Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
File: MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft (raw, json)
Hash identifier: 6gNkjdNkwWGm+Jiz5xp5k/E0dgYlXpl0h0qNQhD3mIw=
Subject key identifier: AC:49:D3:25:5F:C7:2F:AA:5C:F3:A8:8E:9F:57:BA:F7:62:EF:DD:04
Authority key identifier: 31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
Certificate issuer: /CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Certificate serial: 019D390A20B3EE9FDCD36F66F18E4441BC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
Manifest number: 0AE4
Signing time: Sun 29 Mar 2026 10:00:58 +0000
Manifest this update: Sun 29 Mar 2026 10:00:58 +0000
Manifest next update: Mon 30 Mar 2026 10:00:58 +0000
Files and hashes: 1: MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl (hash: KjtjxD/wMkibmgXujrzFyydt/KyP5vgMW3frOUeOqWA=)
2: dg_wP3exQr99siZMe2HJIj5cuEE.roa (hash: 6QFunw3gR5dCtdoUx0ipbh76Y60LWX9z3LOMdv6vVro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:20:b3:ee:9f:dc:d3:6f:66:f1:8e:44:41:bc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Validity
Not Before: Mar 29 10:00:58 2026 GMT
Not After : Mar 30 10:00:58 2026 GMT
Subject: CN=ac49d3255fc72faa5cf3a88e9f57baf762efdd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:a0:a1:a5:6f:66:48:88:b0:79:e5:d1:91:
06:f5:1b:4f:ef:79:dc:9f:e6:66:aa:10:cd:bc:c9:
4f:20:fd:fa:de:fe:83:8c:cc:a9:de:2c:46:0a:fa:
cb:0e:21:49:6b:82:1d:16:c4:b3:46:8b:33:92:28:
fd:0b:c6:60:cf:84:dc:ca:33:a6:86:ec:26:b8:37:
8f:ae:cf:cf:a8:d1:d5:a4:14:c3:d2:78:b0:cf:e6:
b1:3f:55:87:79:60:8f:46:73:fa:99:28:62:8a:2b:
fb:35:d9:27:a0:45:bf:ab:1d:62:ca:75:2d:cd:b5:
1f:7b:2c:ad:1c:f2:a4:c2:b9:3d:a5:82:b3:1a:27:
b8:5a:57:5d:ea:e5:d3:03:03:e5:17:06:09:9d:78:
26:45:fb:0d:79:e2:e3:ba:12:00:43:43:ea:3f:14:
96:7b:7e:68:e9:fe:4c:c1:3a:89:c7:30:50:a5:16:
2b:94:8a:31:ef:db:4a:8f:7f:7f:79:54:c9:7c:a4:
c9:61:10:8f:7b:a3:2a:8e:f6:8a:ae:e7:ce:96:07:
40:08:52:15:6b:0f:4f:6d:a1:66:08:40:d2:a4:f6:
71:8a:0c:27:d8:4d:e9:f9:76:87:77:cd:c7:96:df:
36:3e:11:18:a9:15:e3:a6:ef:05:88:e9:13:33:f4:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:49:D3:25:5F:C7:2F:AA:5C:F3:A8:8E:9F:57:BA:F7:62:EF:DD:04
X509v3 Authority Key Identifier:
keyid:31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a6:73:e6:1b:c6:70:2b:2f:a6:c6:fc:1f:2e:71:cb:e8:2a:
d1:27:2d:cc:8a:6a:8c:10:49:d8:bc:1d:d1:f3:12:e8:4e:29:
12:5a:2a:d5:ff:01:46:15:de:74:0d:10:d2:0e:95:b5:ea:b8:
a1:4a:13:60:20:3b:0b:80:d4:52:c4:36:cf:b0:6c:e7:6e:57:
1d:93:9d:f3:a0:32:24:a9:a6:02:6e:e3:ed:9d:d2:4f:59:d1:
b3:41:03:9b:de:20:91:f4:2e:78:a7:c6:fb:8e:16:bd:6d:5e:
fd:47:11:e6:a0:aa:f4:10:73:4d:bd:06:72:4c:7f:54:54:6d:
6f:38:ff:3f:18:f5:32:51:95:81:33:79:8b:6c:e4:46:fb:49:
a8:bf:21:dc:29:98:5e:05:2b:9e:96:00:1a:d3:d3:29:87:81:
2d:4d:ef:f8:2f:ea:00:69:df:d2:0b:87:38:04:7e:d4:b2:58:
88:0f:8c:25:b6:79:8b:64:21:48:96:f7:e1:a6:de:99:82:0d:
3a:ed:ce:a5:69:26:01:34:84:12:fa:70:20:ed:e8:64:9f:e7:
ad:83:1f:26:49:2b:eb:dc:12:4e:d0:d3:e3:30:be:c2:32:12:
f8:f1:cb:ba:f8:05:05:9d:71:8c:e8:2e:e7:92:90:36:54:0a:
a1:fb:fb:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CiCz7p/c029m8Y5EQbyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODNlZmM1MmRkNWQyZDRmN2UwYzQ1ZDIyYzljMjlmMWRj
ZThlNTkwHhcNMjYwMzI5MTAwMDU4WhcNMjYwMzMwMTAwMDU4WjAzMTEwLwYDVQQD
EyhhYzQ5ZDMyNTVmYzcyZmFhNWNmM2E4OGU5ZjU3YmFmNzYyZWZkZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu92goaVvZkiIsHnl0ZEG9RtP73nc
n+ZmqhDNvMlPIP363v6DjMyp3ixGCvrLDiFJa4IdFsSzRoszkij9C8Zgz4TcyjOm
huwmuDePrs/PqNHVpBTD0niwz+axP1WHeWCPRnP6mShiiiv7NdknoEW/qx1iynUt
zbUfeyytHPKkwrk9pYKzGie4Wldd6uXTAwPlFwYJnXgmRfsNeeLjuhIAQ0PqPxSW
e35o6f5MwTqJxzBQpRYrlIox79tKj39/eVTJfKTJYRCPe6MqjvaKrufOlgdACFIV
aw9PbaFmCEDSpPZxigwn2E3p+XaHd83Hlt82PhEYqRXjpu8FiOkTM/Tp0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxJ0yVfxy+qXPOojp9Xuvdi790EMB8GA1UdIwQY
MBaAFDGD78Ut1dLU9+DEXSLJwp8dzo5ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlQdnhTM1YwdFQzNE1SZElzbkNueDNPamxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YmFjNzEtOTk0ZS00ZDQ3LWJjZmUt
ZjhmM2YwNDAxY2MzLzEvTVlQdnhTM1YwdFQzNE1SZElzbkNueDNPamxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83YmFjNzEtOTk0ZS00ZDQ3LWJjZmUtZjhmM2YwNDAxY2Mz
LzEvTVlQdnhTM1YwdFQzNE1SZElzbkNueDNPamxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwqZz5hvG
cCsvpsb8Hy5xy+gq0SctzIpqjBBJ2Lwd0fMS6E4pEloq1f8BRhXedA0Q0g6Vteq4
oUoTYCA7C4DUUsQ2z7Bs525XHZOd86AyJKmmAm7j7Z3ST1nRs0EDm94gkfQueKfG
+44WvW1e/UcR5qCq9BBzTb0Gckx/VFRtbzj/Pxj1MlGVgTN5i2zkRvtJqL8h3CmY
XgUrnpYAGtPTKYeBLU3v+C/qAGnf0guHOAR+1LJYiA+MJbZ5i2QhSJb34abemYIN
Ou3OpWkmATSEEvpwIO3oZJ/nrYMfJkkr69wSTtDT4zC+wjIS+PHLuvgFBZ1xjOgu
55KQNlQKofv7Wg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:11 2026 by rpki-client