Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
File: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft (raw, json)
Hash identifier: YbHXWHagaJgYBx3A9XEBzh2RTgo7oyKNbUS0j+0zpYY=
Subject key identifier: A2:6E:16:67:07:BA:7F:19:DA:5F:20:94:75:D7:23:2E:71:73:09:1A
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Certificate issuer: /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial: 019F8F479142477B99938A872E72F2841F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
Manifest number: 020B
Signing time: Thu 23 Jul 2026 14:00:59 +0000
Manifest this update: Thu 23 Jul 2026 14:00:59 +0000
Manifest next update: Fri 24 Jul 2026 14:00:59 +0000
Files and hashes: 1: HAvcKkRLr_-FXcfu2XV7UUaU5F8.asa (hash: Ern+cmfZwFsU2HhkvPFkDC0xdjwIG4SYe7YBQ5RzsPs=)
2: iS_RjiJ5hKPzS36a9K6GI2jCpSc.roa (hash: oKmLMmS60dhNLyeJppUGpS47iPqdNIjtFfF23b9zJgg=)
3: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl (hash: HnotG9dV/FsnARlY92D0wW/RN43B2MxQ9pOPyV2sZL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:91:42:47:7b:99:93:8a:87:2e:72:f2:84:1f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Validity
Not Before: Jul 23 14:00:59 2026 GMT
Not After : Jul 24 14:00:59 2026 GMT
Subject: CN=a26e166707ba7f19da5f209475d7232e7173091a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:70:d0:c4:dc:3f:67:6f:1f:5d:23:ac:b5:
d5:f1:cd:83:06:53:76:05:10:f8:95:df:b1:19:f4:
a7:78:22:f7:45:c1:fd:6e:88:7d:b1:ed:83:ed:00:
2a:18:4e:0f:68:a7:d8:dc:e3:4c:f2:1f:a5:f5:c7:
88:b2:b3:e8:02:2b:01:8f:e3:b4:9c:87:3a:8e:15:
cc:41:18:a8:ed:85:ab:b4:ce:6a:bc:6e:52:20:98:
17:c2:cb:a0:cc:ca:8f:80:3b:ee:c3:a0:65:f2:e0:
a3:92:44:4c:bf:5b:4c:f7:be:72:30:fe:ae:59:0c:
b9:8f:3d:8e:3b:74:fd:25:47:35:e0:87:65:ea:33:
da:00:0b:f1:e8:62:b7:e0:d6:f0:9d:01:d9:64:a0:
25:37:b2:64:38:b8:3e:17:25:d5:f6:09:a0:94:25:
e6:a7:e5:a8:88:d2:85:6e:66:52:15:9d:2b:7d:b4:
81:9a:48:4d:82:8d:1e:ce:d5:cd:61:b9:ca:c2:cc:
2d:61:71:08:c5:a1:06:5f:89:f7:89:c3:fe:67:f0:
72:92:85:cf:4a:46:6c:bc:71:af:ee:47:ee:55:6a:
d6:b3:7c:0d:7a:88:97:e9:c6:19:7b:b5:09:92:ce:
12:43:2a:1f:e8:19:75:d7:50:3e:de:0d:52:2b:46:
99:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6E:16:67:07:BA:7F:19:DA:5F:20:94:75:D7:23:2E:71:73:09:1A
X509v3 Authority Key Identifier:
keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7e:4b:6c:b5:a6:29:ce:66:6f:49:0c:e7:4e:02:6d:42:f4:
48:ca:61:12:69:c3:8d:3d:3c:dc:78:31:24:80:85:56:83:9b:
32:e7:53:cc:09:9b:aa:10:3d:f3:54:4f:27:11:0a:43:95:42:
3d:9e:0f:57:51:f5:c3:1f:0b:cd:bf:18:7d:8a:0f:4c:30:36:
cb:e7:99:89:9e:63:19:97:3a:c6:75:c1:fc:9e:d9:05:07:3d:
17:40:87:86:68:b6:9e:26:72:a3:a0:e5:d9:b0:e5:0a:79:94:
46:3c:59:35:6a:6f:a2:82:b3:3a:05:db:b7:ed:be:9a:5e:e8:
55:92:a9:a5:86:2e:c6:fc:ea:52:b8:03:78:90:00:a3:53:19:
d0:5f:79:6d:6c:72:a6:cc:a2:93:e1:8d:56:23:c1:7b:45:1f:
6f:c3:de:1c:2a:23:e6:41:b8:5f:e9:9f:87:94:4c:60:fb:a8:
55:48:ea:50:e1:43:3d:6b:6c:0f:7e:31:b5:f1:4b:5a:d3:c3:
ae:ca:7a:a3:86:dc:f6:06:ad:cf:ad:1e:28:8c:de:da:ec:f2:
61:5e:0a:8e:e7:35:bd:c1:19:5d:be:22:5e:3d:a9:79:72:da:
bb:cb:63:ac:4d:33:98:ad:26:b7:f2:10:a0:24:db:ad:d4:f4:
c9:16:4c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:49 2026 by rpki-client