Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: 7FV4DcZA1LIwFKaEAMu4+PHufDS33e3cb7/+Uth2jMk=
Subject key identifier: 52:6F:DC:A0:6B:6D:7B:08:CB:E4:A2:6A:FC:84:D5:B7:20:C1:16:86
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 019F93C8E18799704EBC9A4EAE2310C3DFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0A86
Signing time: Fri 24 Jul 2026 11:00:43 +0000
Manifest this update: Fri 24 Jul 2026 11:00:43 +0000
Manifest next update: Sat 25 Jul 2026 11:00:43 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: 1m4hiK+eGvVhxeNmwsbr3Rb34/XWcxJwJXzG3BzECNA=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:e1:87:99:70:4e:bc:9a:4e:ae:23:10:c3:df:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Jul 24 11:00:43 2026 GMT
Not After : Jul 25 11:00:43 2026 GMT
Subject: CN=526fdca06b6d7b08cbe4a26afc84d5b720c11686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:55:83:fe:7d:45:b9:4c:68:80:bd:40:c0:
25:bb:1f:c5:fd:db:df:e7:7a:15:5e:cd:11:86:52:
15:34:48:12:ed:2d:6a:5c:a8:3d:75:b4:90:ce:b6:
65:cd:aa:4c:2a:5e:70:da:0f:8d:64:8d:54:42:fa:
34:54:f1:db:b2:c1:70:e9:bc:d6:91:27:60:40:00:
4b:64:c9:1e:c3:7e:00:66:14:0c:7c:18:c4:64:2d:
88:fd:09:d9:a5:55:d1:1e:0d:d5:8f:68:53:49:48:
58:4d:b7:99:83:2d:4d:9d:4d:c7:96:cf:2b:b2:41:
a5:24:94:47:1c:70:0f:97:59:c5:b9:02:4a:b6:c6:
4c:0f:dc:b0:a0:0f:34:7d:db:0c:d7:68:c0:b5:ab:
56:e8:f3:17:a8:51:c2:7f:71:e5:78:0b:32:ab:13:
b1:85:f2:be:2d:05:17:c8:7b:0e:be:e7:31:33:85:
dc:65:66:e5:27:91:b8:41:3b:f5:1e:36:2c:25:17:
79:66:0e:4d:46:05:3f:10:c3:b5:1b:d4:00:0a:dc:
97:82:4b:11:86:14:2c:a4:b4:c9:6a:45:24:39:76:
ad:b2:92:89:63:f0:33:e6:92:cd:75:8e:30:d9:2b:
ea:c2:1d:7d:94:73:11:79:59:a3:d7:d4:df:dd:f5:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6F:DC:A0:6B:6D:7B:08:CB:E4:A2:6A:FC:84:D5:B7:20:C1:16:86
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:78:9c:91:f8:f5:de:cb:0d:21:3e:33:f8:4c:6b:cd:b8:7d:
61:62:bb:44:c9:1c:b0:1f:cd:4b:14:f7:2b:26:18:1a:bb:95:
01:5e:2b:9c:af:67:04:79:66:9d:21:99:d0:20:9d:22:3e:1f:
ee:5f:71:51:4b:37:98:ea:19:88:26:89:bc:01:0a:dd:30:2a:
5c:60:4c:6c:a6:ee:4e:19:40:9b:ae:2e:9d:8f:5c:d1:94:7a:
59:db:b0:c3:8c:22:44:bd:a5:92:71:00:21:55:2b:8e:be:ec:
1a:3b:bc:64:f0:56:a3:db:ce:a4:f3:09:27:f4:99:59:10:41:
56:38:e0:5f:6e:a5:b4:5d:9e:6d:0c:4d:e9:3e:bf:40:b0:aa:
0a:60:aa:5d:3d:bd:a2:ec:59:cc:fd:1f:6b:c8:82:e8:6d:c1:
e9:a9:39:94:1d:38:76:04:13:71:71:38:3c:ff:c9:87:93:3b:
fd:e0:70:e2:5c:ff:f3:4d:16:48:9e:55:aa:cf:b3:5b:30:90:
76:b5:85:1f:66:21:5b:dd:6a:37:b1:06:81:87:10:ec:82:65:
59:81:62:ac:d3:ad:c2:4c:57:51:7a:fc:e5:7e:f2:35:e4:dc:
0e:01:b2:6e:ad:c0:65:a5:c8:57:ca:d6:16:d8:8c:ef:ab:e9:
38:88:19:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:49 2026 by rpki-client