Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: XQHJZChWqS57FaC7O5ECMLuTTu5pRU3DIG/OomHjQFY=
Subject key identifier: 72:38:AA:08:5E:41:BE:73:F8:33:BB:4D:54:EE:A5:01:0A:FA:03:7B
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 019DA41D2013919A0EB80955474C966BC793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 1542
Signing time: Sun 19 Apr 2026 05:01:05 +0000
Manifest this update: Sun 19 Apr 2026 05:01:05 +0000
Manifest next update: Mon 20 Apr 2026 05:01:05 +0000
Files and hashes: 1: HyTfL2K9EvoVaZy-KXOTgF1Obtg.roa (hash: 0zA+P2Wj4q6cydJzTfe4tmDc4sztqJccFJv0Zen4ddc=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: rx7ZM/dv1OWtknM1stSLnCR08SMj19XcnvfK38B4pF8=)
3: PfIfsUmHCecT0quWuMMLRmwtU_o.roa (hash: 1Lg6Rrqt3IOywh0QJkAE12er2k2miVzqT2LnmDFzGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:20:13:91:9a:0e:b8:09:55:47:4c:96:6b:c7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Apr 19 05:01:05 2026 GMT
Not After : Apr 20 05:01:05 2026 GMT
Subject: CN=7238aa085e41be73f833bb4d54eea5010afa037b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:6b:4e:03:6f:ac:e1:d0:00:bb:72:99:ba:
d3:43:c0:84:e8:af:a5:99:5d:99:a5:19:87:7f:c0:
c0:13:ec:4b:5d:94:bc:c2:9d:fc:92:a6:e3:01:f0:
9f:07:7f:56:cd:dc:bc:69:e3:1e:6b:ee:46:8e:95:
11:a3:10:bc:16:99:79:a2:ef:a0:dd:b3:ab:f2:c5:
60:9c:df:36:19:52:54:99:be:a6:04:f8:8b:bd:50:
f9:45:e9:5f:6a:5b:4c:a5:e3:e2:00:96:f4:c2:92:
44:61:02:47:a8:48:a0:74:e5:43:4f:9d:be:35:63:
18:05:6a:38:24:31:75:cc:48:93:89:d3:cb:22:f5:
a4:75:0e:75:87:ab:e1:da:a8:27:aa:dd:20:1f:f5:
37:e9:f0:bb:2a:82:19:7a:69:39:af:82:96:4b:0d:
01:c4:d6:89:0a:3b:0b:39:be:82:f3:08:73:28:be:
6e:50:58:57:c8:8e:5a:b6:a7:5c:2c:e8:63:4b:52:
6a:a4:b3:d6:52:9f:24:ee:a8:b5:dc:98:cc:22:30:
b0:44:d2:7d:c3:26:ad:31:bb:0a:c3:78:fe:92:08:
23:73:51:c1:0a:c7:77:3b:4c:ed:e5:90:77:85:3f:
e3:7a:1e:a7:3c:ae:9d:b0:6e:36:63:24:65:0f:0c:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:AA:08:5E:41:BE:73:F8:33:BB:4D:54:EE:A5:01:0A:FA:03:7B
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d3:c6:a9:49:e8:dc:60:f0:03:ab:9b:d3:e0:35:8a:77:6e:
a4:8a:65:53:82:1f:23:3a:34:e2:f1:dc:f4:24:70:49:a8:0d:
cc:fc:2d:8b:f4:d6:b9:76:66:05:4f:40:d7:d4:a7:49:68:e3:
0f:58:70:ce:61:1e:0b:c1:0a:7c:bf:6f:d2:2f:a6:42:82:84:
2c:5b:7d:8a:92:72:82:32:a0:d7:4d:2d:1a:37:c4:ed:49:e8:
12:13:02:a3:7b:01:8d:3f:8c:a9:e0:c5:13:e8:e7:87:19:85:
c1:bd:c1:1f:85:88:76:d5:c9:c2:03:0a:26:b8:eb:91:08:31:
32:f6:89:81:de:e2:72:e7:c4:af:bd:2a:2d:3e:3b:44:bb:ef:
bf:38:fd:83:77:0b:d8:bd:37:6c:10:69:44:50:af:9e:9f:66:
fe:c1:38:5e:d8:1f:9f:92:33:03:f8:8f:5f:94:4b:63:db:6c:
92:f7:61:04:bb:5e:b3:f8:cc:43:16:7b:dc:57:92:de:50:7d:
7f:2e:de:e9:0b:2d:95:6b:35:d5:34:89:4e:b3:5b:09:b1:e5:
56:10:b4:29:b2:1c:dd:73:f1:51:a8:ab:89:84:37:d9:02:a2:
81:d0:6f:17:d3:87:c3:21:81:ab:ec:5f:f0:2f:f4:36:62:66:
3a:a4:02:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHSATkZoOuAlVR0yWa8eTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMWY4NTE4OGQwODJmZDU2NDBiNWMzZmUxMjIxZjYwYzUw
MWVkYjUwHhcNMjYwNDE5MDUwMTA1WhcNMjYwNDIwMDUwMTA1WjAzMTEwLwYDVQQD
Eyg3MjM4YWEwODVlNDFiZTczZjgzM2JiNGQ1NGVlYTUwMTBhZmEwMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/trTgNvrOHQALtymbrTQ8CE6K+l
mV2ZpRmHf8DAE+xLXZS8wp38kqbjAfCfB39Wzdy8aeMea+5GjpURoxC8Fpl5ou+g
3bOr8sVgnN82GVJUmb6mBPiLvVD5RelfaltMpePiAJb0wpJEYQJHqEigdOVDT52+
NWMYBWo4JDF1zEiTidPLIvWkdQ51h6vh2qgnqt0gH/U36fC7KoIZemk5r4KWSw0B
xNaJCjsLOb6C8whzKL5uUFhXyI5atqdcLOhjS1JqpLPWUp8k7qi13JjMIjCwRNJ9
wyatMbsKw3j+kggjc1HBCsd3O0zt5ZB3hT/jeh6nPK6dsG42YyRlDwygowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHI4qgheQb5z+DO7TVTupQEK+gN7MB8GA1UdIwQY
MBaAFDEfhRiNCC/VZAtcP+EiH2DFAe21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUt
OWJiZDFlZWJlMzNlLzEvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUtOWJiZDFlZWJlMzNl
LzEvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttPGqUno
3GDwA6ub0+A1indupIplU4IfIzo04vHc9CRwSagNzPwti/TWuXZmBU9A19SnSWjj
D1hwzmEeC8EKfL9v0i+mQoKELFt9ipJygjKg100tGjfE7UnoEhMCo3sBjT+MqeDF
E+jnhxmFwb3BH4WIdtXJwgMKJrjrkQgxMvaJgd7icufEr70qLT47RLvvvzj9g3cL
2L03bBBpRFCvnp9m/sE4Xtgfn5IzA/iPX5RLY9tskvdhBLtes/jMQxZ73FeS3lB9
fy7e6QstlWs11TSJTrNbCbHlVhC0KbIc3XPxUairiYQ32QKigdBvF9OHwyGBq+xf
8C/0NmJmOqQCqw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:02 2026 by rpki-client