Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: wkbb89wqOpV2DGxm6xknYPPpBoHe6qoihem4eY9os4Q=
Subject key identifier: 71:58:3D:13:5D:73:54:45:2E:8D:E1:0E:0E:9B:A0:ED:68:CB:56:19
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 019D98F4A3E3EA5365B93B7BE97A12F14219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 14C9
Signing time: Fri 17 Apr 2026 01:01:02 +0000
Manifest this update: Fri 17 Apr 2026 01:01:02 +0000
Manifest next update: Sat 18 Apr 2026 01:01:02 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: ke3/q+d+A0SiKqZS6EkcUqQPEFnHLoQcvCrClkCsuPw=)
2: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (hash: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a3:e3:ea:53:65:b9:3b:7b:e9:7a:12:f1:42:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Apr 17 01:01:02 2026 GMT
Not After : Apr 18 01:01:02 2026 GMT
Subject: CN=71583d135d7354452e8de10e0e9ba0ed68cb5619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:64:b9:9f:64:84:90:a4:bb:25:76:51:8e:
87:5f:08:29:19:d9:af:97:4d:42:d0:d6:1e:23:1c:
da:5f:35:bd:88:30:48:25:07:97:d4:fa:0f:a7:ce:
39:ed:44:aa:c5:eb:aa:db:60:d9:cc:72:85:a3:98:
df:16:25:07:4e:6c:14:02:bb:f7:bc:b8:54:7a:90:
eb:cd:bd:80:31:2c:2f:16:70:0c:e9:79:53:fb:08:
d3:82:80:f8:c4:95:ed:9f:3d:8b:66:c9:0b:0d:4b:
cc:ce:58:ae:48:f5:d8:6e:43:bc:e0:34:59:aa:41:
56:6b:b8:86:16:45:da:16:a8:64:7b:04:aa:7f:d2:
05:82:7c:f4:72:2d:fc:78:de:b8:bc:15:9c:72:fa:
f3:80:fa:c0:9f:a7:bd:43:08:4c:36:bd:de:02:a4:
7f:71:b7:ae:74:b3:c8:b2:14:51:5a:0f:2b:d0:b7:
1b:89:d3:0e:26:e6:c7:78:b0:7b:cf:2d:90:1b:48:
bc:7b:49:c6:49:74:c2:51:57:79:6a:27:4d:d6:26:
b4:d6:2d:be:ad:ee:e7:10:da:b5:12:e7:48:e9:1a:
b9:59:b3:9d:d6:4f:fe:46:4b:fc:75:3a:31:cd:ad:
23:cc:86:3f:03:e1:ac:67:0c:31:98:f0:19:cb:7b:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:58:3D:13:5D:73:54:45:2E:8D:E1:0E:0E:9B:A0:ED:68:CB:56:19
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f2:cf:88:7b:03:35:0e:9e:5c:01:66:52:3f:db:6f:e5:19:
f6:f8:5f:6c:7e:cb:ca:e7:c7:f8:c8:a1:0f:86:4a:4f:6f:9e:
36:39:c8:64:a0:24:2a:1d:b0:cb:c4:8e:8f:92:01:23:ac:f3:
57:4f:df:4b:a9:62:6b:7e:11:fa:18:1d:fd:58:48:d7:90:57:
16:f0:48:fd:36:67:74:3f:30:fe:b6:a3:6d:81:09:30:d6:a3:
d0:87:8a:db:51:cf:ca:9b:3d:58:16:df:2e:b9:c1:df:de:94:
1a:df:5e:e5:bb:15:1a:ef:d2:2e:df:ce:19:25:4c:ec:f6:d8:
cd:4a:e3:82:b8:fa:28:de:6e:79:83:86:bb:bc:c5:f6:36:11:
9a:7f:a4:86:76:23:69:b1:8d:03:87:7c:00:bb:ae:db:21:27:
c5:4a:37:06:7a:a7:e5:79:ad:f6:db:ab:2e:ee:67:30:33:89:
b3:79:7f:e5:57:e8:d6:09:f4:12:4f:2b:37:61:9a:23:ce:78:
ff:c8:db:f1:b9:f8:9e:74:45:1f:5b:55:95:96:b5:26:1f:41:
ff:6d:47:4e:bb:48:e6:c9:59:72:ef:2b:81:1a:77:0a:b1:43:
c4:e0:21:ce:f8:5c:4c:b6:e8:90:78:b2:51:c0:77:c7:b1:27:
ba:e5:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:10 2026 by rpki-client