Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: kHCjdFHl9U2dokCWYsJa14IxU7XU1IDpBS7/Y02MuBc=
Subject key identifier: 56:82:90:EC:42:89:97:1A:3A:A1:89:A8:E5:CD:DE:2E:72:D0:CC:97
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 019D9B50A496972FE329AD979E224611FBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 1415
Signing time: Fri 17 Apr 2026 12:00:46 +0000
Manifest this update: Fri 17 Apr 2026 12:00:46 +0000
Manifest next update: Sat 18 Apr 2026 12:00:46 +0000
Files and hashes: 1: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: SS3R/KQ/fctdZQQq5zAZNzOEAsN66gSTPbQRnmt1DyM=)
2: ZmJGOpycOIq2lh2DhvW8htu0jB8.roa (hash: +ARlxopxtUjU1sytN/8Otep5qO7EJAgLyVgrFdmK0Rs=)
3: oEJd0BVsW2fwuqjY3Y6ze5isQfE.roa (hash: +n+CDK7Y745a+xc3pPOkB9KVNRlgLlgagHreMZ7nr2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:a4:96:97:2f:e3:29:ad:97:9e:22:46:11:fb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Apr 17 12:00:46 2026 GMT
Not After : Apr 18 12:00:46 2026 GMT
Subject: CN=568290ec4289971a3aa189a8e5cdde2e72d0cc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:74:79:c3:de:80:6b:a7:44:aa:d4:5b:44:
a3:c1:78:e6:1f:93:ad:de:ec:72:d6:f5:1b:45:e9:
70:2f:ae:69:99:1a:40:19:20:de:c8:36:e3:96:08:
63:c5:76:f9:d1:cb:f0:ed:e0:09:5f:33:35:eb:82:
bc:e7:1f:e3:40:0c:7d:b6:a2:e1:dd:4b:47:95:7d:
13:a5:e7:74:f4:06:3d:d1:a9:f1:da:ac:32:e3:ab:
cf:17:64:6b:00:17:7a:7b:d2:fa:21:d2:4d:17:75:
2a:82:81:37:4b:53:f3:d9:64:4c:f2:fa:11:69:59:
a6:40:ed:60:10:8a:4a:51:09:33:dd:a1:00:bd:6c:
a9:9c:1c:7d:86:99:e7:8f:65:2d:a7:3a:dd:bb:46:
b3:cf:8b:ab:83:f6:c3:ec:2c:c6:70:f7:a4:91:40:
6d:98:1a:1e:58:06:d7:b8:cd:92:95:de:63:8b:56:
72:ac:b9:e8:ed:3b:da:50:94:6d:f1:c6:40:08:e0:
20:87:24:85:40:f2:bf:32:d7:ac:95:7b:13:6c:69:
37:0f:b2:30:4e:de:c3:28:3f:a1:e1:be:d4:88:61:
19:88:34:3b:c5:32:d8:8b:f2:49:48:78:74:4a:7b:
c4:85:88:d8:6d:2b:74:dd:64:4a:a3:d4:eb:34:fb:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:82:90:EC:42:89:97:1A:3A:A1:89:A8:E5:CD:DE:2E:72:D0:CC:97
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:54:34:f7:ec:d2:5c:86:fe:84:b6:a4:c2:df:83:6a:16:5c:
23:b1:e3:54:d1:fb:47:8d:36:3f:8e:a8:5c:60:79:be:42:43:
e6:fb:cb:fc:a8:67:9a:02:25:ae:32:db:ec:f5:96:67:bd:78:
a6:28:0e:cd:1c:9b:9d:9b:9e:e5:74:1e:00:29:c2:41:23:7c:
7f:89:a3:91:4a:36:b1:4a:a3:22:1e:94:60:e7:f4:27:54:9c:
ea:e9:cc:fb:1b:22:03:1b:fe:84:04:ed:6f:62:37:3a:e3:a4:
15:d1:f3:ad:6b:65:9d:fe:7c:f4:b2:5a:38:72:2b:b0:e6:a2:
af:94:22:c4:55:b1:95:e0:59:77:b6:03:0a:14:46:3a:09:98:
58:72:ec:80:7e:fb:22:6d:d5:02:f6:91:7f:61:5b:72:57:18:
9e:94:33:cf:70:96:a1:c4:9d:73:c6:0e:68:23:ed:f8:d0:4a:
1b:28:54:eb:de:d9:92:59:94:a3:ba:08:33:4c:22:e7:f1:d9:
2e:fe:4f:13:a5:c9:a1:6f:9c:c0:3a:b1:b4:34:55:0b:51:f8:
09:32:ac:53:64:4a:bd:27:1d:bc:4e:df:f7:e3:da:9d:b7:ec:
3a:4c:7b:b4:dc:be:d9:56:ea:6f:4a:b1:f9:80:03:1f:00:65:
89:a9:33:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUKSWly/jKa2XniJGEfv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzA5OTQxYTZkODRmYTRkYmRkYWYwZjRlY2Q5OWY5ZjA0
M2NmZGMwHhcNMjYwNDE3MTIwMDQ2WhcNMjYwNDE4MTIwMDQ2WjAzMTEwLwYDVQQD
Eyg1NjgyOTBlYzQyODk5NzFhM2FhMTg5YThlNWNkZGUyZTcyZDBjYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqh0ecPegGunRKrUW0SjwXjmH5Ot
3uxy1vUbRelwL65pmRpAGSDeyDbjlghjxXb50cvw7eAJXzM164K85x/jQAx9tqLh
3UtHlX0Tped09AY90anx2qwy46vPF2RrABd6e9L6IdJNF3UqgoE3S1Pz2WRM8voR
aVmmQO1gEIpKUQkz3aEAvWypnBx9hpnnj2Utpzrdu0azz4urg/bD7CzGcPekkUBt
mBoeWAbXuM2Sld5ji1ZyrLno7TvaUJRt8cZACOAghySFQPK/MteslXsTbGk3D7Iw
Tt7DKD+h4b7UiGEZiDQ7xTLYi/JJSHh0SnvEhYjYbSt03WRKo9TrNPu2vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaCkOxCiZcaOqGJqOXN3i5y0MyXMB8GA1UdIwQY
MBaAFDAwmUGm2E+k292vD07NmfnwQ8/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMt
ZDMxZDRjYjFiMTI5LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMtZDMxZDRjYjFiMTI5
LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1Q09+zS
XIb+hLakwt+DahZcI7HjVNH7R402P46oXGB5vkJD5vvL/KhnmgIlrjLb7PWWZ714
pigOzRybnZue5XQeACnCQSN8f4mjkUo2sUqjIh6UYOf0J1Sc6unM+xsiAxv+hATt
b2I3OuOkFdHzrWtlnf589LJaOHIrsOair5QixFWxleBZd7YDChRGOgmYWHLsgH77
Im3VAvaRf2FbclcYnpQzz3CWocSdc8YOaCPt+NBKGyhU697ZklmUo7oIM0wi5/HZ
Lv5PE6XJoW+cwDqxtDRVC1H4CTKsU2RKvScdvE7f9+PanbfsOkx7tNy+2Vbqb0qx
+YADHwBliakzAQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:22 2026 by rpki-client