Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
File: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json)
Hash identifier: 67DQfdTPhLwoFUItqoRg5ujsZb3IHvHqkQ5GMG2vitE=
Subject key identifier: AB:11:85:D7:33:7E:F7:33:44:99:73:4F:DD:A5:CA:71:3E:9E:5F:06
Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
Certificate issuer: /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Certificate serial: 01A1133C384191B49A9F378EFAD29A0D25B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
Manifest number: 1A8C
Signing time: Tue 06 Oct 2026 22:01:15 +0000
Manifest this update: Tue 06 Oct 2026 22:01:15 +0000
Manifest next update: Wed 07 Oct 2026 22:01:15 +0000
Files and hashes: 1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: 6oGDuz8u6ehPn9kCmeBnLhpCMsTuUw9XFGQ5k6IOx/M=)
2: PI-iyfgjqOsckNLoaqd8v_mV8Ao.roa (hash: xH29u4bjzu1wjXHSI6AzFo4CKDsCw4Lu39FOZp62TT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:3c:38:41:91:b4:9a:9f:37:8e:fa:d2:9a:0d:25:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Validity
Not Before: Oct 6 22:01:15 2026 GMT
Not After : Oct 7 22:01:15 2026 GMT
Subject: CN=ab1185d7337ef7334499734fdda5ca713e9e5f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:47:bb:0c:54:59:d4:eb:89:6a:b1:22:41:
00:cd:f1:65:fd:90:b9:6c:88:8d:b4:ef:3e:bd:e8:
50:d6:cc:53:45:59:54:f4:76:ca:ba:49:ce:fb:b5:
ef:72:f8:03:ff:7f:5c:3f:d1:44:6b:59:0f:f0:84:
9d:29:95:df:3c:5e:ba:c7:30:bc:a9:5d:dd:82:a6:
63:22:2d:60:18:a3:bc:0a:93:5c:5a:40:cc:43:75:
59:66:a0:8c:1f:4c:62:0c:47:9e:22:1d:84:b2:f5:
9a:50:bf:fc:39:91:b0:46:c0:d5:20:84:31:da:0f:
10:63:c7:28:69:c5:56:ad:13:7e:d2:d0:97:7c:4b:
95:59:41:4c:ae:63:cc:5f:c7:72:7d:7a:19:d7:2e:
7a:eb:e5:74:7f:2a:47:49:c4:86:4d:68:00:83:b3:
3d:ba:54:95:ae:ad:4d:11:0f:52:5f:9d:ae:f1:de:
71:41:ab:33:67:4d:7e:fb:82:c0:c9:03:2a:db:5e:
11:54:19:91:f9:1b:4e:fc:37:1e:f5:f8:6c:27:41:
a2:c3:0f:51:37:61:c7:70:a1:1f:fc:4f:bd:10:f1:
c1:77:13:7b:8d:cb:02:ca:27:9e:ee:49:a0:ca:b7:
ee:9a:8b:60:be:fd:7d:a1:3f:b4:61:35:73:0d:5f:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:11:85:D7:33:7E:F7:33:44:99:73:4F:DD:A5:CA:71:3E:9E:5F:06
X509v3 Authority Key Identifier:
keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:da:6e:22:3a:d1:46:22:1d:b2:21:40:fd:9e:6a:87:2c:a3:
59:59:0a:b6:0d:24:de:d6:f3:ea:28:8b:58:24:7c:85:17:7b:
1c:7b:62:6c:c2:99:0e:4b:b0:78:4d:a7:70:98:66:bd:4a:7e:
ca:82:17:b4:43:64:3d:51:88:7e:28:24:57:29:59:a5:26:79:
8c:13:61:43:23:11:18:58:89:46:86:4a:06:1d:b9:f7:79:a6:
1a:22:57:d2:05:c8:4c:e6:d7:dd:a9:ac:9c:3e:71:f7:6c:f0:
77:8f:e2:dd:ce:74:c7:da:e4:9c:ce:9e:ae:66:85:a0:7d:84:
43:78:ad:2f:2a:72:35:6c:52:c4:c3:20:73:98:88:8e:27:4a:
6c:b8:f7:8a:fd:9c:af:0a:c8:7f:1d:49:27:13:87:99:02:06:
09:41:99:19:65:a0:a6:47:4d:44:8d:1f:de:21:c4:54:f2:92:
02:91:b7:2f:0e:16:12:52:5a:47:7c:eb:c8:62:3c:b2:27:29:
c6:3e:58:05:15:16:b5:79:dd:4d:09:7f:3e:af:36:e5:c5:ed:
d3:89:4e:ce:6f:4e:99:ae:b2:be:5d:b1:5c:6e:57:7c:c0:1b:
88:b6:28:e5:ae:68:ce:b8:4b:75:a9:9e:cb:00:3b:d9:4c:ce:
cb:7b:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:31:49 2026 by rpki-client