Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: ft38SWbxlJNvZX0xB4Y3caEYni8wSvTDKnMO0874/Xo=
Subject key identifier: 13:0E:BC:05:5B:0C:16:C6:63:55:A6:CF:51:39:10:0F:E5:EF:F8:5D
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 019D996226670597EA479BB463151A49BB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 1660
Signing time: Fri 17 Apr 2026 03:00:39 +0000
Manifest this update: Fri 17 Apr 2026 03:00:39 +0000
Manifest next update: Sat 18 Apr 2026 03:00:39 +0000
Files and hashes: 1: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: 9w11J0PErLOnPgUfmJwWlzCSV5OWMP2R8vNt144pT2A=)
2: W8EXtY-krtG948bMW6fNLmFvObQ.roa (hash: /Mw8ZZAkQ7Cam52nmslN8jl5Gh3RIhYdhuibTCP4pNc=)
3: hsUdN5AH-_WZM1oy6ZaXEs1Pgkc.roa (hash: 5DMQKgnCdfv9+elfbQuigH3vAHijYLKsjKk2UMsJGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:26:67:05:97:ea:47:9b:b4:63:15:1a:49:bb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Apr 17 03:00:39 2026 GMT
Not After : Apr 18 03:00:39 2026 GMT
Subject: CN=130ebc055b0c16c66355a6cf5139100fe5eff85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:2b:4b:22:d4:83:9b:94:25:1a:8a:98:25:
d5:4a:5c:2c:c7:ac:ec:2f:7a:49:11:20:24:37:2b:
84:30:ac:71:db:20:6b:f6:1d:cb:d7:6c:19:3e:a0:
38:9b:04:d8:f4:d9:76:22:73:38:65:d4:9d:7f:0a:
31:2e:bc:f5:77:6f:9a:b8:0d:c8:76:6a:85:7f:9c:
4f:01:24:1e:ef:58:b6:86:3d:e6:48:bc:7e:e2:11:
3d:a4:f3:41:81:90:47:83:ed:c7:91:09:91:f5:cd:
20:b8:e8:d4:3a:55:ec:63:85:70:f8:be:ec:2f:ba:
6c:98:96:78:29:3d:59:f1:ec:ba:64:6d:f1:88:98:
c0:92:26:f0:21:74:25:56:67:90:33:dc:f7:c3:9a:
ba:0e:1a:b1:4e:28:43:e4:a6:7e:b3:6b:54:ba:f1:
52:77:e4:48:d5:50:86:5e:f7:63:21:74:92:f2:34:
0c:ab:34:42:03:ab:5b:bd:7d:2b:dd:85:1d:3e:ee:
76:ab:2e:90:58:f4:aa:78:da:44:c8:cb:2b:40:fe:
b5:54:fe:ae:ad:5a:55:1c:90:bf:4e:31:72:eb:c2:
8a:76:6b:3d:45:62:27:89:d2:e2:0b:25:d3:f7:f6:
86:51:cb:c5:2e:61:71:d5:d5:4d:87:6b:48:8e:8d:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0E:BC:05:5B:0C:16:C6:63:55:A6:CF:51:39:10:0F:E5:EF:F8:5D
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e7:a2:11:c2:6e:95:05:49:14:33:e1:27:36:b6:41:31:55:
48:25:7c:e0:3d:fd:16:22:81:f9:ff:01:b7:8a:7a:19:e8:26:
dd:35:08:be:7c:70:50:53:76:78:24:12:e2:9a:39:de:f6:89:
57:87:bc:e6:2d:7c:a1:5e:3a:65:03:9b:d9:39:a7:c4:72:15:
56:94:44:cb:0d:e3:9f:b4:40:6e:6e:20:08:a3:41:36:76:e1:
66:90:22:c2:15:42:4a:db:9d:a8:2d:32:77:6c:f3:3d:18:a0:
04:84:06:e5:bf:33:89:56:db:e3:ac:b2:ef:ee:5b:5a:a8:8e:
4f:c8:da:34:f7:16:3c:52:c7:e2:0b:90:b5:5a:22:b0:a5:6f:
59:3c:3e:51:23:52:5c:69:40:47:87:f4:0e:76:ca:87:6d:06:
0c:7e:d2:9b:1d:05:67:82:70:4c:84:ce:25:d4:a6:9f:ae:f5:
c8:b2:d1:92:22:23:cc:fe:c4:c4:de:59:ce:8a:1c:4c:44:73:
f1:1b:b0:a9:71:c6:d4:a4:bc:31:63:ad:01:49:09:08:3a:b1:
d9:ad:89:93:94:51:79:d2:dc:76:1a:61:de:08:7b:96:66:cc:
a0:24:b1:43:8f:f1:73:cb:98:62:b1:60:e7:ca:13:f7:23:53:
c4:0e:e7:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYiZnBZfqR5u0YxUaSbsNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNDY3OTVhZDY4YTZiYWRkNWFmY2I2YmE0NjUzZTljMDkw
ZmM4NWEwHhcNMjYwNDE3MDMwMDM5WhcNMjYwNDE4MDMwMDM5WjAzMTEwLwYDVQQD
EygxMzBlYmMwNTViMGMxNmM2NjM1NWE2Y2Y1MTM5MTAwZmU1ZWZmODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmMrSyLUg5uUJRqKmCXVSlwsx6zs
L3pJESAkNyuEMKxx2yBr9h3L12wZPqA4mwTY9Nl2InM4ZdSdfwoxLrz1d2+auA3I
dmqFf5xPASQe71i2hj3mSLx+4hE9pPNBgZBHg+3HkQmR9c0guOjUOlXsY4Vw+L7s
L7psmJZ4KT1Z8ey6ZG3xiJjAkibwIXQlVmeQM9z3w5q6DhqxTihD5KZ+s2tUuvFS
d+RI1VCGXvdjIXSS8jQMqzRCA6tbvX0r3YUdPu52qy6QWPSqeNpEyMsrQP61VP6u
rVpVHJC/TjFy68KKdms9RWInidLiCyXT9/aGUcvFLmFx1dVNh2tIjo3Y3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMOvAVbDBbGY1Wmz1E5EA/l7/hdMB8GA1UdIwQY
MBaAFDJGeVrWimut1a/La6RlPpwJD8haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMt
NzMwYjE3ZjA2OWFiLzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMtNzMwYjE3ZjA2OWFi
LzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOeiEcJu
lQVJFDPhJza2QTFVSCV84D39FiKB+f8Bt4p6Gegm3TUIvnxwUFN2eCQS4po53vaJ
V4e85i18oV46ZQOb2TmnxHIVVpREyw3jn7RAbm4gCKNBNnbhZpAiwhVCStudqC0y
d2zzPRigBIQG5b8ziVbb46yy7+5bWqiOT8jaNPcWPFLH4guQtVoisKVvWTw+USNS
XGlAR4f0DnbKh20GDH7Smx0FZ4JwTITOJdSmn671yLLRkiIjzP7ExN5ZzoocTERz
8RuwqXHG1KS8MWOtAUkJCDqx2a2Jk5RRedLcdhph3gh7lmbMoCSxQ4/xc8uYYrFg
58oT9yNTxA7nSw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:24 2026 by rpki-client