Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: 765aVPov2CWLJjcKWblpjoPbLXxDPd498lLhZDsgmn4=
Subject key identifier: 5A:A5:A4:72:C2:1B:8C:99:BC:A0:40:45:73:68:90:DD:8D:FE:BE:66
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 01A1310FB1730C20F863974B82BB8B5D527A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 19F5
Signing time: Mon 12 Oct 2026 17:01:14 +0000
Manifest this update: Mon 12 Oct 2026 17:01:14 +0000
Manifest next update: Tue 13 Oct 2026 17:01:14 +0000
Files and hashes: 1: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: dznkrzIWQG1IZyhdbdomU/5meK9Qx4MNs4ymg063P1o=)
2: jO9rf4-cCHZRF2KoiLta2NyAQgU.roa (hash: UwmPs36c2ef9tHjcukHaPVItxdtDMmpbGOtpHRoCvf0=)
3: xn4i-fiHxOz0VUsB8YhWKLghbLs.roa (hash: Ptihx8qc04YVHI7Uz+aNOpCGFom4Sx5jCTJsyxvgVYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:0f:b1:73:0c:20:f8:63:97:4b:82:bb:8b:5d:52:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Oct 12 17:01:14 2026 GMT
Not After : Oct 13 17:01:14 2026 GMT
Subject: CN=5aa5a472c21b8c99bca04045736890dd8dfebe66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:89:ff:0e:27:3e:ec:93:66:df:a7:b9:76:
a3:35:f1:e4:80:7f:bd:a3:b2:69:9a:7c:bd:69:53:
71:a0:3b:a9:ab:d6:be:f9:5d:51:11:37:92:4f:02:
99:7c:7a:a6:c9:a6:5e:21:02:83:99:71:aa:b8:eb:
52:52:6f:31:5f:3b:f2:e0:8f:b7:90:47:1d:cc:f6:
aa:0f:24:e4:9c:10:c2:c5:33:0d:23:f3:01:d8:d5:
a5:d1:80:17:c4:c3:73:46:8d:a0:e6:60:9e:85:03:
a7:0f:e1:d7:cd:15:b0:d2:7e:7f:21:54:c0:ad:43:
4a:f0:27:4d:62:5b:b2:70:3c:a0:b8:44:ca:b4:91:
59:41:aa:20:aa:48:38:8e:1d:33:9e:67:f7:09:cf:
6f:8a:77:f4:6a:e0:07:55:16:c8:21:2a:f5:82:5b:
4f:a1:37:1e:d2:e7:98:a0:9c:8d:0d:33:74:20:89:
96:9d:a2:e7:7b:d9:c3:83:1a:b2:af:1f:d4:1a:f2:
48:16:2c:a1:57:6d:10:5d:ae:d5:e9:2f:ca:37:12:
04:82:0d:33:a0:3d:70:76:75:97:a3:b9:dc:54:b6:
24:0b:d5:3b:ae:4b:94:39:02:dd:d6:c9:77:49:bf:
dd:48:b1:ad:e7:50:f5:66:c0:86:0a:f6:c9:2c:e2:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A5:A4:72:C2:1B:8C:99:BC:A0:40:45:73:68:90:DD:8D:FE:BE:66
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:82:92:e8:58:38:8d:13:21:30:08:c6:42:b1:e0:46:43:82:
51:7e:61:99:90:d8:c1:f2:d0:e7:38:81:30:c3:84:69:8b:40:
77:70:da:5f:db:d7:98:42:9c:cc:da:0e:39:c8:31:45:a6:0f:
96:d7:0a:96:be:2a:12:36:1a:a2:8d:11:9a:81:0f:0c:51:02:
91:42:83:48:f4:f9:07:ec:90:d0:76:66:60:d9:1e:3d:11:86:
7b:80:39:cc:fb:b9:4a:d7:25:aa:e5:03:51:2a:05:3e:e6:e4:
c2:f8:ec:81:bb:de:e1:2e:a2:d6:ca:bf:63:4c:e2:5f:b5:8c:
1b:03:5c:ee:38:10:c3:a1:9b:43:19:fe:62:70:65:40:07:61:
6f:ec:88:d1:1a:19:7c:bc:38:2f:99:ed:09:a1:9f:3b:33:61:
ff:4b:9e:21:47:9a:02:15:79:c3:d4:2a:11:19:84:22:50:a3:
ab:ff:b3:c0:02:fb:65:01:b3:c5:0b:d3:88:46:61:94:91:e0:
0d:33:14:3d:fa:99:46:7d:51:80:ca:9e:6a:4f:b1:22:76:7a:
a2:33:cd:a8:84:67:b9:d6:01:a4:a9:a5:14:82:77:3a:a1:1e:
fb:a0:4d:24:32:19:50:f8:de:33:cb:74:88:df:c6:73:63:c7:
5a:80:08:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaExD7FzDCD4Y5dLgruLXVJ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODllMGI4YTJmZjgyYTIzYjQ4ZGQ2ZTZlNzYxNzZiNGNk
MzgzMmUwHhcNMjYxMDEyMTcwMTE0WhcNMjYxMDEzMTcwMTE0WjAzMTEwLwYDVQQD
Eyg1YWE1YTQ3MmMyMWI4Yzk5YmNhMDQwNDU3MzY4OTBkZDhkZmViZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBqJ/w4nPuyTZt+nuXajNfHkgH+9
o7Jpmny9aVNxoDupq9a++V1RETeSTwKZfHqmyaZeIQKDmXGquOtSUm8xXzvy4I+3
kEcdzPaqDyTknBDCxTMNI/MB2NWl0YAXxMNzRo2g5mCehQOnD+HXzRWw0n5/IVTA
rUNK8CdNYluycDyguETKtJFZQaogqkg4jh0znmf3Cc9vinf0auAHVRbIISr1gltP
oTce0ueYoJyNDTN0IImWnaLne9nDgxqyrx/UGvJIFiyhV20QXa7V6S/KNxIEgg0z
oD1wdnWXo7ncVLYkC9U7rkuUOQLd1sl3Sb/dSLGt51D1ZsCGCvbJLOKxowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqlpHLCG4yZvKBARXNokN2N/r5mMB8GA1UdIwQY
MBaAFDOJ4Lii/4KiO0jdbm52F2tM04MuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgt
MjMzN2E4MWIxZjc4LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgtMjMzN2E4MWIxZjc4
LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIKS6Fg4
jRMhMAjGQrHgRkOCUX5hmZDYwfLQ5ziBMMOEaYtAd3DaX9vXmEKczNoOOcgxRaYP
ltcKlr4qEjYaoo0RmoEPDFECkUKDSPT5B+yQ0HZmYNkePRGGe4A5zPu5StclquUD
USoFPubkwvjsgbve4S6i1sq/Y0ziX7WMGwNc7jgQw6GbQxn+YnBlQAdhb+yI0RoZ
fLw4L5ntCaGfOzNh/0ueIUeaAhV5w9QqERmEIlCjq/+zwAL7ZQGzxQvTiEZhlJHg
DTMUPfqZRn1RgMqeak+xInZ6ojPNqIRnudYBpKmlFIJ3OqEe+6BNJDIZUPjeM8t0
iN/Gc2PHWoAIEQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 23:18:53 2026 by rpki-client