Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
File: MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json)
Hash identifier: BRadweFo33KQyzXcTeJJdwqxQZYMiJISlwSRZkfp8PE=
Subject key identifier: 4E:0B:61:4A:EA:F3:3C:A1:97:2E:07:C0:9C:68:A2:D2:FF:B4:DF:4E
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 019CAC7E1250438B136AB0D80A5B2FFDC52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
Manifest number: 0C1A
Signing time: Mon 02 Mar 2026 03:01:09 +0000
Manifest this update: Mon 02 Mar 2026 03:01:09 +0000
Manifest next update: Tue 03 Mar 2026 03:01:09 +0000
Files and hashes: 1: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: KHcfkAUB6J/zFDEw0w2zi/7J7tXDXdGo0/5f5pi51RM=)
2: b5hEA0skW7XIPdQy24vlGY78QsQ.roa (hash: wOWtUPMhhEOhukktL5n5JA5DpIw7T84vi3SfnV7rzhc=)
3: wb3Uxkn8voTzDwcrNKLjdYKwRZo.roa (hash: e7gIuzOOhyYERCBNmfCsDBCus3fRDqXK6S2fVbX8rlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:12:50:43:8b:13:6a:b0:d8:0a:5b:2f:fd:c5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Mar 2 03:01:09 2026 GMT
Not After : Mar 3 03:01:09 2026 GMT
Subject: CN=4e0b614aeaf33ca1972e07c09c68a2d2ffb4df4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:33:5f:41:90:ba:68:6d:62:ec:f0:7c:77:
6b:29:a2:3a:23:4e:b3:82:cf:57:eb:32:b1:09:36:
65:25:56:38:55:e6:c9:d3:55:ad:69:46:b1:5e:1d:
cd:5a:80:5e:d1:55:32:d5:34:d0:83:00:ce:7c:47:
f6:82:2b:18:94:9d:83:11:5f:c2:29:58:51:fc:05:
ef:bd:44:06:7b:6c:44:07:7e:60:60:2a:9a:6e:6b:
da:04:45:e2:04:ca:32:ea:7c:01:05:ac:82:e7:75:
cc:ee:58:93:b7:c7:da:27:97:61:7e:0e:f3:96:ac:
a8:59:f2:4a:d6:00:d1:af:36:df:e5:d8:01:c7:36:
3b:12:c8:c9:0f:c7:5c:f6:c5:71:66:51:29:a8:d8:
d7:3b:b8:64:43:90:30:12:7a:90:6f:a3:83:d3:ea:
98:94:c7:fb:a2:a9:0a:bc:a4:a6:89:ce:b8:71:c8:
a0:78:86:2f:2d:46:5c:ca:f2:a6:c4:05:b3:ec:09:
3e:14:46:6f:6c:14:30:7e:ea:d9:65:7d:9b:3b:ab:
50:e7:cc:ed:8e:94:71:f0:85:f9:41:53:1d:39:7a:
c5:62:c1:f7:cf:78:b8:cc:c6:0d:c7:d0:b5:c1:54:
66:59:4d:85:30:e3:1e:5f:a3:5c:41:de:c7:c8:6b:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0B:61:4A:EA:F3:3C:A1:97:2E:07:C0:9C:68:A2:D2:FF:B4:DF:4E
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:41:f8:1f:29:05:55:82:dc:24:e2:e5:9b:b5:7b:19:25:78:
77:1c:86:7e:00:d2:31:9c:99:35:ad:dc:94:71:7c:08:0c:46:
21:f6:31:a9:6f:01:c3:36:73:0d:18:91:28:57:9b:27:d9:21:
9d:a4:2a:0f:fe:6f:86:48:ab:7e:5f:8e:4d:ef:1a:e1:d2:25:
00:63:aa:3e:67:42:72:8c:5f:c7:be:b7:56:52:13:89:ea:7f:
5d:10:ee:6f:f0:a1:56:e3:82:3d:59:76:1c:75:9f:df:bd:4f:
80:33:e6:49:ff:ff:8d:91:81:bc:ca:a8:48:eb:4a:9b:a8:46:
72:f6:76:02:b2:cf:93:e1:ed:94:29:77:cc:74:e9:36:34:ef:
09:e7:6f:24:03:6a:a4:3a:fd:a6:c7:97:44:a0:70:dc:68:47:
c2:20:e2:c5:db:a3:be:1d:b1:b0:a3:6d:06:32:3b:44:d3:f9:
9b:76:40:6c:ad:6f:8b:b1:77:27:95:8a:be:65:39:be:44:83:
74:a4:aa:35:8f:8a:d6:03:71:b5:86:62:83:bd:3c:40:99:4a:
ff:fa:f1:1a:11:2e:f6:01:94:b0:3e:a2:0a:7b:04:4d:52:3d:
a0:31:1f:db:5c:f5:1d:8f:36:54:15:37:91:92:cb:c2:d5:bd:
53:34:a6:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfhJQQ4sTarDYClsv/cUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTU1NjMyZWM5MDM0YzliOWEzZjI5MGFhZWNkOWEwN2Mx
ZjI2YWIwHhcNMjYwMzAyMDMwMTA5WhcNMjYwMzAzMDMwMTA5WjAzMTEwLwYDVQQD
Eyg0ZTBiNjE0YWVhZjMzY2ExOTcyZTA3YzA5YzY4YTJkMmZmYjRkZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gQzX0GQumhtYuzwfHdrKaI6I06z
gs9X6zKxCTZlJVY4VebJ01WtaUaxXh3NWoBe0VUy1TTQgwDOfEf2gisYlJ2DEV/C
KVhR/AXvvUQGe2xEB35gYCqabmvaBEXiBMoy6nwBBayC53XM7liTt8faJ5dhfg7z
lqyoWfJK1gDRrzbf5dgBxzY7EsjJD8dc9sVxZlEpqNjXO7hkQ5AwEnqQb6OD0+qY
lMf7oqkKvKSmic64ccigeIYvLUZcyvKmxAWz7Ak+FEZvbBQwfurZZX2bO6tQ58zt
jpRx8IX5QVMdOXrFYsH3z3i4zMYNx9C1wVRmWU2FMOMeX6NcQd7HyGvi1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4LYUrq8zyhly4HwJxootL/tN9OMB8GA1UdIwQY
MBaAFDClVjLskDTJuaPykKrs2aB8HyarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NTAwMjQtODRlZS00NGM4LWIyZDkt
N2QyMGViMDYzNDU1LzEvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NTAwMjQtODRlZS00NGM4LWIyZDktN2QyMGViMDYzNDU1
LzEvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0H4HykF
VYLcJOLlm7V7GSV4dxyGfgDSMZyZNa3clHF8CAxGIfYxqW8BwzZzDRiRKFebJ9kh
naQqD/5vhkirfl+OTe8a4dIlAGOqPmdCcoxfx763VlITiep/XRDub/ChVuOCPVl2
HHWf371PgDPmSf//jZGBvMqoSOtKm6hGcvZ2ArLPk+HtlCl3zHTpNjTvCedvJANq
pDr9pseXRKBw3GhHwiDixdujvh2xsKNtBjI7RNP5m3ZAbK1vi7F3J5WKvmU5vkSD
dKSqNY+K1gNxtYZig708QJlK//rxGhEu9gGUsD6iCnsETVI9oDEf21z1HY82VBU3
kZLLwtW9UzSm/g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:06 2026 by rpki-client