Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier: BfyRbpdxCce8rdNGvhJq6UwAoLw3w62KZxMg+za9d+U=
Subject key identifier: 38:B1:56:59:28:2C:22:FA:D7:3C:05:62:6F:DA:37:E8:B1:F6:BC:0D
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 019D9A3E47620B65C93720A5DEA440588ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number: 093D
Signing time: Fri 17 Apr 2026 07:01:05 +0000
Manifest this update: Fri 17 Apr 2026 07:01:05 +0000
Manifest next update: Sat 18 Apr 2026 07:01:05 +0000
Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: cbeFjpnleYHqtqpXzS0nZSeOXlFYEuV+pKIwabd2dzc=)
2: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (hash: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:47:62:0b:65:c9:37:20:a5:de:a4:40:58:8e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Apr 17 07:01:05 2026 GMT
Not After : Apr 18 07:01:05 2026 GMT
Subject: CN=38b15659282c22fad73c05626fda37e8b1f6bc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1a:f0:ff:53:9a:80:76:12:9e:42:00:07:c8:
0b:81:fe:87:1a:21:30:82:23:43:1a:54:ea:5f:93:
10:42:26:4c:08:b8:6d:0b:7e:a9:9a:23:93:89:d7:
58:82:1e:84:3f:77:35:16:e0:4d:eb:2c:48:e3:08:
ac:15:ee:45:0c:2a:2e:34:34:2c:4f:5f:79:bd:1a:
47:cd:f1:c0:fe:28:a9:62:55:35:42:c4:b5:ce:58:
ff:8b:45:57:53:53:3f:a1:78:d4:83:36:e0:20:73:
a4:3b:ac:00:c8:4a:fd:34:b8:08:f3:db:e6:e8:b4:
6c:95:60:30:1c:31:59:5e:4c:5f:ba:97:27:8d:2f:
86:c0:14:8e:c6:4f:e1:ac:e2:bd:a9:68:98:db:35:
73:52:76:d9:4d:48:01:56:1e:b9:d5:d0:28:ba:49:
8a:d7:89:7f:9b:61:09:71:08:47:72:2e:22:e6:59:
6c:d9:df:84:3b:cc:96:7e:fa:06:25:b1:13:51:41:
ea:37:09:81:70:21:f4:72:cf:15:06:6d:e4:d0:8e:
59:a1:86:bd:ea:6e:5f:44:ae:6d:48:0f:e4:ed:97:
ee:5d:d3:61:6c:ff:ba:8f:4e:d3:fa:7d:e4:18:20:
94:ab:0b:18:88:e5:27:c5:77:02:5e:d8:9a:97:4d:
b7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B1:56:59:28:2C:22:FA:D7:3C:05:62:6F:DA:37:E8:B1:F6:BC:0D
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2a:0d:0b:d5:56:ca:27:a9:b4:82:10:98:e4:0d:db:c6:9d:
a8:b9:47:9e:f1:23:f3:9c:8f:2f:dc:3f:7b:0a:be:14:f6:cd:
cf:38:11:49:5a:bc:b9:7d:e4:5f:79:fd:1a:6d:61:3e:85:17:
13:16:84:dc:01:be:dc:4d:85:73:27:c5:92:85:78:2b:3f:6b:
68:6d:46:b6:92:26:0f:f0:9f:08:ba:19:29:38:c8:6d:43:58:
34:86:ac:bc:c4:9a:5f:c7:7f:bc:51:40:a0:29:fc:fe:5f:87:
dc:1e:74:4c:8f:ea:dc:0c:6e:24:78:2a:f1:cf:ab:33:64:66:
72:5b:48:2e:cf:e1:e1:71:d1:fe:52:0d:a3:81:f6:e1:7c:5b:
c5:64:43:7b:57:91:e7:d4:7c:97:d5:79:c4:37:98:c9:60:58:
1d:73:e4:7f:7c:97:6d:b4:70:f3:08:7a:0f:e4:1e:e2:7f:e1:
34:f9:f0:09:4a:fa:a3:8c:7f:ea:5b:27:f2:94:d5:fb:6d:64:
75:36:f5:21:a0:06:84:f5:d3:1d:e1:9f:80:62:6c:94:9d:f5:
e8:12:ba:13:c7:3f:f8:da:f9:a4:fe:56:0e:8f:fc:6d:bf:39:
1c:3a:9a:e5:1f:08:45:97:04:83:c3:53:68:82:f9:11:6a:ca:
cb:96:bc:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPkdiC2XJNyCl3qRAWI7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZjA4Zjg0MGUzMTdlOTUyMDViYTEzNDk3ZDlkYmM3Mzc3
YjllNTcwHhcNMjYwNDE3MDcwMTA1WhcNMjYwNDE4MDcwMTA1WjAzMTEwLwYDVQQD
EygzOGIxNTY1OTI4MmMyMmZhZDczYzA1NjI2ZmRhMzdlOGIxZjZiYzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Rrw/1OagHYSnkIAB8gLgf6HGiEw
giNDGlTqX5MQQiZMCLhtC36pmiOTiddYgh6EP3c1FuBN6yxI4wisFe5FDCouNDQs
T195vRpHzfHA/iipYlU1QsS1zlj/i0VXU1M/oXjUgzbgIHOkO6wAyEr9NLgI89vm
6LRslWAwHDFZXkxfupcnjS+GwBSOxk/hrOK9qWiY2zVzUnbZTUgBVh651dAoukmK
14l/m2EJcQhHci4i5lls2d+EO8yWfvoGJbETUUHqNwmBcCH0cs8VBm3k0I5ZoYa9
6m5fRK5tSA/k7ZfuXdNhbP+6j07T+n3kGCCUqwsYiOUnxXcCXtial023gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDixVlkoLCL61zwFYm/aN+ix9rwNMB8GA1UdIwQY
MBaAFDDwj4QOMX6VIFuhNJfZ28c3e55XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgt
Nzk2YjM4Nzk2ZjY5LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgtNzk2YjM4Nzk2ZjY5
LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSoNC9VW
yieptIIQmOQN28adqLlHnvEj85yPL9w/ewq+FPbNzzgRSVq8uX3kX3n9Gm1hPoUX
ExaE3AG+3E2FcyfFkoV4Kz9raG1GtpImD/CfCLoZKTjIbUNYNIasvMSaX8d/vFFA
oCn8/l+H3B50TI/q3AxuJHgq8c+rM2RmcltILs/h4XHR/lINo4H24XxbxWRDe1eR
59R8l9V5xDeYyWBYHXPkf3yXbbRw8wh6D+Qe4n/hNPnwCUr6o4x/6lsn8pTV+21k
dTb1IaAGhPXTHeGfgGJslJ316BK6E8c/+Nr5pP5WDo/8bb85HDqa5R8IRZcEg8NT
aIL5EWrKy5a8Kw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:42 2026 by rpki-client