
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: xIkgQx9VDhCflg/A9EnEKvEqOD4oxIJ35+7L1JRpEGs=
Subject key identifier: E6:DB:C0:B0:46:63:31:A8:B9:53:4F:E6:F4:78:CA:CF:EF:25:D3:42
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 01A103C8F6E24839BB5A9E8FA29955A63DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 1A91
Signing time: Sat 03 Oct 2026 22:01:04 +0000
Manifest this update: Sat 03 Oct 2026 22:01:04 +0000
Manifest next update: Sun 04 Oct 2026 22:01:04 +0000
Files and hashes: 1: SYtSh6MgqpX8fZ4WHojx0wxmwAU.roa (hash: qfAbswAstxuSdJu35mimEN1jiqsDnLeGp+g0coBMNag=)
2: YIp8U7durT_VOWJi51t_EhaEZmc.roa (hash: uqZNroUU2FsZFyQ6iEi3c3DU2XeoL0O/vrop/BVrvjs=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: U0QOkJdqy2+baBV2skuwri34vtoW1jv5VN9Um3eicMk=)
4: pEE9oryUWOVeetd5uFrgO_cdrpE.roa (hash: jDaM82TLaH8oaB0vSE3Avb/s35Fb5rQ5AgRFhpcBjks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:c8:f6:e2:48:39:bb:5a:9e:8f:a2:99:55:a6:3d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Oct 3 22:01:04 2026 GMT
Not After : Oct 4 22:01:04 2026 GMT
Subject: CN=e6dbc0b0466331a8b9534fe6f478cacfef25d342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:bf:b7:cb:09:e2:48:1f:08:20:f1:9e:e3:
0a:81:9b:8e:90:a1:cb:dd:a5:57:98:68:65:df:0b:
b4:ac:f4:14:80:3a:da:55:e1:62:45:a3:0f:9d:db:
af:1d:63:14:dd:f9:ad:17:7d:04:ff:bc:20:49:39:
c4:e8:14:f2:f2:d5:40:a8:4f:f9:68:76:ce:cf:17:
75:9a:07:85:66:5f:fb:de:6e:b8:97:fd:69:4b:fc:
24:c0:39:12:b0:61:0d:64:75:89:1e:32:4c:2a:e3:
78:94:88:f1:82:32:55:ce:dd:35:71:09:2a:a8:60:
aa:23:f4:28:4c:64:48:4e:5a:53:93:03:48:74:11:
a4:62:76:b5:5c:be:6a:4c:b4:02:f5:b7:c7:dd:19:
6f:a3:a3:2b:74:06:a6:86:60:fd:47:4b:de:52:ce:
27:21:74:77:b6:70:1e:bd:02:26:35:bd:df:07:c6:
0f:70:5c:bf:97:d5:0a:28:aa:bd:13:a4:73:06:e3:
79:0e:47:e3:1d:71:58:11:36:a3:ad:28:a8:64:6e:
3e:70:ae:82:44:84:ca:0b:2b:63:7f:1c:8a:00:d8:
0d:b9:e4:dd:0e:0c:01:e0:d0:24:f3:85:c2:77:29:
eb:d9:e1:95:8b:d4:e1:e1:05:a3:54:22:68:72:66:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DB:C0:B0:46:63:31:A8:B9:53:4F:E6:F4:78:CA:CF:EF:25:D3:42
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fa:d5:08:d2:7d:ef:99:d2:2b:2b:8e:68:88:72:84:d8:1d:
92:8f:5b:b0:2c:75:5f:f4:7d:a9:ba:c5:d9:a0:97:9b:0e:14:
99:20:f6:d2:f9:bf:36:74:48:90:94:43:51:19:f5:e5:3f:88:
92:ea:0c:9c:7b:0a:e3:f7:ab:cb:d4:aa:14:fa:c2:cf:37:d7:
b4:b2:c1:2e:e5:22:44:f2:be:d2:cc:18:de:57:68:22:b5:79:
a6:48:c7:1b:0a:8f:7e:ae:de:f8:0d:fa:df:ca:22:fd:3c:39:
53:fe:c9:7a:44:b3:5d:2b:2d:39:0b:77:0c:0b:29:8c:f3:49:
69:b7:fc:5c:6e:19:30:67:f0:7e:c6:d1:65:bd:2b:8f:e4:90:
5f:25:f1:60:6c:c8:6b:4f:98:a4:bc:92:c9:ff:cb:3b:a0:83:
31:fc:49:29:84:63:a3:67:04:f6:a6:00:06:a8:79:6a:54:6d:
4c:d0:ef:8e:e4:e7:64:dc:6a:46:79:68:f8:4e:d4:98:f4:86:
ee:1a:ac:3a:c9:d9:91:e3:af:39:5e:64:86:ad:ed:2a:8e:66:
bd:4f:68:49:58:00:1f:e6:57:0a:46:88:0b:09:dc:1b:d5:c7:
11:99:77:b3:9f:97:a8:1b:4c:0e:9c:21:10:1e:66:28:4e:0e:
a5:d9:a9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:10:47 2026 by rpki-client