Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
File: pMK1k9mMCS_TCmAepdJEqr08sU0.mft (raw, json)
Hash identifier: NC3oE5CeYti2olR2qxqOYidmZsDZMNuuCu9C2L3wlgY=
Subject key identifier: 93:51:89:45:CD:0E:C5:90:4B:78:0E:8A:69:F8:AB:71:D3:A4:E3:28
Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Certificate serial: 019CAB343E0E61F633964EBF209BE07F6AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
Manifest number: 1241
Signing time: Sun 01 Mar 2026 21:00:53 +0000
Manifest this update: Sun 01 Mar 2026 21:00:53 +0000
Manifest next update: Mon 02 Mar 2026 21:00:53 +0000
Files and hashes: 1: TqluBkd6UQL59Ze0Zq97K0BmVTU.roa (hash: JviIbVzjJLsxCvwAUOWWxAWG+oSpM8WgOJkmQ0ir8uM=)
2: pMK1k9mMCS_TCmAepdJEqr08sU0.crl (hash: uHMJli3JhgaIIg+U7w/rgeSxFKlLjC9VZUDjYSyybvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3e:0e:61:f6:33:96:4e:bf:20:9b:e0:7f:6a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Validity
Not Before: Mar 1 21:00:53 2026 GMT
Not After : Mar 2 21:00:53 2026 GMT
Subject: CN=93518945cd0ec5904b780e8a69f8ab71d3a4e328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:1a:13:8c:9a:af:42:f8:11:71:e4:cb:4e:
87:88:66:95:97:0a:c9:7e:cc:b1:de:25:32:de:6d:
2c:9a:16:94:3b:a1:81:03:a9:1f:5f:6c:1d:a8:7c:
ce:b1:95:e4:e7:75:04:34:30:17:dd:d3:1b:78:b9:
9f:a5:0e:fd:a6:e2:b1:a1:f1:10:44:3f:85:30:38:
8d:aa:c2:cb:05:3d:dd:45:6a:62:50:cc:3d:db:3d:
57:94:d8:38:8b:30:15:f9:b0:09:bd:92:1b:2c:70:
f6:af:29:46:7c:7d:31:95:d8:8b:dd:e2:f8:a3:7e:
d1:c6:30:a4:bc:d7:a5:c7:ec:e4:3e:ee:1d:4c:a2:
38:97:74:14:23:ef:71:7b:7b:31:50:90:1a:f9:b7:
f3:77:a5:5b:f9:e0:7e:03:48:35:da:74:59:1e:be:
01:ab:dc:f1:bc:31:cf:d0:bd:1d:e1:f9:0b:a8:22:
60:0b:f5:ee:4c:2b:d3:8b:c6:5f:dc:89:94:bf:ce:
dd:c1:99:ac:97:fc:5b:3e:29:99:67:69:48:d6:7c:
e9:ad:98:61:6a:5f:73:3f:78:5d:5c:fb:6a:6d:25:
7a:df:8b:da:be:ab:3c:3b:09:5a:03:39:44:71:ab:
3e:39:20:f3:be:25:89:15:b5:fc:3a:d7:cc:10:56:
32:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:51:89:45:CD:0E:C5:90:4B:78:0E:8A:69:F8:AB:71:D3:A4:E3:28
X509v3 Authority Key Identifier:
keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:65:91:4c:73:f0:5c:39:39:2e:d5:d2:df:ee:e1:af:8a:81:
34:1b:60:e0:41:c9:dd:44:82:11:b4:df:14:18:3a:6b:93:16:
a0:19:2a:12:0b:f9:ca:ba:51:5c:60:8e:0f:27:a2:a5:59:ce:
e5:e7:f8:db:67:49:1c:08:f3:8d:de:7e:ad:69:a8:41:dd:fe:
17:8d:4b:9f:b3:d6:4c:70:36:25:46:96:a7:7f:39:cb:9c:08:
ff:17:a5:72:dc:ea:7c:9e:83:39:a1:c0:a3:62:04:53:b5:c1:
a2:f1:5f:5c:00:11:5d:d5:db:32:59:c8:88:87:18:da:bb:5b:
e7:13:5f:2f:b5:7b:21:ce:64:2a:16:bc:f7:29:bb:48:57:21:
8d:31:f9:ed:16:ef:4d:fb:fa:c6:44:a2:a9:c4:a4:24:a2:92:
51:3a:69:9d:b5:56:46:69:9f:54:31:aa:18:56:92:91:d8:63:
e9:d1:17:37:50:5e:08:cc:9c:0b:23:c7:0c:32:3d:dc:68:92:
19:ce:0b:ee:df:d9:6c:3b:77:dd:e5:30:83:7f:d4:c2:b0:dc:
2d:9c:f9:f0:34:57:36:44:44:05:9d:39:3b:27:98:d7:f3:20:
7b:2b:af:85:e1:6b:3e:6f:fc:7a:05:76:39:58:c3:be:86:df:
75:4d:e1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:09 2026 by rpki-client