Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
File: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft (raw, json)
Hash identifier: ghmTxqc3i86KWqhshdtSiXEh0qpeW+0pzGgtzChwm7U=
Subject key identifier: EC:08:6B:F9:AA:E2:A1:10:AB:6C:6D:5A:8C:5E:44:AA:06:61:CD:71
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Certificate issuer: /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial: 019D3909ED0D9ED3B3E8672D0C27718DC81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
Manifest number: D5
Signing time: Sun 29 Mar 2026 10:00:44 +0000
Manifest this update: Sun 29 Mar 2026 10:00:44 +0000
Manifest next update: Mon 30 Mar 2026 10:00:44 +0000
Files and hashes: 1: iS_RjiJ5hKPzS36a9K6GI2jCpSc.roa (hash: oKmLMmS60dhNLyeJppUGpS47iPqdNIjtFfF23b9zJgg=)
2: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl (hash: xruZPOFz436se55TqiIC0FpLO0wjDYM5uWYVPJG0cS0=)
3: qoT5stHghDnRteVtg_Px7AZoT7U.asa (hash: TskbWZWjs4ecsqraIt5QOAc8VDAfdc2BCzb4CrrRpfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ed:0d:9e:d3:b3:e8:67:2d:0c:27:71:8d:c8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Validity
Not Before: Mar 29 10:00:44 2026 GMT
Not After : Mar 30 10:00:44 2026 GMT
Subject: CN=ec086bf9aae2a110ab6c6d5a8c5e44aa0661cd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:2e:f6:d2:17:3e:4d:9e:79:06:ec:14:0a:
f5:68:f9:09:25:41:e8:05:d4:6c:0f:6f:9f:a7:02:
4e:d1:a1:cb:dc:e5:f0:d9:b1:0a:a3:bd:c1:51:a2:
f3:16:01:ae:a0:b0:9b:e7:6e:1d:08:fa:39:58:e5:
a1:52:e7:28:08:e3:d7:2d:df:9a:fc:ad:b2:57:7d:
28:bf:c1:a7:27:84:19:78:e3:9e:55:91:9e:2a:14:
b1:a5:09:3b:ef:c4:17:99:a8:80:ca:52:14:9a:58:
e0:c1:42:76:a3:1f:4c:ac:5b:2d:21:1c:d8:cd:64:
e5:b7:da:91:6f:4b:89:58:e4:d2:24:79:50:14:e8:
1f:3a:a7:bc:11:37:a0:13:77:61:ae:40:b3:42:5b:
db:a6:fe:6e:63:55:37:c1:31:52:36:40:e8:60:da:
10:51:70:04:11:da:99:a9:76:1c:f8:fc:42:58:0b:
a2:73:95:51:b3:ea:96:2e:70:8d:8f:42:25:29:06:
55:99:40:98:d2:e7:3d:f9:a9:0d:3b:86:a3:cb:3c:
28:96:ed:3a:5f:44:bb:86:06:98:de:30:08:b6:f5:
7f:d6:d0:61:a2:71:32:31:94:e2:7b:df:e4:bd:de:
61:f3:97:a2:ff:a1:dc:11:bd:d8:7a:44:65:56:40:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:08:6B:F9:AA:E2:A1:10:AB:6C:6D:5A:8C:5E:44:AA:06:61:CD:71
X509v3 Authority Key Identifier:
keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f8:63:96:65:fc:0c:16:fb:e1:8a:67:96:b2:50:81:d4:63:
0f:87:9a:dd:d1:22:51:9e:c4:cf:06:9a:12:f9:54:a0:7b:de:
06:c3:73:f5:40:d1:88:34:e5:92:f0:8c:6d:83:d2:9d:15:5c:
43:8f:70:02:74:47:af:c8:c9:77:0c:3e:20:1f:21:c4:6e:e9:
a0:4d:12:4a:25:7a:c8:7f:1b:35:db:53:1c:44:3c:14:16:c7:
78:6f:b7:4b:8e:0b:a7:af:45:1a:60:ea:87:8e:ee:c3:5b:e0:
ff:72:55:f7:07:c3:f9:08:99:6c:f4:05:5b:9a:94:1e:09:03:
ca:97:bb:66:0e:df:e1:ef:a8:e5:2d:f7:d0:1b:8e:45:c1:fe:
06:20:59:7b:5b:d6:24:04:5c:6c:6c:02:86:9d:1d:21:a3:52:
21:eb:d0:ec:c9:e1:8a:37:8e:a7:58:5b:f3:b9:95:d1:c8:f6:
89:96:2b:3d:74:6a:b0:d8:fb:9d:c0:d9:16:25:7c:56:e6:c6:
38:bf:8a:e1:cf:f2:54:10:43:2e:4a:e6:60:44:e9:6f:54:d7:
c2:31:48:14:15:ba:db:79:fd:0a:70:35:f6:82:dc:dc:24:55:
ab:23:27:20:ca:51:da:14:31:0c:82:21:70:a6:e6:ab:b7:da:
95:67:f5:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Ce0NntOz6GctDCdxjcgcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YTNkMDlkMmI0NTYxMjVhMTVkNTNmNTUyMDkyNWY0ZmJm
NjE3MjgwHhcNMjYwMzI5MTAwMDQ0WhcNMjYwMzMwMTAwMDQ0WjAzMTEwLwYDVQQD
EyhlYzA4NmJmOWFhZTJhMTEwYWI2YzZkNWE4YzVlNDRhYTA2NjFjZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gQu9tIXPk2eeQbsFAr1aPkJJUHo
BdRsD2+fpwJO0aHL3OXw2bEKo73BUaLzFgGuoLCb524dCPo5WOWhUucoCOPXLd+a
/K2yV30ov8GnJ4QZeOOeVZGeKhSxpQk778QXmaiAylIUmljgwUJ2ox9MrFstIRzY
zWTlt9qRb0uJWOTSJHlQFOgfOqe8ETegE3dhrkCzQlvbpv5uY1U3wTFSNkDoYNoQ
UXAEEdqZqXYc+PxCWAuic5VRs+qWLnCNj0IlKQZVmUCY0uc9+akNO4ajyzwolu06
X0S7hgaY3jAItvV/1tBhonEyMZTie9/kvd5h85ei/6HcEb3YekRlVkD8SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwIa/mq4qEQq2xtWoxeRKoGYc1xMB8GA1UdIwQY
MBaAFJij0J0rRWEloV1T9VIJJfT79hcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lN2IzMDQtZTc3OS00MjFkLWIwYTYt
MDQzMjBiMWZjMjI3LzEvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lN2IzMDQtZTc3OS00MjFkLWIwYTYtMDQzMjBiMWZjMjI3
LzEvbUtQUW5TdEZZU1doWFZQMVVna2w5UHYyRnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvhjlmX8
DBb74YpnlrJQgdRjD4ea3dEiUZ7EzwaaEvlUoHveBsNz9UDRiDTlkvCMbYPSnRVc
Q49wAnRHr8jJdww+IB8hxG7poE0SSiV6yH8bNdtTHEQ8FBbHeG+3S44Lp69FGmDq
h47uw1vg/3JV9wfD+QiZbPQFW5qUHgkDype7Zg7f4e+o5S330BuORcH+BiBZe1vW
JARcbGwChp0dIaNSIevQ7MnhijeOp1hb87mV0cj2iZYrPXRqsNj7ncDZFiV8VubG
OL+K4c/yVBBDLkrmYETpb1TXwjFIFBW623n9CnA19oLc3CRVqyMnIMpR2hQxDIIh
cKbmq7falWf1Xg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:19 2026 by rpki-client