Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
File: MhV9a4wSwFtBvEEkHQYVBAryQeE.mft (raw, json)
Hash identifier: E4zmp8SyC0Eq5A38LnfJl96d6nzir+xFGmOLlkvtJoQ=
Subject key identifier: E6:4F:5C:45:A1:8A:6A:A2:CB:0B:66:76:40:4B:14:A6:C2:70:27:14
Authority key identifier: 32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
Certificate issuer: /CN=32157d6b8c12c05b41bc41241d0615040af241e1
Certificate serial: 019D9B515A90FEDCD2B8410494D02D58434C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
Manifest number: 05DE
Signing time: Fri 17 Apr 2026 12:01:33 +0000
Manifest this update: Fri 17 Apr 2026 12:01:33 +0000
Manifest next update: Sat 18 Apr 2026 12:01:33 +0000
Files and hashes: 1: MhV9a4wSwFtBvEEkHQYVBAryQeE.crl (hash: eNua1liOMJDZ89fF+tsLnLh3FNs+5dZkYA018YAG0OM=)
2: xlFYwotI5LT7U1ruSVgb-S5VJbc.roa (hash: q+/WCbLPl7YfFx8PdlPWZvXVYgpytcYGjRYRlu/2J98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:5a:90:fe:dc:d2:b8:41:04:94:d0:2d:58:43:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32157d6b8c12c05b41bc41241d0615040af241e1
Validity
Not Before: Apr 17 12:01:33 2026 GMT
Not After : Apr 18 12:01:33 2026 GMT
Subject: CN=e64f5c45a18a6aa2cb0b6676404b14a6c2702714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:5e:c5:2b:59:dc:28:c0:c3:b2:ba:76:18:
ea:2e:73:ed:44:af:e9:5b:3d:ae:c4:97:4e:c0:aa:
8b:6b:0b:a8:09:5f:59:0a:e0:2b:20:ff:fb:83:b4:
39:82:28:5e:95:67:6f:9a:6a:21:0e:a2:f3:d9:1c:
09:a3:81:be:a9:2e:1c:24:66:6d:f4:8e:61:75:76:
a9:12:bf:17:c2:c1:45:5f:a8:ac:bc:87:5b:4e:00:
dc:dd:f9:02:17:ce:a6:c3:c2:8b:c5:1b:5c:25:7f:
6a:ee:6e:d3:dc:2c:15:d9:b3:0c:3f:95:f0:8d:08:
04:f5:de:e1:f6:e0:d9:9d:80:93:20:92:34:95:23:
74:43:5b:21:bb:d6:4b:ca:55:15:8f:9e:32:0b:04:
1e:2e:bc:4e:d6:ba:32:2d:e1:e8:a9:0c:89:72:9b:
b4:1a:3c:99:44:8b:1c:25:6c:5b:95:0c:1e:d9:fc:
9b:fd:99:78:0f:5f:18:9d:6f:4f:c3:99:79:0f:3f:
f5:3d:a9:d6:02:37:f9:7b:6e:3d:46:10:9c:5f:6a:
d3:5a:77:90:74:30:31:3a:bb:5e:7d:12:82:35:0f:
cb:85:e5:c0:cf:2a:20:af:08:01:07:c9:6b:cb:7f:
0b:d5:d0:0d:03:2b:8f:38:a6:68:2f:59:d9:90:d3:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4F:5C:45:A1:8A:6A:A2:CB:0B:66:76:40:4B:14:A6:C2:70:27:14
X509v3 Authority Key Identifier:
keyid:32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b7:53:34:50:e9:1f:08:1a:55:c0:8b:f0:ee:71:f4:c8:a4:
9c:d3:b7:bd:64:53:0f:b0:ae:3e:77:5a:8d:38:6f:b8:9d:87:
53:0c:5f:07:43:3f:e0:c7:29:cf:82:96:d7:82:3c:c7:8d:c6:
d8:d2:7b:da:5d:49:7d:23:c1:92:98:8c:6f:38:39:ab:9c:15:
f9:c6:e1:fe:93:9a:bf:39:e7:d3:3f:19:a8:ed:42:8c:26:6f:
be:fe:cf:c0:41:22:24:ad:cf:1a:8a:68:f1:e7:e9:08:28:00:
e3:cf:e3:a3:61:5a:6f:14:ce:2e:8b:d1:36:fc:c6:45:dd:54:
1a:66:60:30:e9:cd:4f:71:d2:24:9c:8c:ab:29:b2:d1:07:91:
4b:09:4f:4c:64:c5:66:b6:37:f0:64:89:34:d6:df:a3:d8:67:
c2:df:c7:91:03:c3:60:37:c9:59:4f:b2:ef:fa:28:f3:83:9e:
5e:98:a7:29:78:c7:c4:0a:5e:6c:9d:bd:f8:67:12:de:1d:20:
75:40:b7:91:e3:d4:6b:b4:ab:b7:a0:be:79:62:67:cc:42:5f:
08:b1:ce:7e:22:15:2a:e2:f3:5b:1c:e1:b5:b7:26:28:cb:cb:
9e:fe:55:62:fe:d5:83:e4:a4:a6:bc:be:8c:e0:74:dc:19:e0:
51:4a:d4:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUVqQ/tzSuEEElNAtWENMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMTU3ZDZiOGMxMmMwNWI0MWJjNDEyNDFkMDYxNTA0MGFm
MjQxZTEwHhcNMjYwNDE3MTIwMTMzWhcNMjYwNDE4MTIwMTMzWjAzMTEwLwYDVQQD
EyhlNjRmNWM0NWExOGE2YWEyY2IwYjY2NzY0MDRiMTRhNmMyNzAyNzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7texStZ3CjAw7K6dhjqLnPtRK/p
Wz2uxJdOwKqLawuoCV9ZCuArIP/7g7Q5gihelWdvmmohDqLz2RwJo4G+qS4cJGZt
9I5hdXapEr8XwsFFX6isvIdbTgDc3fkCF86mw8KLxRtcJX9q7m7T3CwV2bMMP5Xw
jQgE9d7h9uDZnYCTIJI0lSN0Q1shu9ZLylUVj54yCwQeLrxO1royLeHoqQyJcpu0
GjyZRIscJWxblQwe2fyb/Zl4D18YnW9Pw5l5Dz/1PanWAjf5e249RhCcX2rTWneQ
dDAxOrtefRKCNQ/LheXAzyogrwgBB8lry38L1dANAyuPOKZoL1nZkNMHeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZPXEWhimqiywtmdkBLFKbCcCcUMB8GA1UdIwQY
MBaAFDIVfWuMEsBbQbxBJB0GFQQK8kHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWhWOWE0d1N3RnRCdkVFa0hRWVZCQXJ5UWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80MTZhODAtZGM1Ni00NTE0LThiYzAt
MjdmOWM4MjNlZGVhLzEvTWhWOWE0d1N3RnRCdkVFa0hRWVZCQXJ5UWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80MTZhODAtZGM1Ni00NTE0LThiYzAtMjdmOWM4MjNlZGVh
LzEvTWhWOWE0d1N3RnRCdkVFa0hRWVZCQXJ5UWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLdTNFDp
HwgaVcCL8O5x9MiknNO3vWRTD7CuPndajThvuJ2HUwxfB0M/4Mcpz4KW14I8x43G
2NJ72l1JfSPBkpiMbzg5q5wV+cbh/pOavznn0z8ZqO1CjCZvvv7PwEEiJK3PGopo
8efpCCgA48/jo2FabxTOLovRNvzGRd1UGmZgMOnNT3HSJJyMqymy0QeRSwlPTGTF
ZrY38GSJNNbfo9hnwt/HkQPDYDfJWU+y7/oo84OeXpinKXjHxApebJ29+GcS3h0g
dUC3kePUa7Srt6C+eWJnzEJfCLHOfiIVKuLzWxzhtbcmKMvLnv5VYv7Vg+Skpry+
jOB03BngUUrUJw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:13 2026 by rpki-client