Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: X6GYKGG3mJlRxLU9NpEC7jCUDGAh6sElvyXbd4NPgPc=
Subject key identifier: 88:CC:1E:0D:AE:91:D5:EB:F0:22:68:88:A6:5D:86:06:0C:FD:8C:AB
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019FA9E348EC66AB8303C60C393983783EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 10B9
Signing time: Tue 28 Jul 2026 18:01:12 +0000
Manifest this update: Tue 28 Jul 2026 18:01:12 +0000
Manifest next update: Wed 29 Jul 2026 18:01:12 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: FzvaLwaCU/jkK9xOW19wh9kvhV0JQ8JHPpbZs6U1XZk=)
2: W-thWstLj_54HzMDe1CPmkWaZZY.roa (hash: LM0Lib5MmpvXnboN7sbqoV81b7z7jQPCb/hPX5AYcvM=)
3: _a4udz3Wowgk3kz0TQHNdav2CGQ.roa (hash: hiqTVe26hrw7pmofqQ2A/tv62bg85cwYZkNLdMZlYYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:48:ec:66:ab:83:03:c6:0c:39:39:83:78:3e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Jul 28 18:01:12 2026 GMT
Not After : Jul 29 18:01:12 2026 GMT
Subject: CN=88cc1e0dae91d5ebf0226888a65d86060cfd8cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:99:f3:24:67:04:f0:1d:9e:7b:c7:5d:90:
09:b8:a3:fa:64:c2:bf:42:2f:41:b2:61:cd:b0:8d:
83:00:6f:43:62:39:f4:09:10:a9:40:90:e3:e3:ac:
8a:f3:45:13:5c:67:3a:cd:27:99:2c:6b:3b:89:f8:
11:4b:63:67:8b:9d:1f:28:72:21:29:3a:61:72:a8:
71:be:b6:21:46:28:3a:c5:e1:12:eb:3c:79:e0:2b:
98:42:99:eb:d1:28:30:36:ef:7c:53:e2:e2:1a:01:
9a:a8:0d:32:fd:1f:63:e5:ae:18:2f:63:eb:15:ae:
d9:3f:42:8a:ef:09:3b:e0:df:54:f0:43:4f:f7:fd:
45:3d:e4:45:cc:ca:d7:09:7c:63:95:c2:ce:4e:2f:
bd:7e:bc:c1:53:ea:5f:38:c1:9a:13:e5:0c:4b:77:
08:63:19:67:ef:c0:66:10:31:01:87:0b:95:b9:60:
41:99:ab:89:ec:60:39:c3:2d:27:81:de:91:a2:d8:
71:b1:34:65:a4:b3:75:91:8a:60:d2:c4:d6:6a:7a:
c9:0c:ab:c1:2d:dc:5e:82:2d:9b:f6:d6:ef:67:53:
4d:0b:fc:11:2c:e7:4a:8f:15:ff:4d:49:f2:9e:8f:
13:13:fe:3c:74:f2:c6:11:3a:49:81:29:92:a0:4a:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CC:1E:0D:AE:91:D5:EB:F0:22:68:88:A6:5D:86:06:0C:FD:8C:AB
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c3:81:af:cb:98:ef:be:15:1b:6f:aa:ef:d5:7e:26:e4:3d:
fa:44:c5:0c:c6:0f:ed:e4:c9:3b:41:09:49:75:da:7e:3d:e7:
6e:fc:7b:0f:f5:ef:8c:19:54:d7:51:09:51:a9:13:0f:ab:1b:
80:65:49:8c:af:f4:d5:08:a6:c7:1b:0d:2d:a0:1e:ea:59:e8:
9f:de:3a:74:a6:14:12:1c:2d:76:de:fd:4d:50:e8:2f:96:a7:
69:61:30:30:6a:89:35:f7:90:2a:9e:8a:e5:e6:cd:5a:9c:0e:
c7:5e:4a:de:7f:21:2b:97:4d:5b:c8:5e:6c:96:0f:d2:68:35:
29:37:f1:e9:57:20:0a:f7:01:9e:5e:2e:a4:c2:2d:0e:87:16:
90:f5:13:65:9b:f8:5e:d1:7b:c4:d3:49:12:a5:bc:d4:76:56:
d7:52:cf:ca:a5:1f:f8:09:a7:02:59:49:f9:30:37:47:ec:91:
95:61:22:10:5f:5e:79:d6:1e:61:5c:a0:83:e3:62:67:c1:7c:
5c:eb:07:ea:8b:b5:58:58:a1:28:d7:00:2f:b4:02:41:e8:9e:
78:42:09:ee:6b:d9:08:ae:72:4e:fb:2f:9b:c2:68:2f:c2:c9:
9f:c1:9a:93:93:15:53:fd:bc:6a:86:d9:84:9f:f7:2c:03:22:
0e:66:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:28 2026 by rpki-client