Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: 9Frt0TrZ+GSqSbW0wWSW78roHIUifZIFO/hxNVLBHus=
Subject key identifier: B7:1C:5E:00:DE:5A:3F:44:A4:B9:EB:A6:95:A6:FD:AA:D0:0E:A2:07
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 01A0C70ED55AD46FD13A0DFFB21A2EAE44CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 15DA
Signing time: Tue 22 Sep 2026 03:00:33 +0000
Manifest this update: Tue 22 Sep 2026 03:00:33 +0000
Manifest next update: Wed 23 Sep 2026 03:00:33 +0000
Files and hashes: 1: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (hash: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=)
2: _aGsIkHdm69JuDVPQz7v4_sNbPM.roa (hash: OlUUaLGTOWMuneie8M0isdkVhnsbncnaYj7jEv7cF7I=)
3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: oi+XsEqaiIW9ghMYDvSRs+CDEhzipbIO8Rccsl44GAE=)
4: vZCS-cDmopO-qNxnU9jSVeCrpJg.roa (hash: ojMpU7jstaT9u+/Jymeixtegt7Gz6xXftszxg6yH2ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:d5:5a:d4:6f:d1:3a:0d:ff:b2:1a:2e:ae:44:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Sep 22 03:00:33 2026 GMT
Not After : Sep 23 03:00:33 2026 GMT
Subject: CN=b71c5e00de5a3f44a4b9eba695a6fdaad00ea207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:1d:4a:19:61:e6:25:e3:48:60:96:96:a9:
23:77:1c:65:5e:64:09:14:cd:d4:73:76:a2:1e:20:
85:e9:8b:f1:e8:a1:91:e3:52:57:3c:6d:b4:56:32:
8a:56:76:d0:9a:92:b3:d4:ec:8d:c9:47:46:ae:d6:
ba:8c:10:7b:59:ee:6e:9d:71:be:f3:a6:17:4c:9e:
99:ae:d0:71:60:86:1c:b1:83:21:79:9d:8d:a6:13:
4b:d4:8a:4c:94:d7:3e:f7:82:13:6b:a1:13:22:0a:
3f:aa:28:ce:42:de:ee:b2:9a:fb:a8:7e:9e:17:54:
14:e7:39:63:72:49:fd:b0:8b:38:8f:2e:66:ff:4d:
63:5d:95:ba:40:84:fc:66:6e:bc:28:3e:e5:b0:82:
49:cf:98:f6:c5:17:87:9c:a1:66:4b:a4:b6:35:6a:
41:cf:3f:1d:b6:8a:88:21:46:e4:23:d1:cc:7b:60:
ed:8f:f2:81:b6:66:5f:37:7d:50:85:b5:48:db:56:
6d:53:4f:65:30:e8:83:06:62:8d:71:2e:b4:bc:6e:
c6:bd:c0:1e:29:61:ff:8e:03:d6:67:7b:f5:b4:e7:
75:92:da:17:9c:ea:66:72:b6:81:31:18:65:60:40:
41:09:e1:2d:e1:53:65:37:35:1b:a1:ff:58:32:99:
a8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1C:5E:00:DE:5A:3F:44:A4:B9:EB:A6:95:A6:FD:AA:D0:0E:A2:07
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d1:1d:a3:bc:20:24:40:4d:eb:40:ed:b4:e0:09:b0:bc:45:
05:e4:87:c5:b6:a3:5f:65:0c:9c:07:13:5d:71:c3:9e:89:8a:
16:a9:44:f0:0f:e9:5b:be:7c:93:46:02:b3:2c:1e:df:ae:8b:
2d:54:7e:8b:fb:bc:7d:6f:30:78:64:ec:6c:29:1d:6b:9a:1a:
78:7b:0a:ce:5e:b8:9b:2c:0d:75:76:49:d5:81:45:9e:4e:9a:
5c:53:36:f8:3d:44:50:2c:d5:86:a4:85:08:ca:03:57:04:71:
a7:6f:f0:df:df:d1:78:1a:f4:fa:0a:f9:ce:1e:f8:7a:79:7f:
cd:ac:eb:86:af:34:22:46:5f:6c:80:fd:c7:23:ec:ef:53:5b:
0c:5d:cb:6b:bb:54:10:c4:25:43:eb:fb:d0:da:51:b4:df:c9:
83:3e:9d:a4:39:6f:d5:8a:24:95:2b:9b:6f:18:25:55:d1:a9:
7a:ed:42:75:51:77:fe:5a:6f:cd:3e:cc:8b:fa:0c:21:26:77:
c4:80:a5:43:c9:c4:33:0b:cc:5c:3d:2f:29:55:1e:c8:0f:c4:
a5:b9:de:fc:4d:3d:f7:5c:48:df:0c:35:f9:99:6c:60:cf:09:
f7:5b:5a:88:2a:aa:34:d2:32:99:37:4f:3d:c8:f2:32:82:cc:
77:ea:a0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:38:50 2026 by rpki-client