Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File: MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier: 3v8mvHgX3s0ZUjvlHPAylTAWlxbrhLdrJzXrVGxmFN8=
Subject key identifier: C4:B7:5C:08:02:E4:7A:E1:E2:8B:FA:48:CB:97:2B:FE:70:3C:1D:DF
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 019E31857DBF2116563F4277E2FEDA73BCC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number: 0F2E
Signing time: Sat 16 May 2026 16:01:32 +0000
Manifest this update: Sat 16 May 2026 16:01:32 +0000
Manifest next update: Sun 17 May 2026 16:01:32 +0000
Files and hashes: 1: LMyd5AVVPstuPC5E7pVL_2qH79c.roa (hash: tZV4ibO3L7V8SZM1mv/sUwiQCz0xJaX2spb6v95tdyA=)
2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: tDwEcrwhAhUmlF9wrPvM8pfqFMI9ddj2V+7BgibPS5w=)
3: N5As3_5f02c5s8zn2uyxGXeV7es.roa (hash: agj60RbD37HPgv9kIsdcj8QWRgmWH3ok7Fvf9vYBX/k=)
4: f69K1aG7WjoLOs2Y1pAtNPdEc1U.roa (hash: cGXoJfZUx/B5ZqQ+rwCKHOTNtBGcpBtjUB50pxeKDJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:7d:bf:21:16:56:3f:42:77:e2:fe:da:73:bc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: May 16 16:01:32 2026 GMT
Not After : May 17 16:01:32 2026 GMT
Subject: CN=c4b75c0802e47ae1e28bfa48cb972bfe703c1ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:06:b9:cb:ea:8b:10:11:fe:8d:38:d8:e0:27:
9e:1f:1b:04:e0:ee:87:dc:d7:aa:ae:16:1e:24:36:
e5:c7:b4:41:89:a9:0b:65:63:8f:28:35:c5:cb:0c:
34:88:fe:a5:f2:75:b0:2a:35:e8:7f:fe:93:e9:8b:
fb:5e:59:04:93:3b:40:84:15:ef:89:97:d0:d0:80:
04:b4:31:86:2b:cd:db:cb:a1:54:d7:10:b6:13:1f:
dc:2b:9d:44:83:e8:2a:b6:ad:52:87:d7:d7:c8:ea:
3a:18:fd:60:27:66:90:63:b6:3c:16:ca:1a:1e:f2:
d5:47:2e:5b:6a:0d:6b:c5:23:c2:16:65:bc:03:92:
95:4d:5d:25:1b:95:88:6d:4d:c7:de:cc:7a:63:50:
4d:12:32:4a:b9:c6:5c:43:e0:ed:62:ae:b1:59:39:
3a:f9:c3:34:a0:bb:b3:a1:c5:93:ad:1c:31:90:d8:
35:72:cb:09:96:ae:a0:10:ee:bf:eb:59:8b:26:02:
c2:43:cb:0b:3f:db:55:63:89:92:56:83:0f:c0:3e:
dc:a3:3b:9e:1a:ed:d2:84:c0:45:ba:16:6f:34:d3:
40:f9:82:ae:a0:a8:ac:60:17:d5:3b:6e:e3:18:b1:
7a:83:cc:64:2b:ab:59:ff:50:a7:a2:96:7b:bc:f9:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B7:5C:08:02:E4:7A:E1:E2:8B:FA:48:CB:97:2B:FE:70:3C:1D:DF
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e8:06:44:3c:e1:1f:88:75:e6:68:a7:16:8e:17:d5:47:d0:
b4:0d:50:f9:a7:f6:8f:6a:4c:e9:d4:14:3e:01:99:3e:7e:02:
51:b9:b9:e2:d4:60:c2:cf:61:4e:3d:2f:94:39:de:f8:da:c3:
e2:33:bc:a6:7d:80:b7:d9:85:df:ee:9a:05:17:c9:88:ab:7d:
63:ed:c9:71:bb:c3:e9:4f:0b:73:86:eb:26:52:6a:ce:8e:99:
3c:ab:4c:1a:0a:de:3a:6a:0d:09:e2:0b:88:39:2d:ba:43:08:
44:3b:71:f4:11:72:10:06:37:a7:66:0f:0c:5e:8d:ff:1a:2e:
87:cc:13:8c:48:15:3f:20:1e:17:60:c0:dd:84:60:df:08:22:
03:98:62:3a:bb:e3:07:a9:d8:3a:51:b0:e2:c2:f5:76:3a:61:
3f:7e:e1:df:12:16:be:5b:52:b3:7f:d8:02:d2:ab:3f:ae:19:
de:ba:03:27:da:af:95:e2:62:af:64:42:95:c9:2b:19:5b:fe:
ef:04:30:b9:d1:a1:5f:c3:02:16:5d:51:c6:3b:eb:42:34:ff:
8b:ab:15:e6:6e:e7:a7:14:d0:7d:f0:4d:ce:24:9c:ed:80:60:
41:51:45:7c:b5:4d:27:57:d9:e3:77:bb:34:97:b4:80:c6:03:
56:33:1a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:56 2026 by rpki-client