Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: UeAKhX0lcs2p9qTgtxHiwLBQC2eLikJ9RhKyIX/W8WE=
Subject key identifier: 4F:1E:12:55:FE:4E:9C:BE:36:F8:B3:77:15:F8:02:52:01:3F:A8:06
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 019D3865F42F5C0A90C8D153E504114C5793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 07:01:38 +0000
Manifest this update: Sun 29 Mar 2026 07:01:38 +0000
Manifest next update: Mon 30 Mar 2026 07:01:38 +0000
Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: aBY5RNstlEvcWEeBcvZhS1XsYe6Kn5j9h/jXGe+J/wY=)
2: dDj4-eFRfq_UroSu2HQ22smKlA8.roa (hash: ahRStajN/bb570o/RBHvcfEKEL2KTD1bW5s9wAnONq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f4:2f:5c:0a:90:c8:d1:53:e5:04:11:4c:57:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: Mar 29 07:01:38 2026 GMT
Not After : Mar 30 07:01:38 2026 GMT
Subject: CN=4f1e1255fe4e9cbe36f8b37715f80252013fa806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:ef:34:0e:26:14:bf:fb:48:e8:a2:76:2c:
71:09:df:8e:49:4d:62:43:ca:6f:e6:7e:75:b2:53:
2c:ac:6b:15:5f:83:ff:1a:06:77:5d:41:72:5e:92:
5f:e4:de:a7:12:99:9f:80:c9:6a:8d:b9:d7:28:39:
2c:89:f2:39:e2:a1:af:14:53:77:31:73:cb:05:22:
0f:ac:b3:d5:70:25:b7:fc:bd:5e:ea:0f:9e:bd:62:
85:61:2e:25:ba:aa:ee:74:4f:be:d3:86:ab:dd:3e:
b7:ca:09:39:de:3d:7d:cb:0e:0b:44:12:57:11:25:
cc:38:f8:7d:cf:2c:25:82:51:7a:72:5e:55:16:2f:
66:9b:89:9b:6b:f4:2a:25:5b:f0:1c:a4:7e:50:7a:
65:74:9a:11:bd:fe:57:6f:aa:72:14:4a:03:c1:6d:
07:0e:e8:78:70:6a:d9:d8:f1:dc:40:3c:ee:53:2e:
bf:5c:f7:be:f9:27:44:89:5f:f4:5e:92:33:b5:b4:
05:68:b9:58:4b:64:24:4c:f0:ac:5d:8d:b8:df:31:
ec:97:11:98:0f:47:76:8f:64:7d:8d:bc:80:ab:b3:
a9:37:2a:de:c1:08:14:84:ab:56:2c:f0:d9:b8:7a:
ef:b7:cf:95:1e:f0:4b:51:25:a3:21:eb:57:dd:fe:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1E:12:55:FE:4E:9C:BE:36:F8:B3:77:15:F8:02:52:01:3F:A8:06
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f0:c3:07:de:67:84:b2:0f:a6:3e:c8:a8:7e:bd:b1:26:6e:
e7:7e:81:91:8c:07:9f:b4:5a:82:7d:3e:71:bc:d4:c1:11:1a:
e8:15:cc:ab:af:67:fe:6a:fc:c2:fe:f5:7f:52:61:4b:0c:7c:
c9:50:64:d6:a9:bf:89:47:93:db:d7:f2:e0:ec:d1:a2:c5:5f:
b9:d1:c9:cf:89:c7:9f:00:be:78:a9:25:c4:17:08:ea:09:6b:
e6:dd:67:52:7e:20:e3:4b:d5:a1:51:43:a0:6f:64:09:6c:08:
ba:01:cb:4d:b1:97:f3:b0:85:b6:60:85:72:df:82:4d:0e:25:
d0:d4:2a:26:cb:0e:98:0d:fd:47:e6:f6:b1:df:48:48:2f:07:
a4:b2:61:57:d2:e1:fb:76:ba:77:b7:c6:2e:e9:58:82:5d:f5:
e3:88:bd:c2:10:80:83:6e:52:9d:a2:c2:18:4f:ef:32:03:e2:
fe:f0:cf:67:2d:32:fa:72:17:e4:de:2c:92:b1:06:6b:d2:73:
aa:53:ed:9c:64:fc:3b:0c:b0:b9:18:fa:c6:e0:82:66:32:dd:
86:7e:36:87:6f:d5:8e:e3:87:78:7e:fa:58:a4:39:38:05:f4:
2c:cc:13:25:cf:a7:5d:4c:1c:ff:ae:38:34:ef:1c:5b:84:c1:
47:9b:b6:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZfQvXAqQyNFT5QQRTFeTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOTgwNTZiODA2YTdiN2NjMTYzMzM0NWRjNTU4MzZhNDVh
MjQ0YzcwHhcNMjYwMzI5MDcwMTM4WhcNMjYwMzMwMDcwMTM4WjAzMTEwLwYDVQQD
Eyg0ZjFlMTI1NWZlNGU5Y2JlMzZmOGIzNzcxNWY4MDI1MjAxM2ZhODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kPvNA4mFL/7SOiidixxCd+OSU1i
Q8pv5n51slMsrGsVX4P/GgZ3XUFyXpJf5N6nEpmfgMlqjbnXKDksifI54qGvFFN3
MXPLBSIPrLPVcCW3/L1e6g+evWKFYS4luqrudE++04ar3T63ygk53j19yw4LRBJX
ESXMOPh9zywlglF6cl5VFi9mm4mba/QqJVvwHKR+UHpldJoRvf5Xb6pyFEoDwW0H
Duh4cGrZ2PHcQDzuUy6/XPe++SdEiV/0XpIztbQFaLlYS2QkTPCsXY243zHslxGY
D0d2j2R9jbyAq7OpNyrewQgUhKtWLPDZuHrvt8+VHvBLUSWjIetX3f47RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8eElX+Tpy+NvizdxX4AlIBP6gGMB8GA1UdIwQY
MBaAFDKYBWuAant8wWMzRdxVg2pFokTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iZjJiYjQtMzZkMy00YjE3LThiY2Yt
NDRhOTU3MTMyNjM5LzEvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iZjJiYjQtMzZkMy00YjE3LThiY2YtNDRhOTU3MTMyNjM5
LzEvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvDDB95n
hLIPpj7IqH69sSZu536BkYwHn7Ragn0+cbzUwREa6BXMq69n/mr8wv71f1JhSwx8
yVBk1qm/iUeT29fy4OzRosVfudHJz4nHnwC+eKklxBcI6glr5t1nUn4g40vVoVFD
oG9kCWwIugHLTbGX87CFtmCFct+CTQ4l0NQqJssOmA39R+b2sd9ISC8HpLJhV9Lh
+3a6d7fGLulYgl3144i9whCAg25SnaLCGE/vMgPi/vDPZy0y+nIX5N4skrEGa9Jz
qlPtnGT8OwywuRj6xuCCZjLdhn42h2/VjuOHeH76WKQ5OAX0LMwTJc+nXUwc/644
NO8cW4TBR5u24w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:00 2026 by rpki-client