Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: 0hRvmupibB3TujorqROVNn42m1/0NlKW0CobKBfqjXg=
Subject key identifier: E1:93:F9:1E:88:93:DC:D9:58:E1:39:3A:4A:76:41:8A:FA:76:B0:1D
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 019D98188B1B06BCFC40088AAA69BB657ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 1432
Signing time: Thu 16 Apr 2026 21:00:38 +0000
Manifest this update: Thu 16 Apr 2026 21:00:38 +0000
Manifest next update: Fri 17 Apr 2026 21:00:38 +0000
Files and hashes: 1: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (hash: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=)
2: ASI3-gM-OYcgvKx41_9-0-MFno8.roa (hash: rSz6ivInpdfIjSJs5vzuNUiUeq90iqCKHwJnYqFONoY=)
3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: K5D+ZuZjfYQOCoGR01LSU0icrMCKq44TOd2bquCWw1E=)
4: vZCS-cDmopO-qNxnU9jSVeCrpJg.roa (hash: ojMpU7jstaT9u+/Jymeixtegt7Gz6xXftszxg6yH2ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:8b:1b:06:bc:fc:40:08:8a:aa:69:bb:65:7a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Apr 16 21:00:38 2026 GMT
Not After : Apr 17 21:00:38 2026 GMT
Subject: CN=e193f91e8893dcd958e1393a4a76418afa76b01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:c1:80:2f:21:62:7b:45:7e:bc:80:03:87:
82:b5:b3:aa:60:ef:c0:1c:93:46:e1:3e:6c:d2:69:
a7:26:fc:ad:f5:76:f2:b6:eb:83:85:a7:8b:a2:15:
0d:e4:ea:b1:ea:f5:94:71:ad:60:a6:4d:28:a0:fe:
10:47:ed:3b:d3:3a:81:1d:b4:70:57:92:a8:2d:61:
a5:db:cf:ba:3a:63:16:87:9a:c8:19:a2:2d:f5:f6:
20:cf:5f:51:7c:6e:c5:42:02:76:9a:01:0f:ba:48:
1d:f8:5c:1b:8e:d7:c9:f0:ef:ea:9e:a9:2f:88:22:
f4:4d:79:d8:61:5c:cc:07:0c:6e:6f:8c:8f:4e:e0:
5b:f8:1f:7a:73:59:91:73:d0:d5:b2:bf:43:3d:a7:
de:01:02:1b:c7:17:50:c7:4e:f5:1a:df:5b:01:fa:
7b:e8:28:d4:36:67:1c:79:f7:71:98:e3:95:89:c9:
12:2d:5a:0d:1c:6c:f4:fc:ef:65:0f:9e:f0:39:3d:
ec:96:7b:8d:7d:63:1f:28:01:5a:82:15:57:93:d3:
d8:97:8e:53:18:ba:5e:a9:25:62:52:62:9d:26:41:
64:76:61:3d:27:6d:ff:67:18:ba:a7:47:d8:06:ae:
de:31:17:23:d9:62:47:6b:72:8a:20:99:eb:65:e4:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:93:F9:1E:88:93:DC:D9:58:E1:39:3A:4A:76:41:8A:FA:76:B0:1D
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d1:b5:2e:ac:68:95:de:45:67:45:91:9d:0b:67:d7:ba:fb:
07:58:74:df:d3:2a:68:01:e3:c7:8f:4b:be:a7:88:9c:a3:1a:
9b:b7:09:02:5d:74:24:d9:32:ff:b0:c0:dc:33:71:60:5d:4e:
00:fd:a0:c6:b3:3f:57:94:68:cf:b6:13:5d:1f:94:7c:a6:6c:
c4:5d:a8:a4:f3:fe:ff:03:89:4d:ed:fe:be:87:97:dd:6c:d2:
9e:12:71:0b:c0:64:7c:91:ac:44:27:97:86:f7:9a:7b:9e:0c:
86:b8:65:fd:87:ac:4a:61:b7:7f:95:b9:d4:4b:49:1c:6b:6e:
19:51:65:79:bf:e4:13:9a:7a:23:ad:75:6a:64:ee:d1:c3:1b:
34:5f:f2:ef:d3:36:25:76:e5:d1:aa:e3:33:28:5c:11:4e:49:
d0:8d:5f:b9:a9:22:6c:51:78:e6:91:8a:92:e6:7f:eb:2b:d5:
08:27:5c:90:12:02:e2:06:10:61:32:3c:d0:71:54:29:a7:bc:
a8:e3:8e:1e:9f:80:55:bf:6c:f5:e6:e3:64:01:bf:34:21:1c:
bd:8f:5b:fc:e7:48:39:14:52:74:17:b3:0b:88:37:cb:dd:0f:
4f:e4:21:bd:5a:52:2b:79:8c:d7:45:03:f9:3b:b8:f4:a2:a2:
16:a0:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:21:52 2026 by rpki-client