Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: UIwxWgz5a2luxeTQzoFIJgcnJJb8SaMecW7BsgDkf10=
Subject key identifier: 71:A8:E9:09:20:8E:05:13:9C:BF:CD:CD:46:F6:70:31:60:A1:52:82
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 019FF458A46244ED42C78B14BDA77D9A251C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 1951
Signing time: Wed 12 Aug 2026 05:01:17 +0000
Manifest this update: Wed 12 Aug 2026 05:01:17 +0000
Manifest next update: Thu 13 Aug 2026 05:01:17 +0000
Files and hashes: 1: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: rm/SdOVEvC6F+n6oWK2TEN5ypSX2HONGgtl644lmGso=)
2: jO9rf4-cCHZRF2KoiLta2NyAQgU.roa (hash: UwmPs36c2ef9tHjcukHaPVItxdtDMmpbGOtpHRoCvf0=)
3: xn4i-fiHxOz0VUsB8YhWKLghbLs.roa (hash: Ptihx8qc04YVHI7Uz+aNOpCGFom4Sx5jCTJsyxvgVYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:58:a4:62:44:ed:42:c7:8b:14:bd:a7:7d:9a:25:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Aug 12 05:01:17 2026 GMT
Not After : Aug 13 05:01:17 2026 GMT
Subject: CN=71a8e909208e05139cbfcdcd46f6703160a15282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fc:99:cc:28:e4:a9:8d:bd:fa:30:69:d8:38:
87:d8:79:5d:56:0c:a6:34:c1:74:a7:73:18:c8:d0:
56:25:d4:69:72:8b:9b:44:45:68:9c:dd:5c:fa:63:
bd:17:58:7f:dc:6a:10:4d:29:d0:e7:a5:19:94:82:
ff:71:57:c4:19:46:00:39:8e:6c:cb:e4:ab:49:bd:
f3:a1:9c:c7:77:e8:f4:38:96:62:a4:fc:2c:91:bb:
12:1e:90:c3:3a:a0:26:62:30:fe:75:60:7b:71:10:
0e:a4:1f:a4:d7:3b:24:36:12:bc:ba:c7:41:fd:94:
76:54:d9:40:88:bf:da:5a:ca:d4:30:09:de:59:8d:
e0:c4:56:fb:72:82:bf:cb:9d:84:73:7d:07:5b:1a:
a1:cf:5d:28:09:54:22:ea:4e:c7:13:15:f8:49:23:
d7:d0:ee:77:ba:a4:8a:02:c7:65:94:d0:59:f4:9c:
b8:d4:7c:de:e1:64:0e:3a:78:0e:1f:38:ca:df:33:
f2:c8:64:a1:a4:55:8d:6d:32:1d:ec:b5:23:6a:97:
54:aa:06:b2:bc:5c:19:59:cb:80:a4:a8:7f:d7:ff:
33:17:69:28:9b:fb:13:3f:a0:f4:9c:bb:8f:a5:f2:
39:ac:12:6b:25:8c:40:04:2f:72:d4:d0:ce:e8:46:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A8:E9:09:20:8E:05:13:9C:BF:CD:CD:46:F6:70:31:60:A1:52:82
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ca:3c:73:92:54:18:a0:f6:ec:19:7c:d4:bf:46:c8:d2:53:
c5:c0:85:18:27:7a:6e:a6:7d:33:b4:4d:be:65:06:ba:61:c6:
44:78:36:b0:c5:c8:75:a5:38:90:98:bd:8c:c9:d4:97:2b:51:
d8:b6:37:a7:ce:73:33:de:52:7f:6d:44:2c:55:51:66:37:31:
f2:93:90:e7:72:cb:d6:ae:a1:78:ba:38:db:29:d3:ff:17:37:
a6:b0:31:45:f3:4d:94:71:40:24:8b:1a:36:dd:93:43:22:eb:
46:35:8d:ed:a4:ec:44:39:48:6f:4c:b3:22:d7:f9:9c:c7:f8:
8f:d2:69:79:9b:b2:6a:55:f7:fb:24:38:77:22:00:1c:43:37:
6f:0b:75:5b:f7:06:3a:e1:9c:69:ac:2a:7f:45:28:9d:20:c3:
69:ef:82:01:46:c8:1e:08:86:6b:77:f2:87:b5:5b:e8:1f:7d:
76:f1:14:2d:2b:fb:ed:fb:5a:33:bc:37:fc:0e:26:41:34:be:
c9:57:ea:c7:1a:23:d0:3b:ba:a9:eb:55:69:f5:6c:d2:20:a5:
9a:56:7c:26:bd:2b:a7:fc:87:da:51:d2:ff:7f:e2:36:60:41:
3f:d9:d0:6f:42:b2:41:4b:33:97:d5:f9:9a:05:65:d7:9a:dd:
98:6c:38:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/0WKRiRO1Cx4sUvad9miUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODllMGI4YTJmZjgyYTIzYjQ4ZGQ2ZTZlNzYxNzZiNGNk
MzgzMmUwHhcNMjYwODEyMDUwMTE3WhcNMjYwODEzMDUwMTE3WjAzMTEwLwYDVQQD
Eyg3MWE4ZTkwOTIwOGUwNTEzOWNiZmNkY2Q0NmY2NzAzMTYwYTE1MjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fyZzCjkqY29+jBp2DiH2HldVgym
NMF0p3MYyNBWJdRpcoubREVonN1c+mO9F1h/3GoQTSnQ56UZlIL/cVfEGUYAOY5s
y+SrSb3zoZzHd+j0OJZipPwskbsSHpDDOqAmYjD+dWB7cRAOpB+k1zskNhK8usdB
/ZR2VNlAiL/aWsrUMAneWY3gxFb7coK/y52Ec30HWxqhz10oCVQi6k7HExX4SSPX
0O53uqSKAsdllNBZ9Jy41Hze4WQOOngOHzjK3zPyyGShpFWNbTId7LUjapdUqgay
vFwZWcuApKh/1/8zF2kom/sTP6D0nLuPpfI5rBJrJYxABC9y1NDO6Eao2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGo6QkgjgUTnL/NzUb2cDFgoVKCMB8GA1UdIwQY
MBaAFDOJ4Lii/4KiO0jdbm52F2tM04MuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgt
MjMzN2E4MWIxZjc4LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgtMjMzN2E4MWIxZjc4
LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANco8c5JU
GKD27Bl81L9GyNJTxcCFGCd6bqZ9M7RNvmUGumHGRHg2sMXIdaU4kJi9jMnUlytR
2LY3p85zM95Sf21ELFVRZjcx8pOQ53LL1q6heLo42ynT/xc3prAxRfNNlHFAJIsa
Nt2TQyLrRjWN7aTsRDlIb0yzItf5nMf4j9JpeZuyalX3+yQ4dyIAHEM3bwt1W/cG
OuGcaawqf0UonSDDae+CAUbIHgiGa3fyh7Vb6B99dvEULSv77ftaM7w3/A4mQTS+
yVfqxxoj0Du6qetVafVs0iClmlZ8Jr0rp/yH2lHS/3/iNmBBP9nQb0KyQUszl9X5
mgVl15rdmGw4Gg==
-----END CERTIFICATE-----
Generated at Wed Aug 12 10:22:56 2026 by rpki-client