Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: aRciDhsFKcnvPXPICimt+/tNeY0PMqNtPpCFh3JCGaE=
Subject key identifier: 5E:5C:56:FE:9C:E1:E0:7A:67:A1:C4:D8:0D:96:58:81:29:E5:CA:C8
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 01A0CF3605923EFE7D14E1987F386C86C08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 1673
Signing time: Wed 23 Sep 2026 17:00:19 +0000
Manifest this update: Wed 23 Sep 2026 17:00:19 +0000
Manifest next update: Thu 24 Sep 2026 17:00:19 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: GFQbB2oTphq+4pLtc28vWoFpnkZwDgmWdHvH4om6Xo4=)
2: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (hash: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo=)
3: tH1Bo7evq-tTidCvwen9559FhFc.roa (hash: 57Hw84SssQf/NBx/FR+pqq4YLkW702V9wsHdAb14cwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:05:92:3e:fe:7d:14:e1:98:7f:38:6c:86:c0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Sep 23 17:00:19 2026 GMT
Not After : Sep 24 17:00:19 2026 GMT
Subject: CN=5e5c56fe9ce1e07a67a1c4d80d96588129e5cac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:99:8a:38:9f:eb:b7:6d:7a:fa:e7:48:ee:
a4:d4:67:41:c1:56:d2:86:fb:73:bb:45:ab:e8:8a:
af:93:07:44:c1:4c:e8:fe:eb:39:6d:f1:6c:76:9b:
f6:d1:75:8d:71:51:d6:e3:93:80:a9:3f:70:f2:1c:
96:46:ec:a3:64:49:e7:41:7a:e4:79:f7:a2:cf:de:
d8:0a:b3:35:87:80:d2:18:75:69:aa:70:63:1f:a3:
56:a9:0f:f2:92:03:0d:1a:1a:07:b1:30:ba:26:6d:
94:4e:06:cf:e1:31:16:0f:2f:fa:89:33:18:9f:9b:
42:5a:a1:cd:7f:23:86:c1:e0:2a:58:91:e0:81:36:
78:d5:05:63:63:98:09:4e:89:47:5e:a3:d3:cd:ac:
ab:c2:c0:9d:04:f7:09:4d:13:29:2d:07:61:d1:26:
c2:21:26:72:f1:ee:d4:ff:10:c7:86:24:fe:f2:90:
f3:15:fc:5e:5c:e3:c3:9c:ae:2b:c5:1a:ff:6b:14:
e2:2a:f1:6d:9a:1f:29:be:40:31:12:2b:45:58:fc:
c5:a9:95:ae:5d:62:ab:ee:ab:23:72:f8:87:d8:99:
c9:e8:4d:fc:c5:3f:42:ac:c2:de:86:7f:2e:77:8c:
02:94:aa:f6:9e:86:33:f2:c9:03:d3:5c:90:d6:cc:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5C:56:FE:9C:E1:E0:7A:67:A1:C4:D8:0D:96:58:81:29:E5:CA:C8
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c4:ef:a0:ee:80:f9:ce:d4:06:c4:bc:4b:e5:cd:83:5a:31:
59:b1:47:0d:18:87:52:58:d1:d0:4d:09:2a:3d:ee:91:db:66:
69:bc:4f:bf:8e:e0:d3:8e:d9:9f:98:4b:07:fb:1d:c0:ec:59:
b2:f9:85:a1:46:50:97:e3:e4:31:c0:a6:de:fa:5a:5e:0b:6b:
b2:ad:bd:5d:e0:b9:e3:ee:ba:01:d8:5a:78:b5:d1:a9:e0:2f:
e9:f0:bb:3b:4c:52:1f:67:5c:66:71:a4:9a:24:67:78:44:7e:
1d:8d:53:1a:d3:0b:9f:bf:1b:54:c0:c8:1a:e0:cb:38:28:c6:
77:a9:9f:f6:50:a0:16:6d:e0:70:fc:6b:02:03:79:37:da:88:
0e:8a:5f:83:94:63:75:14:ae:63:b2:5d:e6:b1:53:25:e5:74:
03:33:6c:ad:f0:11:2f:4d:3f:b9:7b:9c:89:c8:e5:e3:db:4e:
ca:8c:a4:96:fe:03:d2:87:ff:c9:08:b3:93:aa:f5:01:e5:1d:
eb:b2:71:d8:ed:97:d7:3c:34:fc:a3:e2:aa:67:d7:c5:f8:01:
84:76:5e:25:62:af:71:f4:e7:f0:81:98:58:ab:0e:c5:9e:54:
59:9c:11:ca:df:7d:0d:50:ed:c3:4b:c5:fe:5f:00:a0:ad:28:
2d:2d:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:32:15 2026 by rpki-client