Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
File: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft (raw, json)
Hash identifier: cSkiEqEG94Zz8/xISJ4B6aC2zMRkMPDu5j6oLtjBns8=
Subject key identifier: 80:8A:69:50:AE:AE:A7:AE:15:49:94:A0:FC:04:CC:9E:DA:D7:AC:21
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Certificate issuer: /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial: 019DA52FD2F63AE757814E335F6CAE764589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
Manifest number: 010D
Signing time: Sun 19 Apr 2026 10:01:08 +0000
Manifest this update: Sun 19 Apr 2026 10:01:08 +0000
Manifest next update: Mon 20 Apr 2026 10:01:08 +0000
Files and hashes: 1: iS_RjiJ5hKPzS36a9K6GI2jCpSc.roa (hash: oKmLMmS60dhNLyeJppUGpS47iPqdNIjtFfF23b9zJgg=)
2: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl (hash: FmSFy20uq88R9luR4ppTlVs2v/3YIQTNDczQJEeWc+0=)
3: qoT5stHghDnRteVtg_Px7AZoT7U.asa (hash: TskbWZWjs4ecsqraIt5QOAc8VDAfdc2BCzb4CrrRpfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:d2:f6:3a:e7:57:81:4e:33:5f:6c:ae:76:45:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Validity
Not Before: Apr 19 10:01:08 2026 GMT
Not After : Apr 20 10:01:08 2026 GMT
Subject: CN=808a6950aeaea7ae154994a0fc04cc9edad7ac21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:a7:4b:af:15:ee:b9:68:55:14:a9:f1:e7:
f6:e1:74:fe:c9:74:46:18:9b:42:df:94:17:95:c4:
71:cb:10:43:7d:be:b0:f1:97:27:86:3b:2c:bd:66:
2b:6f:5c:60:a9:72:e4:5d:c9:4b:9c:9e:55:9e:d5:
46:1a:57:0e:fc:68:92:61:0b:2f:da:fa:2e:ca:a0:
e8:80:bd:21:75:09:db:ca:2a:d2:bb:cb:ee:bc:bb:
8d:01:54:45:5d:8e:1b:e9:c7:6c:a2:e2:7e:98:99:
81:5c:75:1c:f6:e5:f8:88:c8:45:04:e5:90:00:5b:
ef:9e:39:7c:f1:84:b5:78:69:b8:33:ff:b0:42:d3:
2a:f8:42:20:af:38:e0:e3:a8:b2:ce:21:8d:49:6b:
9a:16:9d:42:59:77:d0:1f:8c:8d:1b:6c:8a:4d:04:
23:3c:c3:38:b0:0d:ed:62:40:90:e1:9a:88:40:8f:
93:8e:cd:92:c6:12:e9:7a:1a:d5:50:19:79:9e:9f:
9e:f0:04:0f:9b:38:59:27:db:e6:7f:12:cf:8a:42:
b3:4b:94:be:ff:35:6c:35:e6:7a:70:08:8c:e3:a3:
2a:b4:ba:55:7c:a0:44:08:2f:33:88:9c:b4:96:4a:
2b:45:1a:ef:aa:68:42:50:dc:7b:9d:c1:72:53:a6:
05:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8A:69:50:AE:AE:A7:AE:15:49:94:A0:FC:04:CC:9E:DA:D7:AC:21
X509v3 Authority Key Identifier:
keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:97:b3:24:ce:ba:b2:3b:f3:aa:27:11:2b:2c:e4:9b:63:ca:
81:19:26:0d:50:99:db:55:14:92:51:1b:98:b4:9b:4b:e4:8a:
d8:58:c9:37:0c:13:37:03:04:ad:03:81:0b:25:0c:6c:14:bb:
89:ac:65:7c:fe:fd:f6:24:f1:ce:90:f4:d2:b0:13:fa:d0:9a:
f2:34:09:dd:c1:a3:0b:a6:17:65:46:3e:e7:c1:06:95:ce:6b:
c5:bf:dc:a5:dd:ed:0b:4f:8a:96:5d:d2:71:f0:d5:e1:de:59:
a3:57:25:73:7e:8d:dc:ff:df:93:01:cf:30:e7:77:7c:83:a2:
6c:d9:cf:f8:c8:85:cd:bb:5e:99:fe:2e:bb:be:7b:87:64:4c:
b5:7a:70:c5:a5:93:71:87:e4:e3:47:1b:81:d5:ba:00:61:8c:
69:4c:14:7c:69:bb:52:48:e1:bf:c3:93:f3:6e:9d:a9:01:52:
0b:43:80:75:f8:a2:7a:b5:b7:68:56:62:bb:61:c3:ad:79:35:
48:b1:48:51:74:72:39:eb:d8:c8:a7:98:8d:95:5b:aa:70:90:
df:2f:2a:21:90:88:78:f7:38:7a:18:6c:93:f2:35:2b:cf:70:
2b:8a:3f:e4:09:ca:ca:b2:db:69:8f:30:e8:54:d2:70:e7:f9:
1a:ee:b3:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL9L2OudXgU4zX2yudkWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YTNkMDlkMmI0NTYxMjVhMTVkNTNmNTUyMDkyNWY0ZmJm
NjE3MjgwHhcNMjYwNDE5MTAwMTA4WhcNMjYwNDIwMTAwMTA4WjAzMTEwLwYDVQQD
Eyg4MDhhNjk1MGFlYWVhN2FlMTU0OTk0YTBmYzA0Y2M5ZWRhZDdhYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApianS68V7rloVRSp8ef24XT+yXRG
GJtC35QXlcRxyxBDfb6w8ZcnhjssvWYrb1xgqXLkXclLnJ5VntVGGlcO/GiSYQsv
2vouyqDogL0hdQnbyirSu8vuvLuNAVRFXY4b6cdsouJ+mJmBXHUc9uX4iMhFBOWQ
AFvvnjl88YS1eGm4M/+wQtMq+EIgrzjg46iyziGNSWuaFp1CWXfQH4yNG2yKTQQj
PMM4sA3tYkCQ4ZqIQI+Tjs2SxhLpehrVUBl5np+e8AQPmzhZJ9vmfxLPikKzS5S+
/zVsNeZ6cAiM46MqtLpVfKBECC8ziJy0lkorRRrvqmhCUNx7ncFyU6YFzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICKaVCurqeuFUmUoPwEzJ7a16whMB8GA1UdIwQY
MBaAFJij0J0rRWEloV1T9VIJJfT79hcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lN2IzMDQtZTc3OS00MjFkLWIwYTYt
MDQzMjBiMWZjMjI3LzEvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lN2IzMDQtZTc3OS00MjFkLWIwYTYtMDQzMjBiMWZjMjI3
LzEvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJezJM66
sjvzqicRKyzkm2PKgRkmDVCZ21UUklEbmLSbS+SK2FjJNwwTNwMErQOBCyUMbBS7
iaxlfP799iTxzpD00rAT+tCa8jQJ3cGjC6YXZUY+58EGlc5rxb/cpd3tC0+Kll3S
cfDV4d5Zo1clc36N3P/fkwHPMOd3fIOibNnP+MiFzbtemf4uu757h2RMtXpwxaWT
cYfk40cbgdW6AGGMaUwUfGm7Ukjhv8OT826dqQFSC0OAdfiierW3aFZiu2HDrXk1
SLFIUXRyOevYyKeYjZVbqnCQ3y8qIZCIePc4ehhsk/I1K89wK4o/5AnKyrLbaY8w
6FTScOf5Gu6z9A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:43:23 2026 by rpki-client