Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
File: mkM22h63IW4g7ASn8DHrShtjG7M.mft (raw, json)
Hash identifier: hrRJWwcGLvuo/HCTf4oMakzyaDZdl9xtHGSUPmGlDPA=
Subject key identifier: 2B:37:40:5B:F6:5D:04:E6:86:D2:75:78:B4:97:4D:1B:B7:74:4C:B4
Authority key identifier: 9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
Certificate issuer: /CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Certificate serial: 01A0DA95F5FFEEFB0469A52FE3ADE43D613D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 22:00:55 +0000
Manifest this update: Fri 25 Sep 2026 22:00:55 +0000
Manifest next update: Sat 26 Sep 2026 22:00:55 +0000
Files and hashes: 1: KGRZtAAx-sknvQQcwhztrA8NJos.roa (hash: uYCNY8bnQOpiSbQHGpcKZAraJm0QfOSnQkHdbbBpb7U=)
2: mkM22h63IW4g7ASn8DHrShtjG7M.crl (hash: k46IyUXBxznhHKQzaI0FFvjn4XqI6d5MgnkPBAPEZY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:95:f5:ff:ee:fb:04:69:a5:2f:e3:ad:e4:3d:61:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Validity
Not Before: Sep 25 22:00:55 2026 GMT
Not After : Sep 26 22:00:55 2026 GMT
Subject: CN=2b37405bf65d04e686d27578b4974d1bb7744cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:3d:51:a1:f4:88:67:2d:13:d0:39:98:bc:
ff:93:85:9b:3e:fe:69:04:9e:54:ba:8f:71:c2:9c:
66:d7:48:a1:d3:03:66:3c:9d:8f:14:dd:a5:ff:13:
2f:24:c0:3c:48:58:e6:d7:f0:b0:b4:0b:68:7a:d4:
2d:ca:b0:f3:72:65:3b:06:47:b2:79:87:a4:05:c0:
b5:fc:9a:5b:51:6b:56:28:7a:6a:43:ca:8a:3e:54:
d2:d7:f2:e4:7e:6c:9c:17:4b:18:f1:54:e3:70:92:
47:6f:15:07:00:ec:33:82:37:20:09:40:58:fc:4d:
cf:e3:67:1f:e6:f0:f4:78:d1:bd:1c:90:a1:33:14:
30:30:66:1f:1f:75:31:67:e1:97:aa:58:1e:3a:e1:
3d:e2:9a:21:1d:e0:53:30:03:8b:b1:fb:80:92:9a:
8b:d2:c2:48:a0:8b:bf:00:d0:d1:da:b1:64:51:5a:
e4:d5:35:2b:b7:e4:db:de:a0:e2:97:ad:ea:56:24:
50:b5:5a:00:66:a3:01:ab:f2:98:bf:f9:32:d0:11:
79:59:82:cd:a4:8c:4b:93:38:f1:2e:0a:1f:07:34:
33:a8:43:b7:ab:0c:b3:12:6e:b5:ce:3c:f5:a5:c5:
58:f9:97:61:e1:c0:7a:c4:af:3b:6f:3c:db:78:b8:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:37:40:5B:F6:5D:04:E6:86:D2:75:78:B4:97:4D:1B:B7:74:4C:B4
X509v3 Authority Key Identifier:
keyid:9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cb:90:57:87:38:55:48:ef:03:1d:9a:45:ce:88:4d:91:10:
3d:21:f3:90:52:72:a8:1f:58:73:a2:ab:be:6b:fe:21:95:de:
44:fe:6b:7b:43:45:a6:de:c6:5c:6b:4d:c7:b9:8e:f4:1c:a2:
c7:87:ec:41:db:c5:4e:9a:86:77:d5:8a:fb:5f:49:fe:00:f0:
69:6c:a8:a8:e8:75:e8:0c:8b:8b:6d:52:ea:50:cb:be:ce:53:
0c:bf:1d:d9:9b:c5:b6:cf:16:c8:cf:b0:10:45:e6:98:ce:16:
2c:20:94:c5:85:a7:ef:ca:64:d8:cd:4e:71:14:03:d3:79:fe:
8d:6d:93:f2:43:4e:39:cd:37:08:60:49:c6:eb:16:9b:2b:1f:
ab:f7:75:54:48:ab:3a:2c:f3:75:52:e5:4f:99:33:3d:b8:e3:
90:20:2d:62:1b:80:e0:04:ca:9e:83:ca:15:00:b3:e3:8e:ba:
ec:16:97:d4:e4:8c:c8:97:59:8d:02:57:67:29:c5:31:d9:8b:
30:72:c3:e4:f2:0d:36:44:15:a6:85:d3:b9:e5:8e:51:6d:2c:
d5:65:a2:1e:9c:23:b7:4f:55:b3:ff:9a:fb:24:c5:2a:68:36:
4f:c0:83:84:6b:90:a4:c3:01:1d:44:05:99:75:a3:cb:f3:38:
4c:77:d9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:05:10 2026 by rpki-client