Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
File: morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json)
Hash identifier: ifNJL4O3+7pS+eZ69xhCL7jHhpPwvCUUL8tujm9e/OI=
Subject key identifier: D5:3A:EA:57:DF:E3:1E:11:2D:3F:93:1A:27:7D:D5:6E:70:D0:3D:02
Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Certificate serial: 019D37C06FD4830CDE686E05AFE6B50B67AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
Manifest number: 0502
Signing time: Sun 29 Mar 2026 04:00:51 +0000
Manifest this update: Sun 29 Mar 2026 04:00:51 +0000
Manifest next update: Mon 30 Mar 2026 04:00:51 +0000
Files and hashes: 1: AyxCahcSKu47yxPv4m32n1KPeFU.roa (hash: +WkSYCnFPhdi7837ndWHjwqAWUrNMMzWhW5p7s1rMYY=)
2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: cWy5WiIenV+Eb46di3cB/daqHhzII8JQUfmqfCauquI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6f:d4:83:0c:de:68:6e:05:af:e6:b5:0b:67:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Validity
Not Before: Mar 29 04:00:51 2026 GMT
Not After : Mar 30 04:00:51 2026 GMT
Subject: CN=d53aea57dfe31e112d3f931a277dd56e70d03d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:65:35:0a:51:72:79:fb:c7:29:97:e2:d2:
f7:e6:85:4a:ef:3e:90:35:bd:ba:7b:35:eb:ca:dc:
d3:a2:cf:73:64:bb:55:b9:3a:55:d8:57:9f:c7:5d:
a8:c2:5c:3e:a3:03:c1:8a:c2:53:22:20:74:c6:bb:
0c:48:24:13:89:e3:d5:46:94:af:d0:43:97:81:63:
44:f2:93:79:3d:aa:36:00:ea:f0:5e:d7:c4:b2:d9:
34:aa:ca:22:e2:81:b3:7d:93:5e:15:43:88:88:c2:
c1:86:f2:37:ca:a4:0e:c9:66:91:b2:29:c6:62:1e:
8a:09:62:83:d8:49:04:ca:bf:6f:4d:21:f8:5e:9e:
29:95:cf:3c:4f:55:8a:2d:55:42:e4:fd:4c:d8:c2:
34:55:48:3f:e1:2a:ea:0c:e9:9f:2b:a0:f1:87:f0:
31:22:f8:5d:9e:60:77:d8:f3:fc:ed:4b:a5:d5:47:
3b:75:cd:47:b1:b6:ad:26:47:8f:91:9f:5c:d9:e2:
92:b5:da:58:f3:42:5f:cd:23:2e:82:c2:8a:f4:ea:
85:33:7c:72:3a:f2:5f:49:50:a6:8d:8e:7d:dc:b9:
b2:d2:52:8b:13:fb:7d:31:39:2f:7e:1d:3b:89:20:
24:6b:cc:11:e3:a0:78:2f:57:47:1d:57:fa:c3:1b:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3A:EA:57:DF:E3:1E:11:2D:3F:93:1A:27:7D:D5:6E:70:D0:3D:02
X509v3 Authority Key Identifier:
keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:85:82:8d:ca:59:89:55:75:00:8d:01:03:90:d4:b7:c1:0a:
f5:f9:8e:da:e1:08:5d:9b:2f:82:92:30:80:e9:88:56:e4:19:
25:c8:b1:21:77:41:c6:0b:2c:3a:bb:cd:fa:80:a5:a9:cd:32:
57:d5:dd:09:f3:1b:1e:69:34:05:32:5a:55:4a:a5:83:5f:ac:
50:3e:23:2e:07:c2:26:58:c9:ba:77:2e:fd:9d:06:c6:b3:49:
6c:2e:40:20:de:df:9b:d3:19:82:05:bc:9b:f7:a5:be:bc:b3:
ff:c7:5c:0b:38:0f:aa:da:45:2c:a8:1d:22:1c:ea:b2:69:51:
0c:3d:f9:bd:d8:f9:5e:f2:fa:2c:fa:27:47:85:bb:df:8d:0a:
b3:1b:80:14:ed:7a:6a:3a:d4:dc:3d:c3:10:04:64:1c:f9:7c:
5a:6c:66:0c:dd:03:9f:5a:89:b6:e0:71:e0:a2:77:fd:5c:25:
ae:e0:f8:cb:92:f9:fe:d9:ef:8e:ed:44:b3:39:a5:9c:fa:9a:
df:97:d1:4f:d5:6d:5b:6f:e2:be:0a:93:9e:f6:5f:cd:3d:eb:
fb:94:79:a4:22:b0:d3:1e:e8:d0:df:b8:dd:4e:a7:ba:d7:f3:
39:4f:04:93:74:3e:24:aa:1e:3e:58:f9:75:8e:16:77:29:95:
c0:13:b5:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wG/UgwzeaG4Fr+a1C2eqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOGFjYTFjMjY1YzEzMjgyM2M3ODRmZGE4NDJmN2ExYTA1
YjhjYjcwHhcNMjYwMzI5MDQwMDUxWhcNMjYwMzMwMDQwMDUxWjAzMTEwLwYDVQQD
EyhkNTNhZWE1N2RmZTMxZTExMmQzZjkzMWEyNzdkZDU2ZTcwZDAzZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywplNQpRcnn7xymX4tL35oVK7z6Q
Nb26ezXrytzTos9zZLtVuTpV2Fefx12owlw+owPBisJTIiB0xrsMSCQTiePVRpSv
0EOXgWNE8pN5Pao2AOrwXtfEstk0qsoi4oGzfZNeFUOIiMLBhvI3yqQOyWaRsinG
Yh6KCWKD2EkEyr9vTSH4Xp4plc88T1WKLVVC5P1M2MI0VUg/4SrqDOmfK6Dxh/Ax
IvhdnmB32PP87Uul1Uc7dc1HsbatJkePkZ9c2eKStdpY80JfzSMugsKK9OqFM3xy
OvJfSVCmjY593Lmy0lKLE/t9MTkvfh07iSAka8wR46B4L1dHHVf6wxsiAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNU66lff4x4RLT+TGid91W5w0D0CMB8GA1UdIwQY
MBaAFJqKyhwmXBMoI8eE/ahC96GgW4y3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYt
ZGMwYzRmMTA4M2M5LzEvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYtZGMwYzRmMTA4M2M5
LzEvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIWCjcpZ
iVV1AI0BA5DUt8EK9fmO2uEIXZsvgpIwgOmIVuQZJcixIXdBxgssOrvN+oClqc0y
V9XdCfMbHmk0BTJaVUqlg1+sUD4jLgfCJljJuncu/Z0GxrNJbC5AIN7fm9MZggW8
m/elvryz/8dcCzgPqtpFLKgdIhzqsmlRDD35vdj5XvL6LPonR4W7340KsxuAFO16
ajrU3D3DEARkHPl8WmxmDN0Dn1qJtuBx4KJ3/VwlruD4y5L5/tnvju1EszmlnPqa
35fRT9VtW2/ivgqTnvZfzT3r+5R5pCKw0x7o0N+43U6nutfzOU8Ek3Q+JKoePlj5
dY4WdymVwBO11w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:10 2026 by rpki-client