
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
File: mkM22h63IW4g7ASn8DHrShtjG7M.mft (raw, json)
Hash identifier: TlFUZxazaOCcTwxeBiA/F0DOlMoWzwcJ2d4lZ8S+Suc=
Subject key identifier: 2F:55:A7:94:DF:45:D7:07:BD:38:D6:D7:94:84:33:40:49:35:09:F2
Authority key identifier: 9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
Certificate issuer: /CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Certificate serial: 019F9248BB158F6C0C6009EEC6635511FE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 04:01:07 +0000
Manifest this update: Fri 24 Jul 2026 04:01:07 +0000
Manifest next update: Sat 25 Jul 2026 04:01:07 +0000
Files and hashes: 1: KGRZtAAx-sknvQQcwhztrA8NJos.roa (hash: uYCNY8bnQOpiSbQHGpcKZAraJm0QfOSnQkHdbbBpb7U=)
2: mkM22h63IW4g7ASn8DHrShtjG7M.crl (hash: qEhFF9FZad0lh5DHz/ktoU7fPdJzOP+UzI7FBZykgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:bb:15:8f:6c:0c:60:09:ee:c6:63:55:11:fe:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Validity
Not Before: Jul 24 04:01:07 2026 GMT
Not After : Jul 25 04:01:07 2026 GMT
Subject: CN=2f55a794df45d707bd38d6d794843340493509f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:11:fe:3b:de:a0:7c:51:8e:70:60:51:a6:
0b:ce:9c:b7:a3:a4:b2:bb:51:61:43:4a:cf:16:f9:
75:f7:3b:6a:5d:44:ed:7c:44:0a:6e:18:1b:53:7d:
6b:20:cc:2e:5a:38:1a:b8:9c:ae:e5:74:03:69:b7:
a1:35:13:d5:e8:76:5a:c6:d1:07:6b:22:f0:c7:be:
39:af:9e:dc:5b:f7:18:8e:e5:df:03:4e:82:a7:e9:
60:fe:38:f4:5f:61:ac:6a:d2:e4:f9:1b:2d:b0:2c:
78:8d:6a:46:f2:d0:bb:ba:65:9e:8b:ad:d5:7b:94:
85:4d:22:77:ec:bf:65:f0:c5:a6:8f:1c:77:6e:a6:
96:8b:7f:3f:a4:15:9a:34:3c:59:79:b4:6a:e9:26:
78:98:a9:45:12:a1:74:6d:1b:56:c0:f1:dd:71:16:
d5:09:65:0c:1e:19:e3:9f:5d:0d:2f:cd:29:82:78:
39:c3:09:ed:c3:17:0e:0b:7a:e8:08:65:c9:15:17:
8a:5b:7d:f1:19:84:be:7a:14:29:d4:d0:e0:57:6e:
57:63:b2:ef:a7:50:94:bd:45:d0:b2:3a:d2:79:ed:
44:6c:5f:34:1f:1e:1a:5b:4a:0e:d4:86:c7:53:1c:
bb:f0:5a:c7:ef:5b:75:b9:0f:b6:a7:b4:44:76:35:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:55:A7:94:DF:45:D7:07:BD:38:D6:D7:94:84:33:40:49:35:09:F2
X509v3 Authority Key Identifier:
keyid:9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6f:98:5b:dc:5b:e3:66:0f:f4:6e:14:af:84:fb:20:4c:d9:
e4:f9:f9:f9:44:ea:3c:e2:8f:97:be:56:08:6b:61:e7:fd:5c:
28:9c:c3:90:a6:33:e0:1e:6f:28:74:b6:5f:00:c0:f9:d2:d2:
e3:e6:9a:be:4b:b9:7f:b8:84:de:63:08:21:3c:88:e4:b7:9d:
f1:f4:c8:63:d4:44:ff:b6:08:76:81:ef:2d:c3:68:33:9a:62:
e6:ef:34:cb:31:1b:0b:57:c5:5d:54:fd:9e:4a:88:6e:bf:70:
12:27:bf:e1:25:5f:1b:75:55:b2:15:04:a4:7c:40:38:f9:41:
98:26:e6:c6:54:79:2e:c7:b0:1c:3a:94:c3:a9:60:ea:86:d4:
e0:9c:de:6e:a0:d1:9b:cc:6c:0d:9b:3c:6b:4a:30:82:4c:94:
71:11:d9:8a:d3:29:68:37:f4:f8:1b:15:b0:2a:fc:f6:79:63:
dd:2f:37:06:ba:c1:43:46:61:87:5b:05:94:73:44:cc:79:0b:
6a:e1:0c:10:0f:ef:03:85:31:02:d6:75:26:4e:3a:75:8d:ba:
af:cf:72:50:6c:22:21:91:1a:a3:fa:e3:01:cc:5a:d0:6e:8b:
23:4f:35:06:5d:6d:e6:bf:cc:b2:89:8a:bb:50:5d:6a:54:22:
da:f6:d7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:34 2026 by rpki-client