Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: nSvrFRN0tBUn1fFCzzHPlPOY3FBQXr3pAZiD9/cv0mU=
Subject key identifier: 90:C4:B0:50:50:AD:8D:AD:C4:A6:83:D1:26:03:50:DA:6B:B0:7F:84
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 01A0C77CC85C38DBD8BAF9556F0487599615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 166F
Signing time: Tue 22 Sep 2026 05:00:38 +0000
Manifest this update: Tue 22 Sep 2026 05:00:38 +0000
Manifest next update: Wed 23 Sep 2026 05:00:38 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: rAAg/JkKDt1vaRvc+utTjul9N1X5hTUcj+UdLhaL470=)
2: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (hash: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo=)
3: tH1Bo7evq-tTidCvwen9559FhFc.roa (hash: 57Hw84SssQf/NBx/FR+pqq4YLkW702V9wsHdAb14cwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:c8:5c:38:db:d8:ba:f9:55:6f:04:87:59:96:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Sep 22 05:00:38 2026 GMT
Not After : Sep 23 05:00:38 2026 GMT
Subject: CN=90c4b05050ad8dadc4a683d1260350da6bb07f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d7:c3:94:57:4b:dd:42:50:57:14:14:53:24:
05:c6:c5:6b:42:e0:f7:1c:f4:00:f2:12:4f:01:2f:
fd:0b:18:1d:f5:06:97:2f:d2:3c:9e:ad:35:70:ca:
fd:46:0c:05:67:58:2d:46:a2:db:2e:52:86:f5:a6:
6e:1e:69:0f:e7:f2:8b:b2:b7:80:25:a4:6c:e4:4c:
45:40:a1:9a:37:90:c9:99:88:d4:64:1d:f7:bf:2f:
02:db:3f:2f:a6:8c:52:1e:72:a5:f7:d5:a2:2e:84:
b0:96:5c:9d:8c:28:61:07:00:80:6a:f2:98:ed:44:
06:42:6d:c6:ff:55:79:3b:08:0a:21:31:ca:0e:30:
ca:99:1b:3f:a4:ed:e3:bf:2a:8d:56:4d:51:1f:a0:
80:91:96:04:67:43:e2:1c:d5:01:ca:b7:af:73:1c:
5c:9f:cc:09:e2:c6:ab:77:7a:ec:9c:ce:63:a5:d2:
ec:3b:cf:1d:28:fd:69:16:ce:c1:a5:11:77:92:75:
0a:05:9d:af:58:25:ee:09:98:a6:3f:1e:85:8c:d0:
b3:28:35:7d:a8:e7:f2:fd:e4:2c:9b:87:5c:94:47:
95:87:78:85:3a:96:5e:f4:12:f6:8a:6e:2c:9d:c6:
6a:35:57:43:af:ed:6c:12:d3:b9:5f:3f:49:d8:64:
47:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C4:B0:50:50:AD:8D:AD:C4:A6:83:D1:26:03:50:DA:6B:B0:7F:84
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ca:f1:6f:0f:20:f8:a0:4b:a6:90:66:ea:03:93:ac:93:49:
c2:87:f3:5e:a4:89:42:e5:1d:e7:dc:75:80:24:17:99:23:b4:
09:56:22:25:aa:05:9b:9a:04:02:f7:54:7e:b1:cc:8d:9c:04:
b9:a7:bb:57:dd:24:b1:09:ed:cb:54:3e:26:6c:ed:ec:e8:52:
6a:72:80:48:41:78:e6:cf:3e:71:f8:cd:17:3c:18:41:21:e8:
04:57:07:11:1a:aa:a1:a6:de:2f:34:0f:74:af:34:4d:d8:2d:
9f:d8:5c:ce:bc:67:f4:ec:fb:42:83:be:5c:b5:e8:61:c3:ca:
b8:44:9b:5e:2c:36:e9:cd:1d:74:7f:38:29:39:5e:57:22:70:
0b:6c:ea:2c:ad:39:92:be:bb:82:38:d2:e1:6f:54:bf:1a:33:
07:a1:5e:33:ec:40:38:fb:6f:ca:3d:ec:5e:b3:5d:06:80:77:
ca:47:9e:37:73:c1:54:0f:31:62:b5:74:ea:ae:7a:44:f1:82:
4a:af:59:5f:45:1d:ef:23:9f:35:d9:ee:73:27:81:d4:02:1e:
b3:06:2d:63:f4:5c:84:55:6f:72:2b:88:3e:e7:33:ad:65:4c:
43:d1:63:1c:f4:25:0f:cd:62:9c:fb:ab:ec:cc:28:13:b6:7e:
ad:9c:0f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:49:14 2026 by rpki-client