Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: OezX4ODnoswXmAKwXFIJCv2/m5xktLTUwNgE2FGJ5cM=
Subject key identifier: 73:7F:9F:54:7B:64:D2:BC:6A:57:DD:30:FE:59:BC:BA:EA:4F:22:04
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 019E1C4766BDA141B96EE31052A18DF5EA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 150D
Signing time: Tue 12 May 2026 13:01:41 +0000
Manifest this update: Tue 12 May 2026 13:01:41 +0000
Manifest next update: Wed 13 May 2026 13:01:41 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: ORqI1tHHOKxwHWu0zhN6ej7EK3lVVpuaA6JGLamjhW4=)
2: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (hash: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:66:bd:a1:41:b9:6e:e3:10:52:a1:8d:f5:ea:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: May 12 13:01:41 2026 GMT
Not After : May 13 13:01:41 2026 GMT
Subject: CN=737f9f547b64d2bc6a57dd30fe59bcbaea4f2204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:fa:95:e4:4b:b1:ec:f9:db:b9:a6:20:eb:
1e:53:62:04:1b:8f:21:1a:06:b9:f2:59:0e:6a:5f:
4f:b3:88:fe:87:e1:bf:a0:36:3c:b6:96:c3:6d:e4:
99:c6:81:58:31:f5:11:96:c5:54:05:d4:c5:34:7e:
18:a1:f0:bd:13:2b:b0:38:92:b9:dd:fc:17:e1:36:
40:c3:19:19:0a:ce:11:e3:13:1a:d5:b2:0c:24:dc:
5d:53:7e:fb:f7:2e:b5:ee:92:7d:79:dc:bd:75:e9:
37:16:3c:2c:8f:9c:b1:2d:ea:5e:e5:cb:a7:45:66:
b9:ad:60:a2:da:62:77:11:7c:a9:1b:2f:08:0c:4d:
18:df:02:95:71:bb:c4:16:3b:ce:63:47:26:2e:a5:
c4:32:78:a6:ef:11:ad:99:40:3a:41:04:ff:d5:71:
94:74:1e:a8:f6:4a:3e:2d:12:af:26:de:60:fc:5d:
09:52:73:6b:80:15:28:00:bf:57:38:be:90:94:0e:
dc:7a:52:c4:74:e6:80:0f:a0:1b:0e:81:7d:5d:ef:
22:9d:4d:e1:f7:db:89:c3:4f:e9:d3:4b:7f:c9:4f:
8c:0c:49:c8:70:d9:e7:89:a3:4d:a5:35:56:48:f3:
88:b4:33:da:ee:ef:0d:3f:8a:53:b3:9f:85:4c:6d:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7F:9F:54:7B:64:D2:BC:6A:57:DD:30:FE:59:BC:BA:EA:4F:22:04
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f4:74:be:37:1d:08:c3:7e:07:11:1a:3c:0d:9a:c1:84:e0:
7b:22:6f:f6:0b:33:2c:fd:79:74:e1:79:97:e3:83:97:e1:cf:
0d:ce:51:2b:7e:8d:d7:93:e4:e4:0f:cd:7c:af:24:10:d9:94:
e2:69:cd:dc:5b:ff:28:16:e5:ff:01:71:10:99:ac:59:4b:28:
a2:b1:55:e6:22:71:8e:d5:b0:af:1c:94:85:17:e0:05:2a:b6:
17:c9:4a:15:81:4a:2b:62:fb:21:44:cd:23:5c:48:aa:23:c8:
5c:aa:7a:37:15:69:0b:83:93:d2:a0:a6:f7:e7:a5:19:d7:0c:
a5:68:87:17:19:47:fb:b9:fc:f4:c2:b5:27:33:5e:73:b8:70:
f1:2a:63:a7:ae:2e:79:4a:3d:77:52:a3:76:5e:64:5f:8a:aa:
d0:37:ea:f2:2f:4e:34:70:ae:ee:06:c5:96:1c:cc:29:45:39:
d4:ee:2e:f7:1b:43:ef:c2:05:94:ad:26:a7:8e:2b:96:77:18:
26:4f:86:a4:b9:08:f7:c9:be:f6:3a:b9:68:9a:10:6a:1d:58:
f0:98:01:f9:90:20:f3:4b:de:d2:2b:a1:ea:fb:3e:b2:e5:b0:
33:00:78:65:03:30:fe:a6:67:04:1f:39:a4:4c:63:78:ca:02:
30:b5:5e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:43 2026 by rpki-client