Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: f50Yg4cI0GwV6u/HGAhU3A0ClyqbZaYs4QWnmOC5ZDg=
Subject key identifier: 2E:AA:C9:FB:14:76:8A:4F:F9:4C:5D:72:AE:94:26:80:58:2B:F1:14
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 019D9C2CA286A8477254335D003B638C9355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 1457
Signing time: Fri 17 Apr 2026 16:01:04 +0000
Manifest this update: Fri 17 Apr 2026 16:01:04 +0000
Manifest next update: Sat 18 Apr 2026 16:01:04 +0000
Files and hashes: 1: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: WvBoOZGChvrAB7sHb3nymeKvYGrfixsCutjvx8MWwpg=)
2: ru9Lv6OqB7V-7WaM7CY9CuYMU9U.roa (hash: pn31EwFoa+kLu5aisTeRHil2IKacpnZCCu4FI8vc0Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:a2:86:a8:47:72:54:33:5d:00:3b:63:8c:93:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Apr 17 16:01:04 2026 GMT
Not After : Apr 18 16:01:04 2026 GMT
Subject: CN=2eaac9fb14768a4ff94c5d72ae942680582bf114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:59:b7:19:de:a1:5a:29:65:74:99:7d:dd:
dd:e4:22:97:fd:73:c2:9b:b7:16:76:23:1d:c8:dd:
b5:b1:c4:e7:1e:fc:2d:31:de:40:9c:69:f3:71:38:
98:ac:60:8f:0e:38:37:b3:81:7f:98:53:7d:43:70:
b7:63:9f:32:9d:e2:08:d2:af:c3:75:c5:a4:b5:ea:
e2:52:2b:da:6e:2e:6e:ff:73:64:cb:32:c7:69:70:
a6:f2:a4:06:2d:24:3a:bd:79:03:fc:bb:aa:08:6d:
5a:94:5d:1a:0c:a8:b5:d4:17:1d:03:a8:c7:af:b5:
78:39:8f:82:34:a9:1f:f8:0b:bc:10:86:e2:39:45:
24:94:43:f6:38:97:9d:d9:e4:d9:05:73:c0:af:e9:
d6:7d:83:03:c0:ed:16:47:fa:f8:92:29:8a:9a:1e:
08:db:a3:d1:40:5d:94:d3:5d:b8:26:34:b7:22:76:
c3:d4:66:b0:0e:6f:ab:93:90:e2:dc:c9:83:c6:40:
55:57:07:2a:8f:14:05:f3:d6:90:8d:ca:0c:31:16:
cc:66:25:92:9c:06:97:96:52:fc:96:92:dd:1b:19:
97:c5:f5:31:d8:87:a1:3c:5c:7b:99:f5:e7:05:70:
85:81:36:36:a6:36:13:b6:c7:bb:32:89:1b:3a:69:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:C9:FB:14:76:8A:4F:F9:4C:5D:72:AE:94:26:80:58:2B:F1:14
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:10:a0:4a:ca:b7:2a:31:9d:3b:dc:e0:9e:f7:88:18:4d:3b:
25:85:f8:06:5c:d4:fc:61:59:57:fa:db:49:a8:20:92:e2:ce:
f2:56:45:f9:48:17:5b:38:f3:d5:f3:0f:38:cd:4f:a3:27:69:
95:8f:ef:4b:c8:8a:5e:e7:1a:01:91:0b:a9:2c:31:64:cf:83:
ca:e1:91:3a:a5:a3:bc:05:29:9c:9c:85:4f:29:1b:ed:b2:c8:
b5:fa:2b:75:67:86:d6:0a:d2:e6:52:4e:5c:71:5c:b5:79:ef:
24:b9:d8:d2:4e:37:a3:2f:48:6a:d8:5d:51:56:5e:18:dd:ae:
11:81:44:6b:81:38:0c:8c:6f:26:0d:d0:c7:2d:b0:10:ee:2a:
c4:a4:9c:49:ea:0f:e1:73:87:c2:c1:43:79:22:c1:37:c4:d8:
7d:d8:a6:f9:43:8f:ab:e1:77:c6:31:23:50:0c:c0:fc:cd:28:
4d:67:5c:fa:17:75:00:81:b9:b1:c7:88:69:17:21:14:50:ed:
0d:71:e8:05:19:0f:0c:dc:54:21:c3:b2:16:75:ab:c4:4b:ba:
91:b6:c1:5c:71:ba:86:c9:e4:68:3d:4b:3b:43:84:04:65:9a:
45:70:8a:34:a9:81:9e:5f:3d:6b:ef:1f:84:2e:6d:e9:04:44:
17:e8:44:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:45:20 2026 by rpki-client