Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: W2eeFg3MONmXN0Fyk1F/4IOnSGGQdBNMhjt/skVgw6Q=
Subject key identifier: 12:A9:2B:28:DA:6F:34:E2:3B:AB:2A:CB:89:3C:BB:A3:9E:7A:53:D1
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 019D25F12EC59F8653E8CED53643DB69900F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0944
Signing time: Wed 25 Mar 2026 17:00:56 +0000
Manifest this update: Wed 25 Mar 2026 17:00:56 +0000
Manifest next update: Thu 26 Mar 2026 17:00:56 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: 34ijHe3B0bpJU2huxrGe2Ez5kwR1qXBXx2j1fbOZJHY=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:2e:c5:9f:86:53:e8:ce:d5:36:43:db:69:90:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Mar 25 17:00:56 2026 GMT
Not After : Mar 26 17:00:56 2026 GMT
Subject: CN=12a92b28da6f34e23bab2acb893cbba39e7a53d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:2b:bb:2c:ae:5b:d3:89:6d:8c:bc:16:a7:
66:35:b3:33:54:b3:2e:1a:5e:62:77:50:56:d8:c1:
49:7a:d2:a3:92:7c:49:b8:64:29:af:38:72:54:c2:
de:00:d2:e1:62:a1:00:fd:d2:99:61:53:d7:7e:db:
fb:c8:88:43:85:dd:c3:cc:29:d3:d7:50:65:ea:e3:
33:1c:e9:f9:3a:07:07:fe:c4:fd:68:2d:5a:64:54:
84:22:ac:f1:b0:26:bd:c4:fd:39:9b:d3:dd:a8:4c:
7c:3b:06:1d:81:c3:79:d7:2c:7e:a1:0a:c0:49:21:
27:3a:f1:7c:b9:e6:fa:24:14:13:8f:cf:c8:b8:a9:
7c:24:d6:cf:1d:b8:1c:d6:c2:e5:75:56:a0:67:99:
d5:7b:f5:b6:c9:11:58:85:7e:cd:6b:f9:b1:3d:0d:
44:13:60:a6:59:9b:44:3b:54:ad:c6:8f:ed:0f:ae:
d7:7b:90:2a:04:c0:c5:c6:b5:4c:b9:c9:f5:87:10:
3e:6a:1d:08:22:0b:68:1a:a6:d7:b2:92:88:86:18:
53:8f:a8:45:14:a5:eb:2a:11:49:99:28:1d:6f:30:
4e:49:94:17:6c:67:07:b2:e7:dd:5e:b7:4e:d8:92:
64:64:cd:46:cb:20:40:ac:f3:df:e6:d5:f9:e6:0d:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A9:2B:28:DA:6F:34:E2:3B:AB:2A:CB:89:3C:BB:A3:9E:7A:53:D1
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c7:3b:2c:a5:27:39:27:79:35:fb:9e:3c:6c:33:b2:02:1b:
ce:f6:ed:ee:84:45:b9:e8:2e:c0:cc:54:29:ca:b4:cc:f4:00:
b4:3c:a7:34:eb:c3:9d:d4:fd:f3:17:c8:45:a3:b7:d8:b7:69:
70:9d:92:6d:14:20:e4:6f:df:e6:a1:1d:a7:dd:da:5e:55:4d:
a2:41:41:7b:d8:30:95:8c:d3:85:fc:e6:b4:1a:48:91:fb:fa:
a0:f6:1c:db:5d:1d:cb:d0:49:85:e0:93:d5:d3:dd:5c:f1:1b:
fe:d0:f8:24:ae:04:31:62:85:06:b4:ca:74:69:66:bf:17:20:
4d:f3:ba:1d:c9:de:e4:a7:49:53:e7:85:71:a6:90:03:f0:0f:
94:bf:a0:07:83:7f:31:e4:42:96:7d:42:7f:58:25:f2:a9:da:
c7:eb:17:4b:04:46:54:31:3a:37:4e:d8:4f:1f:f6:34:5c:2b:
9f:9e:fb:01:ad:69:dd:4d:ef:0f:dc:a0:c3:eb:ea:70:44:0d:
57:9e:f5:c5:11:37:91:43:83:c7:30:18:d0:04:08:2d:0c:5f:
72:f7:40:18:e2:64:25:56:18:bb:76:9f:0f:2e:14:6b:f8:e6:
82:1f:d2:39:91:27:6b:35:57:eb:db:da:d0:ac:d1:36:d9:34:
3a:16:24:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:40 2026 by rpki-client