Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: /VzPofYgvipAFCliL6eq6BMWi2Yuf920oUnOSslOB9M=
Subject key identifier: 65:55:FF:58:66:1D:45:C9:C8:F5:54:2B:D4:F8:2C:19:45:B1:33:3B
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 01A1DCF0044ABD9BC88BFB539718F23ECDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0BB5
Signing time: Sun 15 Nov 2026 02:01:19 +0000
Manifest this update: Sun 15 Nov 2026 02:01:19 +0000
Manifest next update: Mon 16 Nov 2026 02:01:19 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: 3x5R76hbOPF339tqJ0XjcI/2bGTw6ZqPzltyrl3NjWg=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:04:4a:bd:9b:c8:8b:fb:53:97:18:f2:3e:cd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Nov 15 02:01:19 2026 GMT
Not After : Nov 16 02:01:19 2026 GMT
Subject: CN=6555ff58661d45c9c8f5542bd4f82c1945b1333b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:cb:b1:58:76:18:2f:ff:cf:fe:ba:d6:2b:
de:9e:1e:eb:31:2b:10:21:ee:c3:2c:42:34:5e:cf:
0d:e9:df:28:b9:72:83:3f:99:03:61:80:45:f6:13:
ef:79:87:99:ae:8a:48:8e:f8:43:28:d8:b1:4e:3f:
08:0d:d4:a9:f0:1a:c6:bd:b5:1a:6f:a5:c5:ae:e4:
d2:40:50:fd:28:3d:86:87:65:f2:39:a6:68:8e:e3:
f1:b9:9b:0f:e4:42:88:17:71:72:4d:2f:51:17:37:
08:1e:45:97:d7:c0:00:a1:46:ae:b8:98:de:5d:67:
c8:84:31:f0:0b:23:30:3c:dd:37:98:e1:4a:26:01:
59:b5:00:7d:aa:18:a7:07:4f:68:0d:6c:ee:3d:72:
70:ff:af:57:27:50:d0:01:af:c0:09:18:25:20:00:
4c:9d:28:6d:dd:3c:42:3a:95:7a:fe:a5:bf:52:db:
f8:15:1d:d5:d3:9e:f2:19:ad:e4:00:29:a7:9f:7d:
a6:e8:99:93:bd:5d:46:fb:b9:79:53:9b:6d:3b:a3:
87:76:cd:2a:73:a0:01:b5:0c:1c:e3:1d:21:9d:ca:
0e:c2:bd:64:ab:32:56:b0:66:56:4f:87:bb:0e:3a:
ba:f6:d7:0a:5d:41:5b:3b:bb:2e:58:56:bb:fc:03:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:55:FF:58:66:1D:45:C9:C8:F5:54:2B:D4:F8:2C:19:45:B1:33:3B
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d8:16:f0:6a:ef:ee:d8:4a:f1:54:fb:2c:1d:2c:be:2f:54:
99:e3:e3:09:9a:ce:27:17:3e:5c:50:a5:80:93:b6:65:a6:c9:
df:10:26:bf:06:a0:a0:26:29:42:9c:19:e5:7a:39:c8:3d:23:
cd:87:c3:05:c6:4c:be:d5:db:c1:77:96:8b:d0:11:a3:e4:7c:
f0:0b:93:9e:19:1a:e3:3b:7a:46:7e:cf:44:7c:54:2f:22:d1:
15:16:eb:cc:db:e5:9a:2d:70:ce:42:01:5e:fa:f0:b9:32:01:
37:75:8a:2a:89:86:30:29:22:49:7a:ee:62:9e:aa:47:4e:fb:
32:54:6a:f3:c7:23:4f:74:4c:28:70:e6:08:6a:23:34:a8:38:
43:15:3d:ab:f8:d8:40:e7:fe:1b:60:bc:e0:33:5c:26:c1:41:
0c:24:ad:94:02:aa:24:44:65:e9:ee:ba:e8:60:e2:aa:d6:6e:
7b:29:17:f4:99:8f:98:d8:e7:24:fc:1c:50:ec:b0:be:36:94:
ed:e9:90:56:bc:97:80:2e:5c:ef:3c:7d:1b:c1:88:2e:e0:60:
e7:70:4e:32:e5:99:e9:a8:c9:62:6a:df:31:0c:0e:f5:87:3a:
18:03:e0:62:eb:9a:ea:29:d8:82:c8:95:1f:c9:2d:83:b2:ba:
9c:55:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:26:39 2026 by rpki-client