Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: VwwV8CP9X5r37Yw0S6+PbnhFORNoac6zi+sk3iJ/A+k=
Subject key identifier: AE:B9:EF:D9:DA:01:31:23:D1:32:E5:AE:0E:63:14:28:E0:97:29:8F
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 019E1F7F47B3D21451C9A9B3B94F057E8877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 147A
Signing time: Wed 13 May 2026 04:01:35 +0000
Manifest this update: Wed 13 May 2026 04:01:35 +0000
Manifest next update: Thu 14 May 2026 04:01:35 +0000
Files and hashes: 1: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (hash: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=)
2: RNEy2dNMXx3XlEamTmUhqi44jO8.roa (hash: P+axBDbVK5KvN+RHt0OXNG1w00kEnz/ND4dT/9fk2eY=)
3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: a85H/MVN4CQ0U7cK3O5KWyW4msAi3wt9DXfzVel3qTk=)
4: vZCS-cDmopO-qNxnU9jSVeCrpJg.roa (hash: ojMpU7jstaT9u+/Jymeixtegt7Gz6xXftszxg6yH2ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:47:b3:d2:14:51:c9:a9:b3:b9:4f:05:7e:88:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: May 13 04:01:35 2026 GMT
Not After : May 14 04:01:35 2026 GMT
Subject: CN=aeb9efd9da013123d132e5ae0e631428e097298f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:df:94:2a:9b:68:d9:4f:ad:23:b5:3c:fc:e5:
ce:c6:a1:37:d5:86:9d:95:d9:92:8f:4d:c5:c9:41:
d7:cd:1d:f5:ad:93:a9:b9:c4:64:72:63:68:f5:71:
f7:46:d3:df:51:5b:6d:50:f8:9f:f9:d3:d2:78:ab:
3e:de:f8:8d:53:45:57:d4:9a:7e:36:f4:58:94:3f:
ce:a5:32:42:39:c2:5e:7a:fc:40:bc:9b:6f:45:f9:
2d:5c:ba:9a:7e:1d:b6:f7:ac:03:11:0e:36:16:78:
63:3d:02:06:3e:bd:86:a6:c5:ab:da:09:b4:92:3a:
9b:7b:cf:72:d1:7e:4b:4e:05:48:f7:50:bd:f8:eb:
37:0f:ac:52:c6:74:2a:b8:5d:f9:5e:d7:ea:a6:7d:
e6:63:f1:39:20:30:aa:66:68:c0:71:5b:6a:d1:07:
0d:03:28:f5:ac:5c:45:a7:14:ca:84:09:0e:73:cf:
fb:3a:8e:fe:2d:43:16:3e:17:f4:ce:c3:ea:31:b3:
82:7d:84:0f:00:5f:5a:73:a4:04:59:2a:ff:92:06:
b8:a6:f2:99:48:8b:f8:28:d4:d5:eb:8f:4c:46:f1:
74:fe:02:ea:7e:9f:25:23:ff:5c:a6:69:c5:db:0c:
0a:67:3d:e3:4a:96:d7:42:45:0e:e7:ba:29:cb:64:
88:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:EF:D9:DA:01:31:23:D1:32:E5:AE:0E:63:14:28:E0:97:29:8F
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:38:9d:0a:19:d9:ee:e2:7e:49:e3:a0:d5:65:2a:1f:87:0a:
b6:44:91:05:89:8a:6c:1d:57:6a:f9:c6:ad:de:12:d1:14:74:
5e:86:d7:b9:98:60:c3:d6:4c:47:6e:c4:9b:44:eb:17:61:f6:
38:ce:c7:09:bf:4c:5c:82:eb:70:a1:b1:01:fb:1a:59:02:2e:
d5:c1:b2:28:5d:75:4d:a2:db:45:e6:0d:c4:57:ba:d9:7a:aa:
dc:d5:09:b6:91:3d:28:83:0e:ce:cb:0b:1b:92:86:f4:5d:2b:
bc:ee:20:5f:98:48:92:07:1f:3e:21:1d:f7:8e:80:12:b2:ff:
db:d6:bc:4d:3a:0d:c7:32:4c:05:ab:7f:eb:14:e6:74:02:3a:
e3:11:1e:8e:30:d8:a7:07:7d:97:c4:04:6f:e6:c4:46:05:4c:
ae:88:a4:b9:8e:d7:99:bb:1b:79:3f:33:7d:0d:98:bf:66:99:
b1:31:f1:61:a9:60:55:ac:0f:af:6f:5a:cd:91:9b:c5:10:cc:
70:9d:cb:50:8b:52:14:1e:1c:cd:8f:94:f1:43:41:4d:67:30:
fa:42:95:b7:f7:19:d8:45:9c:b6:6d:53:38:76:bb:31:b3:db:
60:5a:4f:7a:7e:1e:1a:6d:6f:f0:50:65:7d:d4:b3:70:77:e5:
70:ac:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:03 2026 by rpki-client