Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: z8b3VFcCZGZSEZUayGil5PBxXmeHhY1XmfST/JTgnFk=
Subject key identifier: 19:40:D4:18:36:A8:DA:58:93:C4:8E:63:FE:2B:29:B9:BC:A5:CD:A7
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 019CA7FC5AFC11620269C181F5DDBBDFCC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 1226
Signing time: Sun 01 Mar 2026 06:00:59 +0000
Manifest this update: Sun 01 Mar 2026 06:00:59 +0000
Manifest next update: Mon 02 Mar 2026 06:00:59 +0000
Files and hashes: 1: KNVzSibwcIeJsoSsffQEDCnxWf0.asa (hash: y8bkznZSy/A3ZDayRMz8nCgtieLCBzH6L8q9ZF7Ujzk=)
2: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: xnDyn4KWfA8hwPNB3HTz/QuQveUacP874GbjKkw/yls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:5a:fc:11:62:02:69:c1:81:f5:dd:bb:df:cc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Mar 1 06:00:59 2026 GMT
Not After : Mar 2 06:00:59 2026 GMT
Subject: CN=1940d41836a8da5893c48e63fe2b29b9bca5cda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:4e:9d:31:16:ee:bf:2f:74:b3:9d:06:b1:
48:f4:7b:e3:72:c8:2e:ab:36:12:de:24:f8:e6:a1:
be:31:b9:4d:26:9a:d0:09:b1:e9:11:ac:fd:54:9b:
c1:51:ca:92:81:34:00:56:d6:c9:ed:e8:2f:03:5d:
aa:f1:53:e9:53:b6:3e:b8:fa:7c:ab:ea:48:17:13:
8c:bf:e6:84:43:28:61:1f:58:48:61:00:f1:f7:94:
00:61:a0:40:21:36:88:b2:bf:fc:ec:73:9f:a8:42:
f1:96:03:3e:59:c6:d3:3b:78:02:08:53:88:06:12:
8c:10:8f:eb:06:57:e3:ca:51:6f:3c:fa:58:ef:75:
01:b0:03:ce:7d:d3:a9:27:ac:38:fe:a3:b0:fd:c9:
a4:fa:f6:e7:ee:1f:86:dc:a3:4a:19:16:ca:a2:74:
94:32:2a:d0:49:0c:70:ce:4a:d2:27:5e:5a:9a:93:
26:8c:60:67:cf:ef:32:b5:d8:0c:62:7a:b5:92:b8:
42:80:c2:dc:3c:36:09:d8:74:5b:08:f2:c3:7a:45:
12:8a:ed:49:b8:91:f3:da:0b:ec:0c:54:53:24:8e:
16:d1:e6:ad:52:39:97:38:a7:80:6c:2c:15:34:77:
50:35:52:52:45:0d:c9:f9:49:1d:31:83:e2:d1:f6:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:40:D4:18:36:A8:DA:58:93:C4:8E:63:FE:2B:29:B9:BC:A5:CD:A7
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f0:2a:0b:6e:f1:a3:5a:22:18:56:76:8c:d2:12:89:16:b4:
00:12:9f:e6:2a:87:44:f1:6a:f3:97:82:cd:ee:b2:75:38:3c:
a8:e4:9c:69:b2:2a:8f:00:79:2f:9d:c9:90:20:ae:d5:66:a5:
ca:37:29:8b:54:40:ca:95:22:5e:7a:55:a3:93:8d:30:4c:2a:
2f:43:59:6f:66:a9:31:81:57:c1:98:46:dc:30:ac:d7:49:7b:
ff:0a:17:21:e1:5a:31:b7:04:6d:6e:3e:30:0d:1d:2f:c1:21:
e5:dc:0c:6f:28:40:57:1c:61:80:80:cc:00:1b:a3:4d:e4:99:
59:ea:86:4a:dd:d6:e9:26:ff:af:be:14:af:ae:70:da:76:b7:
b5:0b:ad:2d:58:92:08:c2:20:ec:37:e5:e4:1c:8d:65:e4:62:
17:3e:6a:a9:83:0e:89:3b:51:ed:fd:0b:89:0f:d9:6d:22:74:
89:07:db:1c:72:85:45:51:b6:45:d8:b9:3d:c0:89:ff:87:8a:
84:ad:cd:9c:87:f7:7b:3d:54:97:6e:d0:cd:f6:48:0d:31:a6:
00:57:9a:3e:8b:03:b3:7c:67:d4:20:bf:c5:0f:c8:11:86:aa:
fa:3a:22:b1:a2:1d:8e:f0:cf:32:36:8a:79:dd:2a:eb:17:ed:
1e:e0:a3:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyn/Fr8EWICacGB9d2738xmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YjVjYTcxOGYzYjlhOTM5YTUxMzY0MWJkODVjYzk0ZmE0
MDE5NTQwHhcNMjYwMzAxMDYwMDU5WhcNMjYwMzAyMDYwMDU5WjAzMTEwLwYDVQQD
EygxOTQwZDQxODM2YThkYTU4OTNjNDhlNjNmZTJiMjliOWJjYTVjZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOBOnTEW7r8vdLOdBrFI9Hvjcsgu
qzYS3iT45qG+MblNJprQCbHpEaz9VJvBUcqSgTQAVtbJ7egvA12q8VPpU7Y+uPp8
q+pIFxOMv+aEQyhhH1hIYQDx95QAYaBAITaIsr/87HOfqELxlgM+WcbTO3gCCFOI
BhKMEI/rBlfjylFvPPpY73UBsAPOfdOpJ6w4/qOw/cmk+vbn7h+G3KNKGRbKonSU
MirQSQxwzkrSJ15ampMmjGBnz+8ytdgMYnq1krhCgMLcPDYJ2HRbCPLDekUSiu1J
uJHz2gvsDFRTJI4W0eatUjmXOKeAbCwVNHdQNVJSRQ3J+UkdMYPi0fYxVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlA1Bg2qNpYk8SOY/4rKbm8pc2nMB8GA1UdIwQY
MBaAFJi1ynGPO5qTmlE2Qb2FzJT6QBlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80ZDkzYjktMmM3OS00ZTUyLWJlNDEt
YzQyYWIwMTk4MzczLzEvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80ZDkzYjktMmM3OS00ZTUyLWJlNDEtYzQyYWIwMTk4Mzcz
LzEvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvAqC27x
o1oiGFZ2jNISiRa0ABKf5iqHRPFq85eCze6ydTg8qOScabIqjwB5L53JkCCu1Wal
yjcpi1RAypUiXnpVo5ONMEwqL0NZb2apMYFXwZhG3DCs10l7/woXIeFaMbcEbW4+
MA0dL8Eh5dwMbyhAVxxhgIDMABujTeSZWeqGSt3W6Sb/r74Ur65w2na3tQutLViS
CMIg7Dfl5ByNZeRiFz5qqYMOiTtR7f0LiQ/ZbSJ0iQfbHHKFRVG2Rdi5PcCJ/4eK
hK3NnIf3ez1Ul27QzfZIDTGmAFeaPosDs3xn1CC/xQ/IEYaq+joisaIdjvDPMjaK
ed0q6xftHuCjAA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:18 2026 by rpki-client