Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: rmeMB4orA7SnYV2VB2/S+9ORK6RwhCoxYr0Fccu7neE=
Subject key identifier: 22:07:B2:31:90:6E:D2:01:29:BC:F5:D0:6E:9C:E8:F9:34:12:1C:A3
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 01A0C9A212CE4A95249828A646B70AD5FD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 114E
Signing time: Tue 22 Sep 2026 15:00:36 +0000
Manifest this update: Tue 22 Sep 2026 15:00:36 +0000
Manifest next update: Wed 23 Sep 2026 15:00:36 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: lfFHJPKn+vdWVy/laRSV/uVqbt451TbbkSt0AcN+YBg=)
2: W-thWstLj_54HzMDe1CPmkWaZZY.roa (hash: LM0Lib5MmpvXnboN7sbqoV81b7z7jQPCb/hPX5AYcvM=)
3: _a4udz3Wowgk3kz0TQHNdav2CGQ.roa (hash: hiqTVe26hrw7pmofqQ2A/tv62bg85cwYZkNLdMZlYYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:12:ce:4a:95:24:98:28:a6:46:b7:0a:d5:fd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Sep 22 15:00:36 2026 GMT
Not After : Sep 23 15:00:36 2026 GMT
Subject: CN=2207b231906ed20129bcf5d06e9ce8f934121ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:a7:2d:32:91:76:8e:5b:34:e5:2f:5b:c0:
d0:54:69:56:a4:be:74:0c:f8:8d:8d:25:6b:ec:e7:
9b:a8:08:63:bd:d7:c9:6b:63:b9:e6:06:c8:cd:fc:
b2:38:bc:dc:f1:7c:0c:3e:a2:2f:23:e6:c8:14:8c:
55:3b:c0:d7:ea:c2:c5:06:45:38:1e:0f:4f:71:df:
84:2e:90:e3:b2:6b:a5:a3:0c:b7:1f:b8:58:7e:5e:
1f:af:e8:28:a6:71:17:8d:6a:f1:81:9c:d2:29:b5:
65:62:a9:00:d3:bb:3d:21:1e:b6:f0:b8:22:12:d3:
11:16:62:9f:ae:f3:6c:dd:e5:0c:95:e1:23:e2:c4:
92:c2:40:65:ab:82:94:f0:da:90:95:26:14:59:37:
c5:17:c9:a3:2e:27:0e:43:13:d7:26:51:61:39:00:
42:54:ce:10:44:0d:47:e7:7e:14:96:54:b5:4d:90:
e1:32:11:19:b4:1a:d7:f5:95:22:0b:d2:85:fb:69:
fb:15:43:30:fe:02:26:2c:ee:51:e5:62:2f:15:1f:
ac:01:ed:58:a1:9f:bb:00:85:96:e4:f8:15:27:91:
b5:ea:55:a8:2c:4d:93:e6:90:6e:23:ac:66:c6:33:
4f:94:66:87:88:0d:85:36:af:4f:87:1d:3d:c1:6f:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:07:B2:31:90:6E:D2:01:29:BC:F5:D0:6E:9C:E8:F9:34:12:1C:A3
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:21:cc:8c:2e:0e:16:79:19:da:e0:f6:39:d6:7e:0b:84:83:
e8:a0:c4:8c:a8:36:5d:3e:e0:e5:36:f7:ec:0e:52:6e:ae:0c:
ba:a2:80:32:2a:47:99:0d:91:a3:7e:79:2b:02:a8:eb:48:10:
91:20:e8:16:1c:d2:cf:0b:ed:aa:79:75:ce:cc:ea:2f:52:97:
cf:1e:e7:56:5c:df:37:30:de:64:1f:50:06:ca:d2:67:d3:ee:
5c:b1:c2:2a:12:02:45:2d:f7:64:83:9f:e7:ae:d6:4a:60:10:
58:b6:ae:8e:de:df:d9:fd:ea:53:93:60:6c:b0:42:a6:7c:61:
2a:40:70:2f:e2:01:05:51:b1:90:f0:68:7b:f6:88:14:92:a1:
33:97:bf:8f:2b:61:68:aa:bb:86:ef:f9:4f:da:0f:a1:91:2d:
ad:d5:1f:0c:b9:2b:ff:0f:a2:7d:60:89:fe:1d:d0:a8:2d:1e:
f9:48:9c:f2:92:57:ef:b9:96:57:ce:ab:c9:2c:74:d3:c7:27:
ef:cf:c0:85:a3:5a:9b:4b:1a:63:fd:dc:fb:70:5a:fd:6b:9f:
ea:d2:26:5c:f5:e8:7d:c7:82:b2:31:24:c8:59:37:9b:74:25:
08:8e:b2:55:c4:a7:db:bf:6d:51:43:78:bf:27:76:c2:fd:b2:
fa:bc:f9:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJohLOSpUkmCimRrcK1f2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTI3NTgwNjQ5YTk5MmU0MWUzMmNmOGMxMjI0NWUwN2Zm
OWY5YzUwHhcNMjYwOTIyMTUwMDM2WhcNMjYwOTIzMTUwMDM2WjAzMTEwLwYDVQQD
EygyMjA3YjIzMTkwNmVkMjAxMjliY2Y1ZDA2ZTljZThmOTM0MTIxY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E+nLTKRdo5bNOUvW8DQVGlWpL50
DPiNjSVr7OebqAhjvdfJa2O55gbIzfyyOLzc8XwMPqIvI+bIFIxVO8DX6sLFBkU4
Hg9Pcd+ELpDjsmulowy3H7hYfl4fr+gopnEXjWrxgZzSKbVlYqkA07s9IR628Lgi
EtMRFmKfrvNs3eUMleEj4sSSwkBlq4KU8NqQlSYUWTfFF8mjLicOQxPXJlFhOQBC
VM4QRA1H534UllS1TZDhMhEZtBrX9ZUiC9KF+2n7FUMw/gImLO5R5WIvFR+sAe1Y
oZ+7AIWW5PgVJ5G16lWoLE2T5pBuI6xmxjNPlGaHiA2FNq9Phx09wW9fEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIHsjGQbtIBKbz10G6c6Pk0EhyjMB8GA1UdIwQY
MBaAFDCidYBkmpkuQeMs+MEiReB/+fnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMt
ZjU0ODY5OWY5NDdhLzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMtZjU0ODY5OWY5NDdh
LzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiHMjC4O
FnkZ2uD2OdZ+C4SD6KDEjKg2XT7g5Tb37A5Sbq4MuqKAMipHmQ2Ro355KwKo60gQ
kSDoFhzSzwvtqnl1zszqL1KXzx7nVlzfNzDeZB9QBsrSZ9PuXLHCKhICRS33ZIOf
567WSmAQWLaujt7f2f3qU5NgbLBCpnxhKkBwL+IBBVGxkPBoe/aIFJKhM5e/jyth
aKq7hu/5T9oPoZEtrdUfDLkr/w+ifWCJ/h3QqC0e+Uic8pJX77mWV86rySx008cn
78/AhaNam0saY/3c+3Ba/Wuf6tImXPXofceCsjEkyFk3m3QlCI6yVcSn279tUUN4
vyd2wv2y+rz5hg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:38:53 2026 by rpki-client