Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: RtlU7yBRJrrE+enS5qT3P3VKK7UEJGmZeSHlgrKo5LQ=
Subject key identifier: 30:E9:8E:6E:CD:A4:60:80:5A:C5:9C:96:32:E1:E2:27:4C:9C:70:62
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 01A0D64BE0B8F8DABCFE93E9B44E351F6796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0B2D
Signing time: Fri 25 Sep 2026 02:01:31 +0000
Manifest this update: Fri 25 Sep 2026 02:01:31 +0000
Manifest next update: Sat 26 Sep 2026 02:01:31 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: dj728oquNTUyqXOJ6z3Gbf4fHomz8FckYpqQvJ0TaQ0=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:e0:b8:f8:da:bc:fe:93:e9:b4:4e:35:1f:67:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Sep 25 02:01:31 2026 GMT
Not After : Sep 26 02:01:31 2026 GMT
Subject: CN=30e98e6ecda460805ac59c9632e1e2274c9c7062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ec:3f:b1:57:47:9c:1c:72:7f:f6:a9:4a:37:
dc:25:11:76:65:d5:f9:bd:d9:2f:d3:ea:05:b4:69:
57:aa:d2:7e:41:f4:65:48:a1:f9:67:b9:44:32:09:
3e:1f:3a:3e:2b:e0:c9:3b:27:2d:26:7e:32:47:03:
47:23:e9:c5:68:f8:40:d4:58:db:96:39:f8:ad:66:
0b:67:df:b1:11:0a:73:b0:eb:8f:fa:9c:dc:6d:b2:
5a:27:2f:a0:57:d8:94:9f:dd:63:2d:5a:8f:57:b0:
fb:c2:32:72:90:a4:fc:e0:b0:0e:58:37:9a:0f:1b:
51:81:fb:0b:13:66:bc:f9:be:14:02:f8:73:82:ba:
3a:ff:e7:52:89:58:6b:ba:1b:b7:5e:b3:e2:20:f9:
5f:0e:4d:57:96:63:25:01:e8:d5:41:28:e9:57:63:
19:e1:8b:09:9a:38:5e:b8:ed:38:63:59:fa:81:66:
2c:ab:7a:c9:4f:20:0f:7d:9c:d3:28:c5:11:b6:8a:
e6:5e:ed:77:8a:50:35:aa:41:af:cf:84:01:0e:c4:
44:41:3f:5f:1c:84:72:f3:34:fd:f0:0e:fe:5e:c0:
4f:8d:fd:68:97:7a:7e:a0:4e:09:5e:16:36:80:ea:
9c:2a:b9:0b:5d:6c:29:78:24:db:d3:48:4f:b1:39:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E9:8E:6E:CD:A4:60:80:5A:C5:9C:96:32:E1:E2:27:4C:9C:70:62
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0d:11:4a:10:99:c6:1e:b3:94:26:ce:7a:40:02:1f:80:7d:
26:a7:f4:20:d8:ac:59:e6:5f:7c:0d:12:bf:ca:bb:10:cc:a7:
e7:2e:28:0c:71:c7:34:a8:2f:1a:72:34:e1:01:86:f7:12:ac:
c4:8d:2e:b7:f6:a9:c8:21:47:c2:fc:36:a9:c3:93:ed:c7:07:
5d:12:22:3f:09:7a:0c:8b:ad:ac:22:b4:6c:f9:92:c8:61:45:
fc:90:d3:75:fd:4b:93:96:c1:75:e9:f7:bf:57:56:d5:ac:59:
08:92:6b:56:51:d0:4a:59:59:53:5b:44:2a:63:18:5c:d7:b5:
eb:68:ef:00:82:d5:99:3d:b8:11:4d:20:0c:ea:62:be:50:b3:
08:f4:d2:77:58:da:7d:e9:32:f7:06:53:b3:b9:2a:b2:e0:cc:
1a:77:02:46:5a:85:64:ad:63:7f:4b:d7:fa:07:aa:4d:a0:6b:
41:54:c1:38:b8:cd:f1:a3:74:42:ae:13:f2:67:d3:bb:26:da:
a3:5b:06:e8:ec:4c:39:9c:a6:09:1b:97:60:c3:19:89:e0:d7:
1e:fb:d2:c6:11:d8:18:69:dd:d7:d1:0c:bf:47:99:95:29:af:
b0:c7:20:3c:19:fa:8c:67:31:0d:bc:99:dc:98:f9:14:14:63:
7f:ce:6b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:00:29 2026 by rpki-client