Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier: MpT1GDUW4LCh6fv2YRLaxFnJR7S4w81r+/PU6iFutUc=
Subject key identifier: 7F:72:8F:1F:D8:E9:AF:D5:D7:FC:7D:DB:B9:58:24:76:94:F7:FD:76
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 01A089E76FADCC89620104AF4545E83708DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number: 1442
Signing time: Thu 10 Sep 2026 06:00:40 +0000
Manifest this update: Thu 10 Sep 2026 06:00:40 +0000
Manifest next update: Fri 11 Sep 2026 06:00:40 +0000
Files and hashes: 1: jlRHoOU7VBuZG0NtlGgpYUcQg1w.roa (hash: a/dGRje2qaYpZSj1y2Z3z/E4zsUb68R588aViHKfTm8=)
2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: Ukp+DhPJ9KPm/KxXBME6aWVDctks4REhqhOeLsyH/3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:6f:ad:cc:89:62:01:04:af:45:45:e8:37:08:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: Sep 10 06:00:40 2026 GMT
Not After : Sep 11 06:00:40 2026 GMT
Subject: CN=7f728f1fd8e9afd5d7fc7ddbb958247694f7fd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:a5:98:e2:50:c8:3b:b3:15:d3:43:bc:a2:
c2:ab:4b:d8:09:84:2d:f8:91:56:d3:ff:5e:2f:74:
9e:d9:76:f5:8d:bf:6d:1d:32:2f:10:e8:bc:68:53:
ad:00:6d:22:01:44:2c:76:4c:2a:18:80:d8:f4:d2:
60:bb:a9:e9:c1:a1:c6:77:5f:1e:e3:bf:28:d9:b2:
11:35:11:18:78:30:91:c3:63:f6:4e:d6:f3:d1:66:
b6:ed:c8:4b:66:0a:9f:23:3c:1d:6f:9f:a9:f8:1f:
c0:e3:8b:00:25:67:5a:1b:ac:b4:be:f2:55:3c:a3:
b3:69:2d:14:45:2b:c2:fb:4d:82:a8:e8:aa:26:b9:
00:41:e2:c9:19:0e:30:55:fa:37:3f:33:11:b1:f7:
3f:8a:26:ae:dd:ba:42:ba:15:cf:71:5b:ab:0e:63:
12:76:d6:87:30:df:42:2c:40:b7:87:11:bb:c6:5a:
14:e3:3b:76:63:0a:84:09:eb:ea:15:65:d2:11:a0:
8c:0b:b4:e2:4f:91:c6:05:fa:29:de:4d:b2:4c:f3:
0f:0b:f9:a3:f2:0e:02:ac:cd:9a:79:09:11:7a:40:
67:e5:fd:fe:b7:89:c0:ac:35:69:da:60:01:a3:0b:
78:7f:e5:33:40:e4:52:16:1e:52:19:7a:66:38:f0:
87:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:72:8F:1F:D8:E9:AF:D5:D7:FC:7D:DB:B9:58:24:76:94:F7:FD:76
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7a:67:b6:35:3a:dd:7b:37:ff:68:b3:8d:9b:c4:a5:ce:cd:
3d:00:23:df:4c:c1:cb:a1:95:dc:2a:ac:24:36:b7:54:d5:e0:
79:dc:c7:b8:74:8d:78:c4:40:2b:94:90:06:c3:f9:41:68:7f:
1a:38:80:68:c4:d8:76:3e:2c:03:4e:a7:b5:af:ef:df:80:68:
e6:bf:76:b7:63:59:ef:62:89:f7:32:83:92:ca:8f:e0:90:5e:
7a:c2:e4:b5:90:15:64:64:85:00:5a:ce:7c:84:e9:27:91:8f:
c1:7d:92:66:a9:41:5b:23:e1:df:e3:9a:8c:6f:80:b5:7f:7e:
e4:2f:69:d8:cf:7d:31:06:2f:bf:68:15:1b:74:70:3c:da:6d:
a9:12:2a:20:37:02:70:10:01:94:e4:c9:75:63:3f:24:7a:28:
1e:a0:06:98:76:ab:76:95:ab:ad:23:1e:9a:ec:7c:2d:49:a9:
9d:54:1f:41:05:54:82:7a:10:1f:21:04:11:41:6e:e6:19:d8:
4c:27:a8:cb:e2:90:5d:80:48:17:c5:6a:e5:ad:5c:4b:3f:c4:
68:b1:a7:f5:ad:db:5a:67:4a:b8:02:ee:81:8f:6f:17:54:15:
57:40:6c:6d:f7:6b:d9:5c:6a:a7:f8:b3:b1:c0:6f:65:94:a7:
7e:25:6c:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJ52+tzIliAQSvRUXoNwjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTE4ZDdkMTgwZjM2ZTc2NTEyYTQxNjExYTBiMjhhOGI0
MGM1MmUwHhcNMjYwOTEwMDYwMDQwWhcNMjYwOTExMDYwMDQwWjAzMTEwLwYDVQQD
Eyg3ZjcyOGYxZmQ4ZTlhZmQ1ZDdmYzdkZGJiOTU4MjQ3Njk0ZjdmZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH2lmOJQyDuzFdNDvKLCq0vYCYQt
+JFW0/9eL3Se2Xb1jb9tHTIvEOi8aFOtAG0iAUQsdkwqGIDY9NJgu6npwaHGd18e
478o2bIRNREYeDCRw2P2Ttbz0Wa27chLZgqfIzwdb5+p+B/A44sAJWdaG6y0vvJV
PKOzaS0URSvC+02CqOiqJrkAQeLJGQ4wVfo3PzMRsfc/iiau3bpCuhXPcVurDmMS
dtaHMN9CLEC3hxG7xloU4zt2YwqECevqFWXSEaCMC7TiT5HGBfop3k2yTPMPC/mj
8g4CrM2aeQkRekBn5f3+t4nArDVp2mABowt4f+UzQORSFh5SGXpmOPCH4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9yjx/Y6a/V1/x927lYJHaU9/12MB8GA1UdIwQY
MBaAFJqRjX0YDzbnZRKkFhGgsoqLQMUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yNjkzNjMtYjM1Zi00MjJjLWIwNzYt
OTNmNDg2YjhiOTYxLzEvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8yNjkzNjMtYjM1Zi00MjJjLWIwNzYtOTNmNDg2YjhiOTYx
LzEvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3pntjU6
3Xs3/2izjZvEpc7NPQAj30zBy6GV3CqsJDa3VNXgedzHuHSNeMRAK5SQBsP5QWh/
GjiAaMTYdj4sA06nta/v34Bo5r92t2NZ72KJ9zKDksqP4JBeesLktZAVZGSFAFrO
fITpJ5GPwX2SZqlBWyPh3+OajG+AtX9+5C9p2M99MQYvv2gVG3RwPNptqRIqIDcC
cBABlOTJdWM/JHooHqAGmHardpWrrSMemux8LUmpnVQfQQVUgnoQHyEEEUFu5hnY
TCeoy+KQXYBIF8Vq5a1cSz/EaLGn9a3bWmdKuALugY9vF1QVV0Bsbfdr2Vxqp/iz
scBvZZSnfiVsEw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:48:49 2026 by rpki-client