Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: fpo7Pv+xcB9Hwb1pxELjZJxHfex7P+VIk/FCR4QB2Y8=
Subject key identifier: EB:2B:31:9E:24:6B:F5:2E:BB:07:F0:63:CB:58:A2:7B:96:41:54:C3
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019EC2246C0513A6238FC58DFA3748EEDE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 1041
Signing time: Sat 13 Jun 2026 18:00:27 +0000
Manifest this update: Sat 13 Jun 2026 18:00:27 +0000
Manifest next update: Sun 14 Jun 2026 18:00:27 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: ZTkbm0VSouDoVcHwfY4VZSlB5N9NARfrH04UqeAOf+0=)
2: W-thWstLj_54HzMDe1CPmkWaZZY.roa (hash: LM0Lib5MmpvXnboN7sbqoV81b7z7jQPCb/hPX5AYcvM=)
3: _a4udz3Wowgk3kz0TQHNdav2CGQ.roa (hash: hiqTVe26hrw7pmofqQ2A/tv62bg85cwYZkNLdMZlYYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:6c:05:13:a6:23:8f:c5:8d:fa:37:48:ee:de:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Jun 13 18:00:27 2026 GMT
Not After : Jun 14 18:00:27 2026 GMT
Subject: CN=eb2b319e246bf52ebb07f063cb58a27b964154c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:99:a3:1f:05:32:54:3e:0f:ac:a5:12:98:
84:1c:e7:4b:8f:14:c0:5a:1d:d4:bf:40:38:7c:55:
9e:be:0a:2b:15:3a:4e:45:45:05:a7:c3:af:97:9f:
4d:ba:0e:4a:8e:b7:71:64:03:01:ec:be:09:4a:74:
d9:84:82:3c:20:2a:d8:bf:eb:42:87:ed:6c:7b:35:
de:c4:33:d1:8e:d9:e3:44:2c:c7:12:5c:af:9c:bf:
5e:15:9a:d2:03:e3:c4:2c:55:9c:85:fb:f5:aa:e0:
68:c5:61:41:de:52:17:3b:3c:ec:f6:80:5f:e7:3d:
e0:45:9c:85:ac:de:d5:af:97:d4:6c:dd:2b:ec:8f:
e5:79:65:fc:be:fb:1d:35:0f:ab:f3:86:81:61:42:
fa:91:a7:52:ec:2c:39:3d:5e:84:f7:ef:96:85:20:
4d:e0:e3:8c:3f:b3:d5:8b:bb:10:98:54:00:6d:7f:
10:d2:05:0c:73:50:d2:d9:7c:38:68:86:5e:27:2d:
df:a8:62:11:6b:5d:d6:71:e1:ab:41:40:df:2d:7b:
76:f3:d3:5b:66:23:d5:8a:e0:a9:3c:fc:36:31:05:
62:c8:8e:87:77:8a:22:09:6b:78:c1:70:6b:13:5b:
b5:ca:34:3a:2a:77:10:8c:5b:39:d6:0f:39:55:a5:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2B:31:9E:24:6B:F5:2E:BB:07:F0:63:CB:58:A2:7B:96:41:54:C3
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ea:f1:17:4f:06:e1:e0:23:80:2b:c5:a9:7c:b6:f9:34:cc:
1e:26:b6:71:2c:37:d4:5b:65:36:3c:5e:25:16:ab:0a:18:f8:
a0:6a:6a:23:8b:42:c1:5d:6c:ab:57:9f:fa:7c:d7:c9:84:7b:
45:d9:62:92:62:e4:76:24:78:e0:96:1c:58:ee:6b:ab:fb:fa:
46:62:09:af:c3:37:95:b0:42:a1:cf:24:bc:79:20:6b:13:ad:
9f:16:c4:ba:66:9d:2f:21:8e:88:34:7d:55:38:30:d1:81:6a:
c6:a2:7d:e6:c3:09:a9:57:44:bf:8f:0a:6b:5d:b6:7b:84:cf:
3c:4b:27:fd:e0:1b:a8:ac:d9:9a:8b:56:35:fb:32:6a:f2:f9:
26:da:6b:85:f4:4e:c6:1a:64:a6:c1:15:23:cc:25:1f:95:9f:
50:2e:c3:1f:65:92:c2:2a:4b:19:a6:a1:d8:14:ad:8c:bc:ca:
a3:b6:d6:9c:54:08:62:14:b6:9f:7f:e0:4b:ff:da:a9:c5:cc:
30:86:32:8d:05:11:dd:3b:5f:b8:8c:6c:d8:73:2d:c9:49:f6:
51:f4:1e:13:6c:de:4d:83:c3:43:ad:84:39:8b:b9:00:0e:5d:
bf:dc:4a:cd:09:73:8e:a3:56:aa:18:28:02:8f:44:80:5a:9e:
7f:fb:82:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:15:59 2026 by rpki-client