Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: qwwXVUTtDRKOl/6ov4/DCC/sJFmYY4qTsdBNSJqglVA=
Subject key identifier: EA:D2:00:3B:EB:8D:67:DE:3F:4A:A0:79:5C:63:92:1C:EC:7B:F2:BD
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 019CACB47066CBE7B4F2B14FECCC1DE1618D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 13B8
Signing time: Mon 02 Mar 2026 04:00:32 +0000
Manifest this update: Mon 02 Mar 2026 04:00:32 +0000
Manifest next update: Tue 03 Mar 2026 04:00:32 +0000
Files and hashes: 1: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (hash: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=)
2: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: RMEQotCeodRP7ocvSvd7edOhwTwWL92tM01QXwLRJ40=)
3: tdrrEw2QhUroasWZGcJ2TASPuNk.roa (hash: 5qK59vOHIiTj9OvpFdOa8R0zqMTVoz3YO9USMYAJNt4=)
4: vZCS-cDmopO-qNxnU9jSVeCrpJg.roa (hash: ojMpU7jstaT9u+/Jymeixtegt7Gz6xXftszxg6yH2ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:70:66:cb:e7:b4:f2:b1:4f:ec:cc:1d:e1:61:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Mar 2 04:00:32 2026 GMT
Not After : Mar 3 04:00:32 2026 GMT
Subject: CN=ead2003beb8d67de3f4aa0795c63921cec7bf2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:31:a5:a1:23:d9:88:c3:ad:5c:d1:c7:40:
e2:3c:81:df:ea:f9:52:02:72:16:d1:e8:3a:62:eb:
e1:39:ec:cc:51:24:99:67:fd:b6:1e:9e:5d:c6:d1:
b0:1d:69:f7:da:5e:22:62:10:37:96:01:b9:1b:d9:
26:e9:11:9a:73:57:c6:25:1c:93:e5:eb:b4:1c:3a:
94:cb:e1:a6:dc:d7:fb:15:85:57:6e:07:72:44:61:
44:b5:a1:6e:f5:f1:4d:bb:11:9b:0f:a8:e3:a8:79:
3b:c8:07:2b:d4:90:dc:a2:71:55:f4:dd:b4:57:f7:
eb:4b:4c:9d:25:7f:66:48:aa:1e:a5:08:ac:a4:c2:
d7:36:8c:66:0c:17:15:d8:5a:cf:16:0c:ff:f5:6c:
7f:80:e9:24:fd:a8:9d:2f:b5:fb:15:49:93:66:ad:
11:46:79:a4:5d:83:be:e9:08:c0:27:67:d0:a2:de:
59:22:af:d7:d7:68:e0:f3:51:bd:28:4e:60:b3:42:
d9:30:53:02:d0:ad:44:96:6e:64:51:c6:0b:67:b2:
ec:03:d7:bd:33:0d:e9:42:5e:53:13:08:bd:f0:f7:
22:68:6e:b1:55:f8:d1:f1:44:dc:64:ce:4f:0c:38:
43:23:cd:93:de:03:84:1e:d2:e9:7c:24:7b:cb:1d:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:00:3B:EB:8D:67:DE:3F:4A:A0:79:5C:63:92:1C:EC:7B:F2:BD
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c0:6b:7a:dd:a2:90:4a:ca:51:c5:c3:35:31:e9:d1:b5:1c:
fd:3f:ec:31:d7:bd:b9:2e:f3:b6:36:fd:f5:89:43:27:98:6a:
40:5e:95:74:77:39:ab:03:8a:0c:68:05:fb:c8:ac:12:d1:cf:
e0:a5:38:16:1a:ac:b0:25:69:b6:19:f4:65:eb:15:d6:b1:7e:
6e:7d:1c:87:27:03:f3:74:7a:07:29:ff:48:8d:74:cd:38:51:
4e:47:ec:75:47:ef:0f:2d:39:e3:06:eb:db:33:1a:78:18:b1:
b6:6d:f5:bd:ea:16:0a:95:b2:7b:9a:16:0a:7b:6b:c5:78:6e:
4f:b8:ea:b2:e7:d4:31:e8:04:35:30:db:4d:01:44:77:e4:e6:
f5:ca:14:70:f4:75:37:75:91:c0:6b:bb:af:f8:91:3e:99:57:
af:f4:c3:91:89:7d:c5:03:8f:8b:5c:63:17:b9:81:54:0c:a5:
96:79:fd:0f:7b:cf:f3:cc:9c:d5:eb:25:73:b3:81:81:f2:44:
e3:10:a0:6d:6f:e9:62:61:19:7a:3a:d6:2f:70:18:26:bd:f5:
ce:6e:0e:c2:cf:4f:17:7b:c9:96:50:36:3d:e5:6e:5d:8d:bb:
40:01:86:78:14:ee:7b:f8:37:6d:b7:bc:dc:f7:fe:d1:23:24:
1b:89:3f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:23 2026 by rpki-client