Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier: Xb2n2WmhGFEEZRzhv4yzcMH9hJ1bJBFVCp+TR8UXewA=
Subject key identifier: AD:E6:66:A6:68:FC:A3:9F:9F:AC:CC:A8:9B:53:CE:FC:76:AC:42:46
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 019D985062B23CCFEBFD0E21F817A7F4584E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number: 0B0F
Signing time: Thu 16 Apr 2026 22:01:38 +0000
Manifest this update: Thu 16 Apr 2026 22:01:38 +0000
Manifest next update: Fri 17 Apr 2026 22:01:38 +0000
Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: A0Gd4uKr0/UtLvP9RUNvOjy6FiwrghCO0F+EMssPOG8=)
2: _2CCeE-Uv7qfwwVfdf-mFwT5gbc.roa (hash: TYooW/gUsVFWHXthOPEQi5a4rd+m2KssG9xszmHlKRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:62:b2:3c:cf:eb:fd:0e:21:f8:17:a7:f4:58:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: Apr 16 22:01:38 2026 GMT
Not After : Apr 17 22:01:38 2026 GMT
Subject: CN=ade666a668fca39f9faccca89b53cefc76ac4246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:26:02:3f:a6:87:90:f4:49:bd:89:17:10:f1:
c8:e1:6f:3f:ed:b6:23:8d:58:19:ad:27:a2:bb:bf:
b1:6a:a4:b7:6d:8d:96:8f:52:7e:f9:10:8d:e1:e3:
9c:97:a7:28:14:02:a3:08:7a:1b:a9:ba:44:8d:86:
72:2f:af:60:5e:0b:e7:99:64:42:b8:d0:59:b2:06:
45:44:71:1e:b6:db:e7:c9:35:0e:d3:c1:c3:83:da:
ad:dd:fc:6d:c6:33:d1:a2:74:bf:f7:22:02:04:3a:
72:e3:f2:fd:d0:95:1e:6f:01:f5:24:f0:46:99:a0:
c4:9c:f1:1f:e8:a0:54:43:de:c7:c9:51:3d:d1:ff:
0a:aa:b2:5c:3a:a4:8e:8b:04:1c:3a:ca:37:f4:08:
8f:ea:d1:e7:60:b2:27:22:4b:67:01:36:68:46:05:
f0:1f:cc:5a:88:4f:ad:38:7f:9a:22:0b:a9:f4:6f:
84:0f:fd:c6:a7:a2:35:7b:5a:a3:e2:fd:0b:56:f1:
ad:cd:7c:78:20:10:fa:f9:d0:d0:b1:d0:3b:dc:c5:
af:26:ae:13:0f:23:98:bc:45:00:b7:5e:21:5c:39:
6c:a9:05:e2:f6:f8:f9:ae:0a:35:73:fc:72:8e:e5:
5a:ac:8e:5e:fa:0c:49:a4:e7:b5:e0:b5:b4:ea:b0:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E6:66:A6:68:FC:A3:9F:9F:AC:CC:A8:9B:53:CE:FC:76:AC:42:46
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:60:5c:e3:b9:98:52:b3:e3:eb:71:2e:3b:0d:1f:b1:1d:2b:
ed:1f:c7:7b:c4:26:3f:be:46:ae:16:62:54:8a:42:8b:e9:cc:
45:1b:58:4e:77:ac:b8:a9:5a:52:bd:19:2b:8c:70:7a:e8:f8:
1b:2f:50:59:b8:ef:2d:cd:01:11:0f:c8:e5:6f:75:12:01:ce:
87:ea:2f:79:89:e7:90:ee:2b:8f:3d:bf:70:10:89:40:8c:8f:
36:a2:15:f3:56:f7:86:e7:52:32:97:25:65:ba:7a:6a:4e:fc:
93:de:79:09:6e:56:7d:eb:da:e7:26:ee:09:5e:42:58:9d:82:
b5:c1:b3:e9:f5:69:e9:e2:fc:1d:8e:6f:60:2d:f1:89:6f:94:
e0:04:4b:08:ad:b6:b6:3e:8c:8e:c3:b7:09:b3:a0:1a:68:8b:
75:68:4f:a7:15:c6:5e:12:fc:ab:d7:67:cc:94:5d:bc:fc:3b:
6d:a8:63:77:ad:1a:a6:59:72:1c:8d:f2:f6:a7:de:3a:3b:28:
31:8c:82:c6:b9:76:d4:6f:30:d3:31:31:a7:15:ea:5f:ef:56:
2c:f6:f8:05:ae:b5:82:a7:bd:30:34:35:87:54:8f:46:90:fc:
5a:77:d9:a4:84:f8:b4:3e:43:45:76:f3:44:9e:5f:70:02:1d:
5e:9f:b7:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUGKyPM/r/Q4h+Ben9FhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMWE1MWFmZDRjYjY2ODJjMjMwZGVkNjQwNjU4YzExM2M1
NjJmZDIwHhcNMjYwNDE2MjIwMTM4WhcNMjYwNDE3MjIwMTM4WjAzMTEwLwYDVQQD
EyhhZGU2NjZhNjY4ZmNhMzlmOWZhY2NjYTg5YjUzY2VmYzc2YWM0MjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+yYCP6aHkPRJvYkXEPHI4W8/7bYj
jVgZrSeiu7+xaqS3bY2Wj1J++RCN4eOcl6coFAKjCHobqbpEjYZyL69gXgvnmWRC
uNBZsgZFRHEettvnyTUO08HDg9qt3fxtxjPRonS/9yICBDpy4/L90JUebwH1JPBG
maDEnPEf6KBUQ97HyVE90f8KqrJcOqSOiwQcOso39AiP6tHnYLInIktnATZoRgXw
H8xaiE+tOH+aIgup9G+ED/3Gp6I1e1qj4v0LVvGtzXx4IBD6+dDQsdA73MWvJq4T
DyOYvEUAt14hXDlsqQXi9vj5rgo1c/xyjuVarI5e+gxJpOe14LW06rC+JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3mZqZo/KOfn6zMqJtTzvx2rEJGMB8GA1UdIwQY
MBaAFDMaUa/Uy2aCwjDe1kBljBE8Vi/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAt
NGE1NjZhZGQ1NGIyLzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAtNGE1NjZhZGQ1NGIy
LzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2Bc47mY
UrPj63EuOw0fsR0r7R/He8QmP75GrhZiVIpCi+nMRRtYTnesuKlaUr0ZK4xweuj4
Gy9QWbjvLc0BEQ/I5W91EgHOh+oveYnnkO4rjz2/cBCJQIyPNqIV81b3hudSMpcl
Zbp6ak78k955CW5Wfeva5ybuCV5CWJ2CtcGz6fVp6eL8HY5vYC3xiW+U4ARLCK22
tj6MjsO3CbOgGmiLdWhPpxXGXhL8q9dnzJRdvPw7bahjd60apllyHI3y9qfeOjso
MYyCxrl21G8w0zExpxXqX+9WLPb4Ba61gqe9MDQ1h1SPRpD8WnfZpIT4tD5DRXbz
RJ5fcAIdXp+3bA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:21 2026 by rpki-client