Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: YVpHmTtCSCWQEX2L629JLRqaQ5UEehyNv7/VAnU9IjM=
Subject key identifier: 40:42:7F:F9:35:BF:E9:2F:B3:BB:49:D0:88:19:5A:E7:50:CB:78:3B
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 019CABD9E6482FC2AE6C2B9F8D1036A4BDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 15E5
Signing time: Mon 02 Mar 2026 00:01:50 +0000
Manifest this update: Mon 02 Mar 2026 00:01:50 +0000
Manifest next update: Tue 03 Mar 2026 00:01:50 +0000
Files and hashes: 1: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: EpwWMrrSGdmirtsARDT2dPzy5i8A5R9Rk1NVDqwcxEs=)
2: W8EXtY-krtG948bMW6fNLmFvObQ.roa (hash: /Mw8ZZAkQ7Cam52nmslN8jl5Gh3RIhYdhuibTCP4pNc=)
3: hsUdN5AH-_WZM1oy6ZaXEs1Pgkc.roa (hash: 5DMQKgnCdfv9+elfbQuigH3vAHijYLKsjKk2UMsJGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e6:48:2f:c2:ae:6c:2b:9f:8d:10:36:a4:bd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Mar 2 00:01:50 2026 GMT
Not After : Mar 3 00:01:50 2026 GMT
Subject: CN=40427ff935bfe92fb3bb49d088195ae750cb783b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:98:b0:e1:fe:19:14:e8:35:88:8c:36:a7:
3d:78:6e:ad:6f:73:12:ed:ba:af:ea:8c:27:c8:59:
3f:43:bc:4d:3a:c2:9b:66:ed:ea:b3:ae:ca:1f:2d:
53:43:c8:95:b4:77:59:5f:95:b2:b7:7e:89:d6:21:
6e:5b:7c:1a:54:58:f7:b5:e6:11:59:54:3b:dc:5f:
83:a8:9c:be:13:95:5e:2a:b5:e2:d1:d6:ea:a6:bb:
66:66:63:36:85:1f:2a:41:fd:1e:dd:fc:ac:ba:4c:
27:d8:e0:38:10:33:16:a9:69:15:e3:0d:f7:02:26:
4f:db:83:ee:e8:aa:6f:5a:1c:3f:be:83:75:a8:c3:
d1:bb:55:25:5b:fe:50:d8:a9:b0:ab:96:72:2d:39:
bc:79:c3:88:ea:3f:f8:cc:30:c0:b1:b8:aa:59:da:
cc:b5:d3:a8:c3:d8:a4:a7:77:77:c7:c1:63:4e:be:
d2:68:e4:fb:0b:4f:23:7e:81:ea:22:f5:8e:76:9f:
43:53:b3:06:7c:da:c1:37:15:b5:fb:79:12:57:96:
c4:29:5c:18:1d:4d:45:32:db:55:16:c2:e7:a6:6f:
f0:52:61:fb:60:d6:32:88:35:89:36:0c:79:74:d9:
0c:36:08:cf:f3:9b:90:b6:1d:0d:cd:9e:2c:6f:d3:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:42:7F:F9:35:BF:E9:2F:B3:BB:49:D0:88:19:5A:E7:50:CB:78:3B
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e2:91:26:49:92:64:c4:78:89:e1:07:82:e2:23:95:4c:b2:
70:84:94:24:44:71:d7:28:46:fb:5f:23:df:3c:2e:a3:bb:1c:
cd:ad:18:c1:76:e4:52:40:b8:2a:be:45:c0:bb:b8:3e:25:03:
e0:94:29:47:27:35:33:66:d9:18:7f:5d:ee:4b:0d:10:f6:22:
bb:ce:fb:69:eb:5f:dc:23:dc:fa:35:73:3b:ff:46:30:08:f9:
28:25:38:e9:db:ed:dc:86:e2:0d:85:61:74:81:54:f7:b0:55:
da:cd:1b:4a:3d:49:aa:78:82:a0:50:34:b9:33:21:4a:5e:fd:
47:28:79:23:8a:e3:6b:98:48:ea:af:60:3e:4c:8b:6d:02:38:
d8:19:ca:a0:6a:3c:7a:22:dd:b4:05:49:4d:e7:44:81:4b:83:
89:01:b3:d6:cb:22:66:0e:20:11:73:ae:0e:cc:0d:56:0f:51:
09:a6:09:e0:8e:b7:7b:84:24:07:15:fe:8a:7e:82:2c:27:cf:
1d:04:b4:b4:43:a3:cb:4d:36:36:86:43:e5:a3:f4:8f:c9:2d:
04:a8:bb:da:6c:ef:92:f8:5e:94:d1:53:3e:0f:51:00:89:25:
40:c6:b8:e7:71:56:0a:0d:2a:bc:3f:fe:7d:36:d4:60:30:e0:
af:8f:52:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2eZIL8KubCufjRA2pL36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNDY3OTVhZDY4YTZiYWRkNWFmY2I2YmE0NjUzZTljMDkw
ZmM4NWEwHhcNMjYwMzAyMDAwMTUwWhcNMjYwMzAzMDAwMTUwWjAzMTEwLwYDVQQD
Eyg0MDQyN2ZmOTM1YmZlOTJmYjNiYjQ5ZDA4ODE5NWFlNzUwY2I3ODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYeYsOH+GRToNYiMNqc9eG6tb3MS
7bqv6ownyFk/Q7xNOsKbZu3qs67KHy1TQ8iVtHdZX5Wyt36J1iFuW3waVFj3teYR
WVQ73F+DqJy+E5VeKrXi0dbqprtmZmM2hR8qQf0e3fysukwn2OA4EDMWqWkV4w33
AiZP24Pu6KpvWhw/voN1qMPRu1UlW/5Q2Kmwq5ZyLTm8ecOI6j/4zDDAsbiqWdrM
tdOow9ikp3d3x8FjTr7SaOT7C08jfoHqIvWOdp9DU7MGfNrBNxW1+3kSV5bEKVwY
HU1FMttVFsLnpm/wUmH7YNYyiDWJNgx5dNkMNgjP85uQth0NzZ4sb9NabwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBCf/k1v+kvs7tJ0IgZWudQy3g7MB8GA1UdIwQY
MBaAFDJGeVrWimut1a/La6RlPpwJD8haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMt
NzMwYjE3ZjA2OWFiLzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMtNzMwYjE3ZjA2OWFi
LzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauKRJkmS
ZMR4ieEHguIjlUyycISUJERx1yhG+18j3zwuo7scza0YwXbkUkC4Kr5FwLu4PiUD
4JQpRyc1M2bZGH9d7ksNEPYiu877aetf3CPc+jVzO/9GMAj5KCU46dvt3IbiDYVh
dIFU97BV2s0bSj1JqniCoFA0uTMhSl79Ryh5I4rja5hI6q9gPkyLbQI42BnKoGo8
eiLdtAVJTedEgUuDiQGz1ssiZg4gEXOuDswNVg9RCaYJ4I63e4QkBxX+in6CLCfP
HQS0tEOjy002NoZD5aP0j8ktBKi72mzvkvhelNFTPg9RAIklQMa453FWCg0qvD/+
fTbUYDDgr49SvA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:25 2026 by rpki-client