Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: lX4Sz3vBedpYX1sRl5MSGjPpOTTFrUuWTa6C7gvekbA=
Subject key identifier: ED:4E:29:B5:1A:74:A6:71:7E:F2:27:ED:B2:3F:50:0F:3C:36:F8:00
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 01A001A62E36C10C0FF3A033BB17E3A9BA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 172C
Signing time: Fri 14 Aug 2026 19:01:03 +0000
Manifest this update: Fri 14 Aug 2026 19:01:03 +0000
Manifest next update: Sat 15 Aug 2026 19:01:03 +0000
Files and hashes: 1: 3-jw2Mn4GAjthDEPkukJUUAA8ms.asa (hash: OVjmmAruwPeNeXIeJ+cgYwQWAPOrHRgmi+6ExlA9DiQ=)
2: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=)
3: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: rfziBpjOHMgjs4DQi5hMVaafqbKAAKS4k+p91NU6pOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:2e:36:c1:0c:0f:f3:a0:33:bb:17:e3:a9:ba:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Aug 14 19:01:03 2026 GMT
Not After : Aug 15 19:01:03 2026 GMT
Subject: CN=ed4e29b51a74a6717ef227edb23f500f3c36f800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:74:e0:69:1d:35:c3:8f:15:e9:c4:96:83:
23:c8:83:dd:d5:22:6b:0d:bd:e6:a4:50:4a:45:40:
8d:01:61:1a:fa:12:10:74:81:55:2b:78:19:a6:ee:
38:fa:4d:a2:cb:88:32:79:e6:f2:67:c5:da:e7:fc:
22:df:a9:b1:ad:45:c0:6f:bd:c4:64:99:e5:c8:8d:
10:06:31:40:74:de:76:7c:c7:73:0e:d2:b6:89:09:
4a:b3:f4:83:8f:c0:38:b7:62:d2:a8:6e:f4:66:67:
67:9b:cf:cf:17:77:79:dc:f8:19:f2:0c:39:dd:21:
ba:6d:c5:f1:21:51:89:51:78:ae:6a:f6:e9:8f:b6:
41:69:fc:81:a0:b0:aa:40:d3:23:5c:7d:03:0d:b8:
a6:16:b5:31:f6:fe:af:88:b5:c0:1e:78:6b:3b:f0:
a0:cb:c2:3c:12:10:64:97:2e:cc:a9:55:13:19:8a:
bf:c1:b4:f2:56:3c:59:a1:e9:fd:38:1d:ee:b4:2e:
ab:3c:88:29:b0:1e:68:42:79:e2:a1:6a:5c:e2:26:
d6:e7:e4:65:0a:64:00:11:82:48:93:20:63:12:25:
7d:fb:a2:86:cf:c5:59:ef:b8:01:8f:7e:e9:e6:12:
be:b6:8e:d8:f5:86:10:52:c0:15:f7:db:16:2f:d5:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4E:29:B5:1A:74:A6:71:7E:F2:27:ED:B2:3F:50:0F:3C:36:F8:00
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:19:e9:3e:d0:4f:af:0f:36:1c:3f:d2:9e:ab:14:cc:d5:91:
4f:35:c3:c7:9f:d8:55:d8:5d:f1:d3:88:32:b4:75:62:a6:c0:
c5:fc:01:fe:3a:d0:95:66:15:88:9d:61:b4:bf:19:fd:58:2f:
8f:d6:d3:07:0b:67:fa:5b:dc:f3:b6:3b:65:a5:4d:58:fc:e2:
18:6e:67:9d:fa:12:c8:b3:dc:7d:11:b4:63:cb:2d:68:a6:8d:
86:ee:3f:5e:b5:b5:94:9e:d3:ec:3c:68:cc:5f:50:fb:f2:56:
2d:77:ef:fd:89:c0:1c:57:2d:38:be:af:ea:a6:44:c0:2f:b5:
b5:3f:a7:5e:23:bb:fb:6f:af:10:7d:4e:0d:eb:34:fa:70:05:
d1:6b:46:21:27:12:3d:ff:3e:a2:36:ec:88:13:26:26:64:bb:
1f:e5:13:34:56:b7:ca:96:40:1b:87:c3:96:2a:f2:ac:b4:c0:
33:04:83:58:0f:0c:c1:ad:b8:12:e3:50:d9:ec:4a:40:41:66:
0d:65:0e:9b:91:91:51:11:44:41:35:a4:be:fa:28:d1:4d:9f:
f8:66:71:06:91:4b:7e:d7:57:c2:c5:f1:91:5d:5f:bf:fd:70:
1c:ed:7b:fc:08:de:a5:f3:1e:4d:34:5d:58:4d:39:ae:0d:0a:
f9:6c:ed:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpi42wQwP86AzuxfjqbpwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2E5Mjc0MjYwODlmM2I4YzUwMDA4MzIyMWE3OThhOWQy
ZTg0NjYwHhcNMjYwODE0MTkwMTAzWhcNMjYwODE1MTkwMTAzWjAzMTEwLwYDVQQD
EyhlZDRlMjliNTFhNzRhNjcxN2VmMjI3ZWRiMjNmNTAwZjNjMzZmODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+x04GkdNcOPFenEloMjyIPd1SJr
Db3mpFBKRUCNAWEa+hIQdIFVK3gZpu44+k2iy4gyeebyZ8Xa5/wi36mxrUXAb73E
ZJnlyI0QBjFAdN52fMdzDtK2iQlKs/SDj8A4t2LSqG70Zmdnm8/PF3d53PgZ8gw5
3SG6bcXxIVGJUXiuavbpj7ZBafyBoLCqQNMjXH0DDbimFrUx9v6viLXAHnhrO/Cg
y8I8EhBkly7MqVUTGYq/wbTyVjxZoen9OB3utC6rPIgpsB5oQnnioWpc4ibW5+Rl
CmQAEYJIkyBjEiV9+6KGz8VZ77gBj37p5hK+to7Y9YYQUsAV99sWL9XI1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1OKbUadKZxfvIn7bI/UA88NvgAMB8GA1UdIwQY
MBaAFDF6knQmCJ87jFAAgyIaeYqdLoRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5Njgt
NDY0YjhmM2I4MzYzLzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5NjgtNDY0YjhmM2I4MzYz
LzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARnpPtBP
rw82HD/SnqsUzNWRTzXDx5/YVdhd8dOIMrR1YqbAxfwB/jrQlWYViJ1htL8Z/Vgv
j9bTBwtn+lvc87Y7ZaVNWPziGG5nnfoSyLPcfRG0Y8staKaNhu4/XrW1lJ7T7Dxo
zF9Q+/JWLXfv/YnAHFctOL6v6qZEwC+1tT+nXiO7+2+vEH1ODes0+nAF0WtGIScS
Pf8+ojbsiBMmJmS7H+UTNFa3ypZAG4fDliryrLTAMwSDWA8Mwa24EuNQ2exKQEFm
DWUOm5GRURFEQTWkvvoo0U2f+GZxBpFLftdXwsXxkV1fv/1wHO17/AjepfMeTTRd
WE05rg0K+Wzt2Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:24 2026 by rpki-client