Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: 3xIeh9/NxNbodZgv6Bf18NISf3BXyEwNX+jjKht44fU=
Subject key identifier: E3:97:EB:48:E9:43:29:80:90:41:1E:68:02:7F:43:88:78:86:1E:E7
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 019CF53BC60559AA955ABF7F95210B7A63FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 160B
Signing time: Mon 16 Mar 2026 06:01:01 +0000
Manifest this update: Mon 16 Mar 2026 06:01:01 +0000
Manifest next update: Tue 17 Mar 2026 06:01:01 +0000
Files and hashes: 1: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: tteTxcC6/GxDo86sWyaI7LJY7IVmW9Zlik8IToiEkgs=)
2: W8EXtY-krtG948bMW6fNLmFvObQ.roa (hash: /Mw8ZZAkQ7Cam52nmslN8jl5Gh3RIhYdhuibTCP4pNc=)
3: hsUdN5AH-_WZM1oy6ZaXEs1Pgkc.roa (hash: 5DMQKgnCdfv9+elfbQuigH3vAHijYLKsjKk2UMsJGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:3b:c6:05:59:aa:95:5a:bf:7f:95:21:0b:7a:63:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Mar 16 06:01:01 2026 GMT
Not After : Mar 17 06:01:01 2026 GMT
Subject: CN=e397eb48e943298090411e68027f438878861ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:d2:3d:ac:b6:6f:2b:8c:14:bf:0c:2a:f0:
56:11:1d:f7:9a:6c:c4:9a:e9:a7:42:82:95:08:3e:
9a:f1:f0:ca:af:a1:82:fd:a8:73:37:c8:f3:37:e1:
22:60:cd:03:d4:60:b8:98:5c:19:5c:a1:86:c5:59:
f9:5a:ff:06:58:aa:f7:a5:57:36:ad:fc:a3:76:25:
b2:0e:4e:a6:47:8f:7a:96:b7:8d:d6:47:a9:b9:7b:
68:29:04:25:6e:4f:19:e3:d8:1f:67:87:00:9c:7b:
77:03:ac:ee:68:ed:97:45:da:17:89:db:10:76:b3:
f2:25:96:3a:33:05:44:47:66:e2:41:3f:1a:2d:82:
54:a5:58:55:c6:9a:ac:e4:8e:21:4c:f8:f5:c7:03:
4d:53:7f:f7:8e:13:5b:b9:07:8f:0b:b1:01:de:15:
df:57:a3:92:27:0b:22:c4:56:5a:90:87:24:46:e6:
6d:6c:90:07:28:a1:94:ae:01:63:85:cc:51:88:bd:
f5:13:2a:77:ab:7c:4b:97:fa:8b:42:30:a6:ba:14:
ea:b9:98:05:8d:ff:22:66:66:db:d7:31:88:ef:50:
79:f2:1d:0d:82:df:0f:e7:a1:07:cd:3a:d5:86:34:
6d:94:b3:41:94:cd:c4:60:31:51:a9:94:74:bb:ba:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:97:EB:48:E9:43:29:80:90:41:1E:68:02:7F:43:88:78:86:1E:E7
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c3:a8:49:e5:fa:ca:9d:d7:63:15:9b:37:34:c3:2e:47:3a:
d9:45:fa:b6:41:d1:f2:40:d0:4f:b5:8c:26:66:ff:82:b1:ce:
71:33:3e:7d:57:fe:4a:58:7c:a4:36:65:71:ab:bf:6c:cf:2a:
cc:bd:88:80:1d:fd:c5:24:de:1b:e2:b1:c9:41:0c:6a:7f:98:
48:05:ad:9f:6f:0c:6d:c4:d7:88:0c:46:b2:fe:75:c9:c6:6c:
af:8f:17:f1:ba:69:82:7c:ca:78:e4:97:f5:9f:34:74:1e:9a:
33:ab:18:0e:40:6f:50:d3:79:16:28:60:42:2d:e8:44:7d:22:
72:ef:c9:8b:1f:29:35:43:24:b2:68:84:f0:bf:cd:ac:6a:f2:
d9:06:95:91:82:48:14:ed:7f:37:1c:b0:a5:d5:bf:86:28:6e:
d6:c5:46:07:b2:2a:c6:bd:66:ae:b8:03:94:22:e5:71:2b:73:
56:6f:a6:f2:1d:18:db:c2:63:bc:6f:c3:1a:91:53:2f:e9:d3:
41:db:b8:7c:8f:f6:b4:60:66:e8:d1:a0:40:6b:92:d7:2c:ae:
72:45:21:74:07:dd:3d:39:c1:04:b0:12:38:a6:02:11:26:72:
3b:7e:62:76:f4:ce:5c:1c:e6:e1:89:a7:3c:35:ad:ec:2e:bb:
70:c6:56:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz1O8YFWaqVWr9/lSELemP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNDY3OTVhZDY4YTZiYWRkNWFmY2I2YmE0NjUzZTljMDkw
ZmM4NWEwHhcNMjYwMzE2MDYwMTAxWhcNMjYwMzE3MDYwMTAxWjAzMTEwLwYDVQQD
EyhlMzk3ZWI0OGU5NDMyOTgwOTA0MTFlNjgwMjdmNDM4ODc4ODYxZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFXSPay2byuMFL8MKvBWER33mmzE
mumnQoKVCD6a8fDKr6GC/ahzN8jzN+EiYM0D1GC4mFwZXKGGxVn5Wv8GWKr3pVc2
rfyjdiWyDk6mR496lreN1kepuXtoKQQlbk8Z49gfZ4cAnHt3A6zuaO2XRdoXidsQ
drPyJZY6MwVER2biQT8aLYJUpVhVxpqs5I4hTPj1xwNNU3/3jhNbuQePC7EB3hXf
V6OSJwsixFZakIckRuZtbJAHKKGUrgFjhcxRiL31Eyp3q3xLl/qLQjCmuhTquZgF
jf8iZmbb1zGI71B58h0Ngt8P56EHzTrVhjRtlLNBlM3EYDFRqZR0u7pqAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOX60jpQymAkEEeaAJ/Q4h4hh7nMB8GA1UdIwQY
MBaAFDJGeVrWimut1a/La6RlPpwJD8haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMt
NzMwYjE3ZjA2OWFiLzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NDc5Y2EtM2RiNS00ZjYyLThlMjMtNzMwYjE3ZjA2OWFi
LzEvTWtaNVd0YUthNjNWcjh0cnBHVS1uQWtQeUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcOoSeX6
yp3XYxWbNzTDLkc62UX6tkHR8kDQT7WMJmb/grHOcTM+fVf+Slh8pDZlcau/bM8q
zL2IgB39xSTeG+KxyUEMan+YSAWtn28MbcTXiAxGsv51ycZsr48X8bppgnzKeOSX
9Z80dB6aM6sYDkBvUNN5FihgQi3oRH0icu/Jix8pNUMksmiE8L/NrGry2QaVkYJI
FO1/NxywpdW/hihu1sVGB7Iqxr1mrrgDlCLlcStzVm+m8h0Y28JjvG/DGpFTL+nT
Qdu4fI/2tGBm6NGgQGuS1yyuckUhdAfdPTnBBLASOKYCESZyO35idvTOXBzm4Ymn
PDWt7C67cMZWrA==
-----END CERTIFICATE-----
Generated at Mon Mar 16 08:19:11 2026 by rpki-client