Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: 8dZOMJ8L1oU04wxBx4r/ccpsvgpvXNw5q4WLQAKZUdo=
Subject key identifier: 49:3B:A9:98:E7:93:06:71:DB:05:D8:64:23:AC:D8:CF:BB:B4:09:27
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 01A0CF6CD6B0342997C046B569B4E4DAEA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 1151
Signing time: Wed 23 Sep 2026 18:00:11 +0000
Manifest this update: Wed 23 Sep 2026 18:00:11 +0000
Manifest next update: Thu 24 Sep 2026 18:00:11 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: tCY4UKVxuC7/VY4hznAyRLOw7vd1eOPsQtFWOeW3lx4=)
2: W-thWstLj_54HzMDe1CPmkWaZZY.roa (hash: LM0Lib5MmpvXnboN7sbqoV81b7z7jQPCb/hPX5AYcvM=)
3: _a4udz3Wowgk3kz0TQHNdav2CGQ.roa (hash: hiqTVe26hrw7pmofqQ2A/tv62bg85cwYZkNLdMZlYYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:d6:b0:34:29:97:c0:46:b5:69:b4:e4:da:ea:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Sep 23 18:00:11 2026 GMT
Not After : Sep 24 18:00:11 2026 GMT
Subject: CN=493ba998e7930671db05d86423acd8cfbbb40927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:19:cc:31:aa:01:ff:3d:3b:a6:25:17:b7:
86:0b:be:21:2b:05:16:bf:a9:c0:f9:24:b5:5a:f8:
a1:7a:b2:03:ac:c4:2d:00:59:c0:8a:ac:50:8c:d2:
1c:51:d8:92:44:ad:0a:d6:9c:f2:7d:5c:db:b9:bb:
2c:18:a9:28:34:31:14:ca:ec:5d:2f:4c:3a:99:6d:
6e:b5:6f:56:c3:ef:52:e7:70:b2:3b:61:a5:84:67:
d5:e7:a1:fd:56:a1:12:7f:74:e2:cb:23:06:94:90:
1a:e4:14:7c:d3:f7:a7:c5:48:10:05:31:d8:df:65:
c8:54:94:87:c6:75:35:13:27:f6:1b:f9:31:61:01:
33:1a:5b:d6:9d:4a:aa:f5:c4:bc:9a:83:73:c7:8b:
37:9d:bd:e0:ab:b7:8b:2e:1a:3a:c4:48:cd:41:c1:
ea:e8:61:58:f9:c7:81:f5:89:50:1a:47:a5:f8:8d:
59:f4:35:83:e3:8f:6a:0d:62:0c:3f:c7:f4:97:66:
cb:ce:67:b5:60:f6:90:75:fd:02:07:7d:60:36:3d:
06:e5:0b:eb:3f:55:c2:73:6f:ac:4c:4a:30:88:d2:
79:9c:7c:a8:af:84:14:df:4c:7a:1f:93:d3:83:bf:
2b:d1:e1:f2:dd:d4:24:5f:5b:5d:fa:f2:e7:17:6a:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3B:A9:98:E7:93:06:71:DB:05:D8:64:23:AC:D8:CF:BB:B4:09:27
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:99:35:ee:f4:6f:43:c8:47:96:5d:64:16:92:c5:17:91:19:
f7:bf:77:07:db:1f:9f:20:89:ea:a7:e2:e9:ff:a1:e9:e1:43:
cc:cf:48:19:3f:43:6a:e5:02:81:e2:ed:01:a3:08:69:e1:0d:
dc:73:07:f9:d3:ba:e9:cd:85:10:75:68:b6:86:04:24:79:2a:
ab:a3:06:01:a8:f8:cb:7e:ae:4e:0f:00:7d:58:91:8f:c8:1e:
7b:01:72:c0:c4:36:8e:3a:00:9e:0b:c7:39:4a:76:40:57:a5:
ba:cc:ae:23:62:35:ad:06:4c:76:97:d9:42:a8:e0:eb:6d:91:
02:b5:aa:69:59:2b:5c:ea:75:da:d7:fa:5d:2d:0e:52:b5:46:
97:bd:40:cf:33:2d:74:bf:ef:17:ef:67:3f:65:c6:ed:dc:7b:
2e:03:bb:a1:75:f9:b9:bc:af:c4:f5:27:35:dc:99:30:92:dd:
b6:e2:9e:90:43:0a:05:96:01:60:d1:3a:5f:f7:8b:62:ca:e9:
9c:ed:f3:bf:41:8f:45:5f:39:95:e9:e0:f4:b3:4c:7b:ca:61:
dd:25:39:fe:eb:e8:5a:d5:bb:e5:c7:fa:9d:2f:7a:24:6a:96:
2a:46:f2:c3:46:72:6d:73:f0:92:f2:63:a9:f0:b6:41:3b:de:
f2:f1:72:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:10:50 2026 by rpki-client