Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
File: pMK1k9mMCS_TCmAepdJEqr08sU0.mft (raw, json)
Hash identifier: SG4oJ2o7a2uRjAGS4kCGh1LJ5otIUwISEgXxhPnkJ2E=
Subject key identifier: C9:65:7E:51:0D:C5:0F:93:24:C0:C3:F7:F6:3A:69:8C:EF:69:DC:2F
Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Certificate serial: 019D98BDBEAB6B44E856072E5CD449BE319F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
Manifest number: 12BC
Signing time: Fri 17 Apr 2026 00:01:05 +0000
Manifest this update: Fri 17 Apr 2026 00:01:05 +0000
Manifest next update: Sat 18 Apr 2026 00:01:05 +0000
Files and hashes: 1: TqluBkd6UQL59Ze0Zq97K0BmVTU.roa (hash: JviIbVzjJLsxCvwAUOWWxAWG+oSpM8WgOJkmQ0ir8uM=)
2: pMK1k9mMCS_TCmAepdJEqr08sU0.crl (hash: RmqNgyLAdoDTirI6xYMn9ewoXrhs/WVUi665/SwtB14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:be:ab:6b:44:e8:56:07:2e:5c:d4:49:be:31:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Validity
Not Before: Apr 17 00:01:05 2026 GMT
Not After : Apr 18 00:01:05 2026 GMT
Subject: CN=c9657e510dc50f9324c0c3f7f63a698cef69dc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:cf:53:26:f0:55:0e:65:6d:78:31:54:db:
74:06:2d:4a:ce:ff:ae:1c:4f:02:a5:66:c6:75:6c:
3e:15:3b:7b:bb:9c:46:5f:de:e1:7c:4c:a4:e9:91:
cf:d5:95:2b:c8:bc:54:c6:5c:68:74:d2:35:3d:5a:
15:8d:2c:7f:f7:58:96:bb:09:37:fb:72:8a:85:a3:
90:0f:e2:75:94:8c:99:ea:0e:b6:d3:93:5b:23:66:
4b:aa:5b:a9:30:6c:47:13:7f:c8:d2:a9:c3:c8:a6:
ff:60:07:02:a3:89:5b:2e:f7:63:fc:7e:b7:83:69:
94:35:0b:cd:a9:cf:07:c8:5c:06:8b:3e:48:8d:32:
57:06:89:e9:d9:ce:96:86:93:27:c2:44:12:40:fe:
8e:d1:8e:e8:12:96:c3:d2:f6:c5:ed:f8:cc:d9:e8:
4a:f0:9e:ec:66:69:3f:72:13:1e:4a:e7:b4:a6:47:
56:03:1f:7e:2d:0e:05:e9:2f:d7:be:0c:a1:44:d0:
5a:8c:57:8a:21:a9:d4:19:1d:f5:b2:9f:43:ed:99:
2e:fe:b3:cc:4c:37:0d:78:35:e1:e6:3b:b7:a2:0a:
b2:f2:82:9e:d0:e9:8d:d5:50:33:32:c1:0a:c4:ff:
37:07:8a:dc:e8:78:b9:60:bc:2f:e5:6a:70:47:42:
d7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:65:7E:51:0D:C5:0F:93:24:C0:C3:F7:F6:3A:69:8C:EF:69:DC:2F
X509v3 Authority Key Identifier:
keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6a:a5:b6:de:1b:c6:36:65:35:33:bf:3a:a0:15:2b:6d:b6:
29:1a:45:5e:38:00:26:7c:10:b2:b1:c7:cc:a0:78:72:97:d5:
66:51:a3:67:e1:ff:1b:3e:cd:4f:e0:70:d6:42:17:32:0f:a3:
5c:d5:97:8f:79:ea:13:86:81:fd:75:93:dd:8c:1c:4a:7d:b2:
3f:00:f4:97:35:cc:0e:fb:54:c0:df:56:a6:ed:33:5b:da:4f:
bf:5b:77:37:ce:a3:8c:b1:5a:b3:47:4c:35:b6:0f:85:7b:db:
a4:c6:6c:ce:23:f7:cb:42:7b:60:a1:ea:64:ef:e1:9d:aa:55:
ba:c8:eb:c5:8f:86:b3:95:8c:37:ce:58:89:4e:e7:48:97:33:
3b:cb:da:00:58:ef:e0:99:8d:6a:63:3b:d8:48:e7:af:86:21:
77:5f:b9:1d:b8:82:ce:47:81:e8:5e:af:1c:8d:51:03:a5:39:
b4:ad:70:81:60:8d:27:ff:61:0e:3b:96:54:37:26:9c:2e:ec:
de:69:b9:e7:f2:f3:1f:34:01:d1:97:2e:45:00:8f:0a:90:fe:
b6:30:99:ab:a2:40:46:b0:65:78:a9:fd:b3:ee:ab:a5:89:c4:
0d:27:fe:13:16:05:fe:03:86:1a:73:61:c8:ce:cc:00:47:17:
a3:38:86:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:16 2026 by rpki-client