Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: 62eOS3p1qt/KgNfJnXPdfPeQtXApDiA/bLmquIXAXOo=
Subject key identifier: E5:D3:D1:96:EF:CB:CD:55:2D:DC:9D:A8:BF:C7:F8:75:93:93:E5:48
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 019D28F31D32D95F1B1A0C008AC98CC457B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 148F
Signing time: Thu 26 Mar 2026 07:01:54 +0000
Manifest this update: Thu 26 Mar 2026 07:01:54 +0000
Manifest next update: Fri 27 Mar 2026 07:01:54 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: VPs1pZ4u6xkwvRUuwyRDwS2szCJRiNYU1EVzsawniMs=)
2: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (hash: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:1d:32:d9:5f:1b:1a:0c:00:8a:c9:8c:c4:57:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Mar 26 07:01:54 2026 GMT
Not After : Mar 27 07:01:54 2026 GMT
Subject: CN=e5d3d196efcbcd552ddc9da8bfc7f8759393e548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:d7:dd:b2:cf:dd:52:e4:70:d6:11:d7:2a:
2a:19:f8:59:3f:5a:f1:cf:00:c9:b9:11:9c:86:1e:
16:51:66:65:37:b3:e7:f7:e8:79:c4:88:00:cd:27:
16:89:c7:25:d7:ec:88:62:c4:9b:ee:f8:f6:8e:77:
28:05:c4:cf:fa:30:17:7d:7e:02:af:8e:ad:04:4a:
b5:f4:7f:1b:1e:8e:1b:f1:33:34:f9:cd:b3:42:b7:
84:ff:ad:a4:f0:a4:1b:2f:2d:e1:c3:c4:ff:ac:0e:
92:e7:00:f3:15:68:81:42:ce:c9:75:28:67:51:b2:
92:a1:65:c3:90:3e:24:7f:80:62:aa:2b:63:bc:61:
48:56:37:a8:07:4d:4c:7c:4e:3f:da:51:c4:7a:d4:
c1:60:e8:aa:20:49:5c:cd:d4:f4:42:0d:d9:a8:44:
e2:9d:0d:07:2b:62:36:24:b9:c5:aa:d7:92:ed:76:
52:a0:2e:31:b2:62:f8:3e:0a:a5:de:3c:e7:cc:75:
67:82:d4:a8:0d:36:e8:6b:8a:ce:ea:5e:be:68:1c:
7b:7c:c8:6b:6c:50:ae:dd:b3:e0:02:8c:a3:72:53:
ea:6c:10:a3:cd:ce:c6:62:3e:27:bc:0b:6d:94:1a:
ae:1b:68:8c:41:fe:19:6f:4a:e6:fb:82:72:ce:d0:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D3:D1:96:EF:CB:CD:55:2D:DC:9D:A8:BF:C7:F8:75:93:93:E5:48
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2e:ea:61:1e:14:e4:37:7b:04:dd:29:70:1b:29:c2:d5:c9:
c5:fb:3e:f1:90:d8:56:aa:b0:95:d5:07:7b:b7:09:11:90:ac:
67:ff:35:0e:23:ec:b9:10:e6:68:ca:42:7c:0b:6a:49:f7:20:
59:26:40:9b:35:ce:fa:1c:8e:bd:52:ac:6d:c3:a8:5c:c6:6e:
14:32:f0:0a:26:43:8b:33:d0:06:98:98:8f:db:da:d3:9c:a6:
f3:99:ab:f6:e1:cb:b9:d1:13:67:00:43:fc:e1:af:58:a9:96:
26:61:7c:b3:f7:6b:37:04:b7:7e:e1:d0:53:87:90:4b:ce:1c:
c0:80:5d:be:3a:7e:cd:9a:d9:5e:b1:f8:ba:31:f0:41:c6:4f:
f2:b5:49:5a:9f:ef:f6:c1:2f:5b:46:8f:6b:47:e5:38:a4:e1:
93:e2:fe:f8:ba:4e:0e:19:b6:03:60:31:04:ed:e2:2a:41:9e:
62:8f:77:a6:6e:41:70:6e:6f:24:cc:9b:44:cd:1c:2c:b5:6a:
bd:71:9b:f3:46:83:ea:ac:a5:3e:a3:2a:ed:4b:93:54:30:a1:
44:bb:f0:67:6d:e0:f1:ae:95:57:8b:4a:17:ed:4b:25:ac:2f:
c6:72:98:a8:b9:f5:8e:07:72:a0:d7:53:80:a8:d7:14:d8:23:
cf:b3:5a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:11 2026 by rpki-client