c:
a6:05:29:85:97:fe:97:91:d9:17:11:c9:75:14:dd:
bc:c3:85:95:19:b7:65:21:e0:e4:4d:eb:d4:4b:8e:
65:5c:5f:d5:20:9a:f1:e1:07:84:24:aa:00:a4:17:
a6:ef:c6:8d:f5:ef:c8:cb:83:a6:85:a6:e9:ac:37:
9f:cf:5f:5b:69:07:99:60:f7:e0:11:fe:6f:d9:9d:
88:a1:24:03:df:cd:c7:27:01:e3:df:f7:c6:eb:51:
76:01:aa:e4:30:c5:26:8a:27:87:c3:8f:60:18:43:
fa:5c:97:95:04:b3:9d:d3:26:10:a3:dd:20:1b:4c:
88:57:10:fe:f6:42:1a:e8:c9:16:60:2b:e3:d1:31:
10:49:48:2d:28:1c:82:20:7b:8d:c4:c2:11:34:bb:
0f:f0:4b:03:80:7a:86:6f:49:d2:fd:ac:39:ac:72:
46:55:cf:5a:3e:f0:3c:3b:3d:4e:ab:61:20:1a:08:
8c:0e:fb:f1:34:9f:1a:5c:8b:de:e6:9b:14:08:e7:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:47:93:32:5C:69:EF:F6:CF:CA:66:CB:BD:DC:E3:F3:2C:97:7F:4A
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:34:3e:7b:ca:a5:03:66:80:5c:cc:a1:a0:10:1b:f3:a6:8d:
1e:34:45:13:55:3a:09:fe:4b:06:61:9f:92:f5:dd:e0:42:75:
88:b2:e1:b0:1d:ed:4f:32:a8:41:4d:22:70:ec:c9:8b:15:9b:
96:17:87:cd:61:61:e3:42:72:25:f4:2a:2a:de:6b:8a:15:ed:
c7:1e:a1:4d:ce:af:cc:96:89:72:e1:c4:8d:7c:37:d8:4b:07:
fe:46:21:54:26:23:54:25:3e:5e:b7:35:13:0d:1b:84:cd:a6:
2b:d9:f5:c0:f5:c8:b8:19:2d:c2:ea:82:67:3c:6f:df:ff:17:
ca:20:70:48:38:12:6f:9e:07:44:ac:c7:ff:7c:13:12:1d:8c:
ab:8e:4d:4a:79:b0:9c:54:c3:ff:41:40:4f:7c:96:aa:02:c8:
b1:c2:d9:e7:a8:55:ec:82:ce:3b:fa:ea:59:7c:0e:24:53:0e:
8e:c7:d2:4f:46:51:fc:23:a2:e7:28:ca:a0:37:0c:3f:4e:9c:
26:cf:b6:ab:fa:35:92:13:62:c6:d6:24:9d:3e:82:19:55:fd:
24:29:35:a7:e7:ba:23:96:bf:98:49:b2:09:0b:66:87:cf:49:
27:d3:20:2e:dd:87:ad:4a:67:bc:9a:55:1b:d4:e2:ad:f2:42:
d6:8e:e1:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD6AZ+A4f/QONi9LTnRFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNGVmNzZlYjc5MDc0ZTY5YzczMzAyY2U0YzJlMGFmNDdm
NDUzMDcwHhcNMjYwMzAyMDEwMDMxWhcNMjYwMzAzMDEwMDMxWjAzMTEwLwYDVQQD
Eyg5OTQ3OTMzMjVjNjllZmY2Y2ZjYTY2Y2JiZGRjZTNmMzJjOTc3ZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr+ybO9mr+mpjnjYxo7OWfm7zT2s
V464mSzg4qX5Tgx/urge4KFq/CqfN22Kg5MEiQMQ82ymfF4cVRymBSmFl/6XkdkX
Ecl1FN28w4WVGbdlIeDkTevUS45lXF/VIJrx4QeEJKoApBem78aN9e/Iy4Omhabp
rDefz19baQeZYPfgEf5v2Z2IoSQD383HJwHj3/fG61F2AarkMMUmiieHw49gGEP6
XJeVBLOd0yYQo90gG0yIVxD+9kIa6MkWYCvj0TEQSUgtKByCIHuNxMIRNLsP8EsD
gHqGb0nS/aw5rHJGVc9aPvA8Oz1Oq2EgGgiMDvvxNJ8aXIve5psUCOeEEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlHkzJcae/2z8pmy73c4/Msl39KMB8GA1UdIwQY
MBaAFDJO9263kHTmnHMwLOTC4K9H9FMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kNGI1NDItNjM5Mi00M2QwLWE4YzIt
MmNhZGNmNjY1OGNhLzEvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kNGI1NDItNjM5Mi00M2QwLWE4YzItMmNhZGNmNjY1OGNh
LzEvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzQ+e8ql
A2aAXMyhoBAb86aNHjRFE1U6Cf5LBmGfkvXd4EJ1iLLhsB3tTzKoQU0icOzJixWb
lheHzWFh40JyJfQqKt5rihXtxx6hTc6vzJaJcuHEjXw32EsH/kYhVCYjVCU+Xrc1
Ew0bhM2mK9n1wPXIuBktwuqCZzxv3/8XyiBwSDgSb54HRKzH/3wTEh2Mq45NSnmw
nFTD/0FAT3yWqgLIscLZ56hV7ILOO/rqWXwOJFMOjsfST0ZR/COi5yjKoDcMP06c
Js+2q/o1khNixtYknT6CGVX9JCk1p+e6I5a/mEmyCQtmh89JJ9MgLt2HrUpnvJpV
G9TirfJC1o7hpA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:28 2026 by rpki-client