Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
File: mk-ppgpaJP_mFLbftYgT2SWjsxg.mft (raw, json)
Hash identifier: bYrW93oIiLlpgZJP6Qx2vfFQpUKueEIUCAWDuYdPOWs=
Subject key identifier: D0:04:DA:29:F9:6F:1A:1E:68:1F:63:1B:77:74:39:A1:C2:2F:4A:38
Authority key identifier: 9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
Certificate issuer: /CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Certificate serial: 019CAA2174541F66B392FC0566D19B09ABCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
Manifest number: 0F5B
Signing time: Sun 01 Mar 2026 16:00:44 +0000
Manifest this update: Sun 01 Mar 2026 16:00:44 +0000
Manifest next update: Mon 02 Mar 2026 16:00:44 +0000
Files and hashes: 1: 135bFZLoopnIepwNcNi6B_e5Go8.roa (hash: exHBkaVEfi0kzao9gSKTmFTCSigZ4hNeMaSzc8f+Tpg=)
2: mk-ppgpaJP_mFLbftYgT2SWjsxg.crl (hash: kbHgkU82S+cY8S2ziMA3rqffJtu6YoquGNT/LKUCdmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:74:54:1f:66:b3:92:fc:05:66:d1:9b:09:ab:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Validity
Not Before: Mar 1 16:00:44 2026 GMT
Not After : Mar 2 16:00:44 2026 GMT
Subject: CN=d004da29f96f1a1e681f631b777439a1c22f4a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:22:17:2b:19:a7:50:b2:5d:df:19:54:2b:
16:6e:5d:b1:c5:8f:80:93:04:d1:9c:f1:01:33:66:
21:59:8e:97:cc:83:9e:a7:a9:61:8c:f4:33:3c:4d:
f8:b8:58:45:75:d5:ae:8b:2b:07:48:8c:b6:82:fa:
1a:d7:79:5c:34:bd:be:21:03:c2:14:a1:5f:3e:62:
b1:fc:e3:71:9f:f5:4c:de:e1:64:6b:45:0b:6c:3b:
af:26:c6:93:fb:eb:dc:c0:43:32:c2:f9:25:81:b2:
fb:2e:38:7b:c8:88:42:99:9b:0d:3f:1b:4f:b4:1e:
82:d6:18:4f:f8:16:2b:00:9e:5d:65:8c:db:e2:8e:
f1:68:53:6a:db:08:94:d0:83:22:b3:10:54:f2:1f:
9f:45:7a:67:d7:f2:c3:5d:f0:58:6d:c1:9c:7c:82:
95:10:4d:fd:69:b9:c8:96:b1:bb:8a:12:62:40:79:
ed:cb:72:b1:97:f1:6f:e1:b1:f8:f9:18:9f:aa:22:
7d:e9:b3:7c:cb:c5:ac:5c:07:28:99:c4:d5:70:87:
ae:cb:9e:a2:8a:a7:18:0d:7d:59:e4:06:35:64:98:
ee:ef:4e:97:87:53:72:a9:15:ae:49:15:e6:4a:7a:
83:d9:08:aa:cc:48:7f:e6:ee:03:a2:06:3c:15:80:
42:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:04:DA:29:F9:6F:1A:1E:68:1F:63:1B:77:74:39:A1:C2:2F:4A:38
X509v3 Authority Key Identifier:
keyid:9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a7:7b:88:03:4d:ef:3a:66:9e:1c:fd:25:5b:68:e6:2a:1e:
7e:2e:6b:ce:0d:e0:84:98:17:2c:52:24:05:44:7a:dd:9c:d0:
e2:85:32:7a:e6:a9:b8:58:d3:ad:d8:2f:38:eb:53:64:c7:8f:
de:a2:7b:24:ca:7d:3d:28:57:3a:1e:d3:0a:e7:47:2b:b5:52:
d0:0c:45:94:dd:d2:f4:0b:d3:55:df:3c:14:db:cc:dc:9f:ee:
ae:f4:43:7f:39:8e:0f:87:3a:36:79:46:99:f0:48:44:6f:08:
81:e5:b0:75:61:ce:9f:e6:76:61:11:d3:63:01:06:5d:91:8e:
96:99:a4:3a:87:e5:0a:cd:8b:67:d5:4b:45:c8:02:ab:e7:03:
fc:0b:2e:4c:02:60:ea:9e:30:27:7d:3e:1f:36:1f:05:d2:94:
54:47:02:71:24:36:25:ea:79:2f:14:8f:94:f2:66:f0:7d:b4:
2e:dd:27:ef:ee:36:ad:9d:9c:87:88:62:66:0c:0e:40:aa:26:
69:7e:ef:4b:d2:c8:7b:df:d6:51:3d:f3:16:bc:50:ac:43:f4:
3d:62:e8:7b:d4:40:a8:f4:12:55:d6:8a:fb:a7:19:f3:52:29:
31:26:92:db:98:d0:61:02:9d:2c:94:8a:8a:05:aa:e2:5b:df:
56:0f:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:45 2026 by rpki-client