Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: R6hkHnpD027r0wrvHGkAMlPSd8vkhpKLrt50S5KwTJk=
Subject key identifier: 1A:41:36:A7:7E:78:EC:83:EC:63:92:1C:D8:72:CF:56:C0:5A:DC:4D
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 019E1D22D463779AA202015E71E89F5F791B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 09C4
Signing time: Tue 12 May 2026 17:01:22 +0000
Manifest this update: Tue 12 May 2026 17:01:22 +0000
Manifest next update: Wed 13 May 2026 17:01:22 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: t8thaVx3QXjmP6FCSAJ0+WR2VpMVEDpY9h3fIxp1rv8=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:d4:63:77:9a:a2:02:01:5e:71:e8:9f:5f:79:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: May 12 17:01:22 2026 GMT
Not After : May 13 17:01:22 2026 GMT
Subject: CN=1a4136a77e78ec83ec63921cd872cf56c05adc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:dd:25:d5:38:6d:eb:8d:9f:5c:2d:f9:1b:
cb:00:79:d9:19:50:c1:10:da:da:83:c0:f9:53:87:
8c:a2:8c:2e:9d:45:30:f8:ca:d6:48:21:ac:b1:22:
d5:4d:e3:87:a6:00:ab:46:6d:d4:d7:80:47:15:f5:
60:df:ec:7e:35:59:ba:48:65:ed:46:96:c6:86:ee:
b5:07:68:95:22:c7:5c:5f:05:d6:78:74:36:be:ee:
d6:2e:d1:51:e6:c7:0c:27:d9:ce:f7:55:3d:b2:93:
77:c5:e3:83:7d:40:44:53:f4:98:04:37:fe:26:43:
07:82:67:e3:42:3c:e9:8a:41:25:0e:fb:0d:c7:b8:
03:96:ea:7d:6b:53:7d:3a:75:7c:78:b9:82:a4:7c:
52:07:5b:aa:c2:4d:f6:eb:86:6e:80:91:e1:70:ca:
4c:2a:e8:98:59:b6:3c:ca:f9:da:c5:2e:1f:08:7d:
1a:e4:e8:54:d0:81:ea:f1:44:de:1f:1e:93:37:5f:
90:ea:69:21:3e:1e:69:b0:df:3d:2d:33:10:4c:d0:
56:90:3a:98:a6:78:5a:ce:f4:9c:83:05:41:96:70:
b0:30:65:e4:fe:1a:33:37:c7:16:65:69:b0:e9:b4:
31:fc:0e:ef:31:8f:2c:9f:99:1d:c7:99:a3:f2:c1:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:41:36:A7:7E:78:EC:83:EC:63:92:1C:D8:72:CF:56:C0:5A:DC:4D
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3b:dd:3e:54:56:95:cc:09:97:b1:63:f7:4a:05:ad:69:a2:
14:21:74:dd:05:15:3c:af:9a:65:b8:ba:66:61:86:80:f2:1b:
d7:ce:e8:fc:44:3b:e3:03:4e:1d:4d:3d:f5:da:fc:12:9b:6b:
5a:1a:32:a4:7f:df:d0:3b:e1:94:3d:67:48:57:de:c6:0c:17:
12:f0:1d:84:fc:a8:fb:de:8f:37:38:f0:1d:65:7c:81:06:e1:
2c:67:16:4f:7f:90:8b:61:93:33:24:37:a5:d4:68:d3:25:22:
e4:67:96:73:dc:32:85:f8:84:74:ef:3a:65:b9:e3:91:f0:30:
d8:52:5d:92:74:e6:59:95:23:b1:b4:aa:8d:8d:44:9b:63:c8:
0d:c5:45:36:bc:d5:14:01:e9:32:4e:5e:83:c5:57:62:76:91:
67:ea:4e:fa:d0:48:2f:5e:92:5a:ae:34:af:73:51:cf:2e:95:
83:e1:58:61:ec:5a:dc:7d:8a:f2:a8:85:99:89:81:c5:44:cc:
e9:3f:9c:4b:71:7a:ce:c4:43:16:7f:68:f6:55:eb:bb:00:03:
8e:02:76:80:28:2b:1e:f6:5b:12:8d:83:49:fa:2e:21:c0:60:
32:f2:fe:69:71:fc:ee:dc:d6:b4:ae:5a:18:0c:b6:f6:ff:01:
95:c2:4a:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dItRjd5qiAgFeceifX3kbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTM0ZjlkMWRiZDIwYWE4N2ZiMGY2MmJkMmI2YzVlMzBj
NjE0YTIwHhcNMjYwNTEyMTcwMTIyWhcNMjYwNTEzMTcwMTIyWjAzMTEwLwYDVQQD
EygxYTQxMzZhNzdlNzhlYzgzZWM2MzkyMWNkODcyY2Y1NmMwNWFkYzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTPdJdU4beuNn1wt+RvLAHnZGVDB
ENrag8D5U4eMoowunUUw+MrWSCGssSLVTeOHpgCrRm3U14BHFfVg3+x+NVm6SGXt
RpbGhu61B2iVIsdcXwXWeHQ2vu7WLtFR5scMJ9nO91U9spN3xeODfUBEU/SYBDf+
JkMHgmfjQjzpikElDvsNx7gDlup9a1N9OnV8eLmCpHxSB1uqwk3264ZugJHhcMpM
KuiYWbY8yvnaxS4fCH0a5OhU0IHq8UTeHx6TN1+Q6mkhPh5psN89LTMQTNBWkDqY
pnhazvScgwVBlnCwMGXk/hozN8cWZWmw6bQx/A7vMY8sn5kdx5mj8sFmrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpBNqd+eOyD7GOSHNhyz1bAWtxNMB8GA1UdIwQY
MBaAFDCjT50dvSCqh/sPYr0rbF4wxhSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEt
ZWI2NTNkMzYyMmJiLzEvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEtZWI2NTNkMzYyMmJi
LzEvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDvdPlRW
lcwJl7Fj90oFrWmiFCF03QUVPK+aZbi6ZmGGgPIb187o/EQ74wNOHU099dr8Eptr
WhoypH/f0DvhlD1nSFfexgwXEvAdhPyo+96PNzjwHWV8gQbhLGcWT3+Qi2GTMyQ3
pdRo0yUi5GeWc9wyhfiEdO86ZbnjkfAw2FJdknTmWZUjsbSqjY1Em2PIDcVFNrzV
FAHpMk5eg8VXYnaRZ+pO+tBIL16SWq40r3NRzy6Vg+FYYexa3H2K8qiFmYmBxUTM
6T+cS3F6zsRDFn9o9lXruwADjgJ2gCgrHvZbEo2DSfouIcBgMvL+aXH87tzWtK5a
GAy29v8BlcJK7g==
-----END CERTIFICATE-----
Generated at Wed May 13 03:25:19 2026 by rpki-client