Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: vnbilbQ+vuQ7TkTmJ2Agt0bISuWapOT33maNS8UFaKY=
Subject key identifier: B8:4D:AD:57:73:E0:13:F6:B9:80:18:2E:B0:66:C9:D3:A2:83:6A:5B
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 019CAB6B10C639BC07C81E844FA14052BEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 144E
Signing time: Sun 01 Mar 2026 22:00:46 +0000
Manifest this update: Sun 01 Mar 2026 22:00:46 +0000
Manifest next update: Mon 02 Mar 2026 22:00:46 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: bRp+7Yitck4bDF8aL1a1+ZfrW/Goo0JJHE3czAs20CU=)
2: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (hash: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:10:c6:39:bc:07:c8:1e:84:4f:a1:40:52:be:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Mar 1 22:00:46 2026 GMT
Not After : Mar 2 22:00:46 2026 GMT
Subject: CN=b84dad5773e013f6b980182eb066c9d3a2836a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:f8:90:6e:3b:e2:69:ff:65:66:aa:1f:3c:
00:7b:60:36:96:25:df:0e:2e:8a:d6:d6:9f:8b:1d:
0a:82:ee:ad:66:06:06:6e:8f:ee:cb:49:e6:e6:64:
42:8c:b4:8a:19:db:84:a0:ca:b1:18:bc:2f:c1:31:
4c:65:8f:31:8e:b3:4c:4a:89:7f:af:f6:a2:cc:d4:
80:eb:46:0c:88:61:af:ef:9d:8c:98:19:c8:5b:3f:
e1:ca:dc:6e:fe:92:95:e4:99:40:e9:c7:88:4a:7c:
30:fc:4b:6e:de:5a:57:bc:f4:ae:5c:31:fc:2d:94:
42:84:94:ad:22:28:47:9b:47:fe:60:37:92:0b:a9:
6f:15:a6:3e:74:eb:aa:70:fb:8e:7a:8b:7a:29:8d:
5d:42:86:12:bd:d5:1b:fb:98:8a:bb:0c:df:f1:03:
75:99:a5:b3:5d:a7:96:bf:36:f2:d1:7e:63:99:5e:
d0:d2:93:81:c6:8c:f4:63:ea:0d:5d:79:cf:61:f9:
24:9a:44:2c:05:60:06:38:3c:ab:5d:f5:52:06:22:
1e:05:e3:33:a4:2f:a5:d2:32:44:ff:f1:d3:9a:4d:
ff:40:55:5a:ec:81:84:8c:31:a4:f4:d4:4d:b1:ab:
cc:b1:af:cc:50:94:60:e4:ee:25:02:43:4f:ab:d7:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4D:AD:57:73:E0:13:F6:B9:80:18:2E:B0:66:C9:D3:A2:83:6A:5B
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:00:7c:54:11:d5:e2:a6:37:07:0e:98:6c:b6:03:ee:7f:ad:
32:44:26:d4:b8:27:bb:8c:d1:71:01:b1:f1:4c:62:e0:4e:c4:
2e:4b:b5:d5:4e:a8:03:0d:b8:40:66:ac:34:0b:39:d2:8a:1f:
ca:3f:04:b1:f4:d9:e7:33:9c:3b:ca:22:d1:a1:52:56:08:2a:
0a:a7:2f:63:34:e6:ba:89:77:7c:6b:1a:e5:56:6b:04:90:4f:
43:fc:a1:c3:bb:3f:a5:85:2a:d3:57:77:cb:68:3d:f6:66:71:
f9:05:29:69:2f:68:4c:0b:63:5c:4c:58:04:6a:66:46:f7:fe:
b7:f2:fd:35:7d:3c:39:e1:7b:8f:9d:cc:a5:c4:97:45:72:f2:
64:e3:c8:fe:97:7c:f4:78:11:5f:96:9b:04:bb:03:a4:22:9d:
15:23:50:d7:91:6a:c5:ee:61:b5:16:9a:3d:a0:fe:dc:a9:26:
d8:4f:bd:0e:16:bc:62:a1:8a:9e:a0:ab:79:7a:b2:b2:ba:93:
5a:29:7a:cd:d3:38:62:0a:39:77:ec:46:5f:3a:a1:bd:c8:64:
19:7c:81:bc:86:5d:47:6a:34:a4:a7:70:0c:8f:6a:45:e8:ac:
2e:5f:02:1b:48:26:f7:90:bc:12:f4:99:82:d6:ef:42:1c:9a:
2c:53:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:48 2026 by rpki-client