Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: oBgWeUa3XSKfpkVsRYRXr2OZMbgdn13WDTMfscg9qmc=
Subject key identifier: 69:73:B2:D8:BD:FA:62:78:3B:9C:95:6C:17:52:4C:02:86:4A:20:40
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 019F90FEEBDAAC8BDCDB7E35FF11C57C8C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 15CE
Signing time: Thu 23 Jul 2026 22:00:53 +0000
Manifest this update: Thu 23 Jul 2026 22:00:53 +0000
Manifest next update: Fri 24 Jul 2026 22:00:53 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: 3bWCpFkwSoS/fG5VqvpB7tfq/GKQehsM4DGV1MkPtes=)
2: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (hash: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:eb:da:ac:8b:dc:db:7e:35:ff:11:c5:7c:8c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Jul 23 22:00:53 2026 GMT
Not After : Jul 24 22:00:53 2026 GMT
Subject: CN=6973b2d8bdfa62783b9c956c17524c02864a2040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:e2:ec:ae:c8:db:4e:ad:7d:82:c6:e1:7a:
bd:f4:b9:3d:ce:7e:ee:4c:8f:41:ce:b8:4c:7c:e0:
a6:13:1b:5a:96:cf:32:18:90:93:77:f8:e9:45:78:
7e:e6:d9:62:67:ad:62:49:62:90:d9:d6:fc:68:dd:
ae:7e:e4:4c:e2:bd:ba:39:be:91:3c:25:f3:0a:7f:
26:6c:10:c0:5e:60:9f:42:f0:59:32:41:8c:49:c5:
ba:2f:b2:79:4a:ee:60:03:2a:0a:7e:78:2a:98:d1:
50:49:1e:8d:c3:51:e1:4d:75:63:bf:fc:9a:89:f0:
46:cc:7c:9e:9b:2f:a6:72:ce:ae:d2:90:3d:cb:09:
db:df:24:00:c8:35:46:96:b4:42:94:06:5e:e5:dc:
0f:fa:58:97:ff:d7:64:7e:8b:ed:b5:13:be:9a:7f:
3a:ee:dd:ed:fe:0e:20:32:bd:bc:c2:9d:4f:68:23:
ad:c6:31:4f:c1:40:9a:8f:74:9c:4a:63:4a:87:50:
25:05:5b:87:32:d5:e6:c1:26:65:81:5f:1f:51:6f:
5e:f2:69:16:40:45:c3:0d:73:ef:de:2a:32:b4:e0:
f2:b8:ba:17:0e:2d:de:85:24:ff:ae:b4:23:d0:4c:
e6:2a:37:ea:ce:fc:cb:03:34:e4:65:c3:cc:b9:c8:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:73:B2:D8:BD:FA:62:78:3B:9C:95:6C:17:52:4C:02:86:4A:20:40
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:25:05:2d:2e:cf:60:62:31:3d:8b:0e:db:93:9a:17:c7:9c:
a4:f1:51:6d:fe:fd:b4:b8:c4:48:82:7d:71:19:88:af:4c:9c:
33:5d:0a:7b:b8:a4:d7:e3:0b:56:3a:e3:e7:2b:c1:8e:f2:f0:
f8:c7:ae:3e:6b:60:c2:cb:82:af:12:4f:6e:f4:38:6e:f0:8b:
6e:9f:61:0a:5a:50:a2:c3:63:94:cb:4d:0b:d9:68:85:27:45:
5d:d9:36:7b:58:48:50:0b:cf:93:e0:1d:41:8b:3f:8e:07:8a:
43:28:25:75:8f:fb:b3:8b:3a:ce:e7:8a:46:4c:29:84:6f:7e:
0f:9f:5c:01:bb:90:a5:6d:bc:a0:69:80:61:e6:6a:42:50:00:
62:ec:b3:91:fe:6d:26:2f:f4:3d:ea:f8:1b:30:47:7c:f5:05:
e1:4b:d3:95:65:a2:c7:7f:cb:e2:cb:e1:b2:a4:b5:93:2b:e6:
06:16:c9:3d:37:71:3f:fd:46:18:d0:c4:70:72:bf:46:da:f2:
34:e4:d4:d7:ad:eb:df:1a:82:de:56:1a:a9:6b:16:9c:64:56:
f4:e7:53:4f:02:d7:33:37:a5:e0:3b:96:ad:25:cc:60:51:d8:
c6:3f:5f:3f:bc:87:5e:cb:d9:03:0b:ca:8c:fb:13:8c:56:a0:
85:93:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:17 2026 by rpki-client