Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
File: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft (raw, json)
Hash identifier: ibqSq52glZBY4paBj1eJ0/hSRJnay0YNf/SoCNCt7+g=
Subject key identifier: E8:3A:A9:DD:F1:EE:8D:8F:FC:C9:12:32:3A:53:FC:3E:68:64:58:B3
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Certificate issuer: /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial: 019CA8A162CFFDADA2A68E488C28BF265D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
Manifest number: 8A
Signing time: Sun 01 Mar 2026 09:01:14 +0000
Manifest this update: Sun 01 Mar 2026 09:01:14 +0000
Manifest next update: Mon 02 Mar 2026 09:01:14 +0000
Files and hashes: 1: iS_RjiJ5hKPzS36a9K6GI2jCpSc.roa (hash: oKmLMmS60dhNLyeJppUGpS47iPqdNIjtFfF23b9zJgg=)
2: jE2_WqgXFNkY54CTie-65-UWSNQ.asa (hash: heW1TwT0yq1dP5dkHg76VMwsxCNVgvGMwKxBm3dH1w8=)
3: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl (hash: RwMZoTrgchj2YRx+ECzjH59FXqLFy9wPCPdjJ7soIyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:62:cf:fd:ad:a2:a6:8e:48:8c:28:bf:26:5d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Validity
Not Before: Mar 1 09:01:14 2026 GMT
Not After : Mar 2 09:01:14 2026 GMT
Subject: CN=e83aa9ddf1ee8d8ffcc912323a53fc3e686458b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:2b:5c:f4:26:33:e6:3f:33:1f:2a:a4:05:
73:40:05:fe:a7:63:50:bc:5f:45:58:63:15:4a:81:
65:5c:51:11:e0:e0:57:9e:e8:1b:15:9a:90:b8:f9:
88:5e:42:8f:6c:49:38:81:67:22:fd:f5:6a:24:af:
19:4a:1a:c4:fb:82:f3:40:bf:85:1b:c7:2f:e1:30:
6b:d8:6a:bc:e7:da:18:99:20:08:78:c4:df:99:fc:
14:be:ff:fd:39:25:d4:b6:98:b6:17:79:95:07:99:
ca:be:80:16:bc:e9:23:ee:8a:8f:c6:72:32:d3:bb:
a5:ea:f1:e9:01:d1:43:1a:64:3d:12:f2:6c:d8:83:
d1:77:26:b2:97:32:b2:91:f6:2c:cf:0e:c9:1a:b0:
d4:80:1d:00:e9:cd:f6:9d:ff:fb:43:ed:0d:37:5c:
9a:f9:bb:ee:28:a0:5c:f2:5c:38:90:4c:41:ba:52:
54:9f:af:cc:65:5b:61:14:10:cf:72:5f:cf:da:7c:
2c:73:34:b0:a9:d1:85:8f:92:56:f3:16:67:90:ac:
e6:54:e8:e8:0f:f8:91:e1:28:d8:96:7e:14:48:c2:
0a:3a:5c:77:a8:f0:25:7a:70:53:07:63:74:5c:ea:
29:7b:95:87:24:3a:0f:b0:0c:47:b8:cf:b1:6c:9d:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:A9:DD:F1:EE:8D:8F:FC:C9:12:32:3A:53:FC:3E:68:64:58:B3
X509v3 Authority Key Identifier:
keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4b:8c:29:50:40:24:50:9c:7c:84:65:a1:bb:57:0b:00:7d:
73:94:56:d3:0c:1a:52:58:24:4f:0e:7e:52:e1:e4:d2:c8:ba:
69:4c:d2:0c:88:44:c7:93:28:fd:4f:a6:33:7b:a5:b2:17:dd:
34:95:58:4c:d9:23:b6:ed:fc:cf:28:8f:97:ad:59:75:58:b3:
90:1b:97:c7:1e:42:f5:da:ed:96:d4:a3:ba:05:46:79:65:26:
95:d1:24:a3:0b:4f:ea:43:df:3e:9b:3a:91:6b:2b:5c:17:74:
95:d2:0f:87:9e:43:49:30:2d:6f:0b:e5:74:78:b8:cc:3a:b2:
1c:cd:a0:1a:92:2a:69:26:94:71:69:ab:ca:69:4e:1d:0e:cf:
e9:9e:ab:74:c3:70:42:0c:57:32:df:e1:72:b4:38:5e:32:d1:
20:68:d5:8a:12:55:48:c7:98:9b:29:02:32:1a:20:7e:ec:2f:
68:fa:7e:ea:3a:6f:0c:94:5b:e7:12:54:22:dc:1f:be:84:48:
4b:9a:cf:6b:89:c1:56:5d:5f:4e:09:9b:19:5d:52:56:b1:5c:
8a:3f:a8:8e:03:f4:e8:77:fb:55:42:0f:2b:d8:86:86:6c:b9:
08:a6:d8:19:a7:c0:c6:6c:66:e9:cd:e9:55:92:b5:62:04:01:
bc:fe:f2:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyooWLP/a2ipo5IjCi/Jl2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YTNkMDlkMmI0NTYxMjVhMTVkNTNmNTUyMDkyNWY0ZmJm
NjE3MjgwHhcNMjYwMzAxMDkwMTE0WhcNMjYwMzAyMDkwMTE0WjAzMTEwLwYDVQQD
EyhlODNhYTlkZGYxZWU4ZDhmZmNjOTEyMzIzYTUzZmMzZTY4NjQ1OGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPgrXPQmM+Y/Mx8qpAVzQAX+p2NQ
vF9FWGMVSoFlXFER4OBXnugbFZqQuPmIXkKPbEk4gWci/fVqJK8ZShrE+4LzQL+F
G8cv4TBr2Gq859oYmSAIeMTfmfwUvv/9OSXUtpi2F3mVB5nKvoAWvOkj7oqPxnIy
07ul6vHpAdFDGmQ9EvJs2IPRdyaylzKykfYszw7JGrDUgB0A6c32nf/7Q+0NN1ya
+bvuKKBc8lw4kExBulJUn6/MZVthFBDPcl/P2nwsczSwqdGFj5JW8xZnkKzmVOjo
D/iR4SjYln4USMIKOlx3qPAlenBTB2N0XOope5WHJDoPsAxHuM+xbJ1LbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg6qd3x7o2P/MkSMjpT/D5oZFizMB8GA1UdIwQY
MBaAFJij0J0rRWEloV1T9VIJJfT79hcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lN2IzMDQtZTc3OS00MjFkLWIwYTYt
MDQzMjBiMWZjMjI3LzEvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lN2IzMDQtZTc3OS00MjFkLWIwYTYtMDQzMjBiMWZjMjI3
LzEvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEuMKVBA
JFCcfIRlobtXCwB9c5RW0wwaUlgkTw5+UuHk0si6aUzSDIhEx5Mo/U+mM3ulshfd
NJVYTNkjtu38zyiPl61ZdVizkBuXxx5C9drtltSjugVGeWUmldEkowtP6kPfPps6
kWsrXBd0ldIPh55DSTAtbwvldHi4zDqyHM2gGpIqaSaUcWmrymlOHQ7P6Z6rdMNw
QgxXMt/hcrQ4XjLRIGjVihJVSMeYmykCMhogfuwvaPp+6jpvDJRb5xJUItwfvoRI
S5rPa4nBVl1fTgmbGV1SVrFcij+ojgP06Hf7VUIPK9iGhmy5CKbYGafAxmxm6c3p
VZK1YgQBvP7yug==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:32 2026 by rpki-client