Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
File: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft (raw, json)
Hash identifier: mPS7S6UcJTBg6EAbVhg9r4K+o1wMGqk9xDwWQwoG1Ho=
Subject key identifier: 23:88:FB:96:89:BB:69:0E:8E:97:64:AE:7E:EF:B4:2B:94:1B:5D:70
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Certificate issuer: /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial: 019E2A02403C4E3BF58D179FB3EC1E5AECFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
Manifest number: 0152
Signing time: Fri 15 May 2026 05:00:50 +0000
Manifest this update: Fri 15 May 2026 05:00:50 +0000
Manifest next update: Sat 16 May 2026 05:00:50 +0000
Files and hashes: 1: HAvcKkRLr_-FXcfu2XV7UUaU5F8.asa (hash: Ern+cmfZwFsU2HhkvPFkDC0xdjwIG4SYe7YBQ5RzsPs=)
2: iS_RjiJ5hKPzS36a9K6GI2jCpSc.roa (hash: oKmLMmS60dhNLyeJppUGpS47iPqdNIjtFfF23b9zJgg=)
3: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl (hash: DLI/FDtr5YmuWotWEaFBaWoXnCk3x5cC7AAoOBnC9i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:02:40:3c:4e:3b:f5:8d:17:9f:b3:ec:1e:5a:ec:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Validity
Not Before: May 15 05:00:50 2026 GMT
Not After : May 16 05:00:50 2026 GMT
Subject: CN=2388fb9689bb690e8e9764ae7eefb42b941b5d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:ca:97:2d:71:c6:87:3d:8e:f8:65:23:0e:
04:83:4e:38:b4:21:86:88:ce:ff:09:e2:45:4e:ee:
62:cc:4a:79:ce:ce:fe:2a:03:55:64:ae:ed:ec:62:
89:de:65:f6:f3:6b:7d:ba:68:83:0b:5b:73:f3:30:
c1:46:49:1c:71:e8:bb:26:23:f1:32:70:55:da:24:
93:cb:a1:dc:e9:9c:ab:52:0c:c1:ac:3e:ae:22:54:
34:28:aa:25:9e:78:95:f8:8a:6c:d1:4c:95:1b:d3:
ab:2e:65:32:89:df:f9:76:ba:87:de:d6:5b:fc:5d:
e5:c1:2a:c1:b3:7d:ee:78:66:ea:f6:1d:70:b4:1e:
fd:b0:31:92:49:79:73:59:2d:90:b2:67:62:0f:32:
c2:d6:4c:7c:6a:ea:9f:8c:5d:ef:11:ed:3a:98:9b:
a2:15:61:a4:77:8f:21:84:7a:f8:3d:e5:bf:02:b5:
4c:05:d7:3b:73:18:10:41:ea:74:9e:3e:15:e3:a5:
c0:11:83:4e:55:29:fb:a5:2f:89:d3:c3:bb:6e:49:
d9:06:27:91:fa:4c:0a:ea:a8:b0:e2:38:6e:ab:89:
ad:1a:0e:4d:21:a9:d5:aa:1b:24:61:ef:cb:91:ee:
8f:7f:51:b6:e4:7a:96:d5:ae:4b:b9:ca:0c:88:46:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:88:FB:96:89:BB:69:0E:8E:97:64:AE:7E:EF:B4:2B:94:1B:5D:70
X509v3 Authority Key Identifier:
keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:88:f5:96:2d:1a:95:ab:62:35:cd:60:d2:c6:fb:99:fa:80:
b7:71:23:b9:38:fe:20:27:d2:2c:f7:82:08:17:33:89:81:54:
2a:f1:2f:68:35:5a:48:e7:5b:4e:19:ea:e0:71:f7:5a:5a:0c:
e5:02:ba:22:c8:65:95:03:79:9d:e5:21:3b:a0:f7:57:26:0c:
af:5b:c5:e2:28:c6:6b:ff:7a:3f:9f:04:7b:d4:e6:6f:74:bc:
8d:60:3a:fa:9c:7a:8d:f7:ac:91:6c:fb:2c:57:ec:a3:46:c4:
28:4a:1a:25:b3:71:02:98:0d:45:01:bf:ad:5f:7c:e2:db:a7:
13:6b:69:94:88:2e:4a:c2:4d:53:b2:71:ff:36:18:95:b0:0a:
fb:67:a5:42:f3:3f:47:af:60:fb:e5:db:39:21:31:e5:bd:af:
4c:f3:60:7e:d0:97:ec:0e:5d:1f:5e:06:0d:84:d4:30:02:d1:
56:92:d8:d8:43:24:9c:09:8e:53:fe:cf:9f:cf:b5:98:11:a2:
ca:82:c9:e0:e4:9d:d5:b9:4c:c5:62:a2:a1:be:c4:5e:5d:8f:
9d:2e:4f:74:59:f7:53:cf:33:64:3f:54:80:38:33:10:78:f4:
f0:85:05:fe:b4:f4:d5:12:7e:76:08:ac:95:09:67:a3:79:6d:
91:40:b9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:56:36 2026 by rpki-client