Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
File: mkM22h63IW4g7ASn8DHrShtjG7M.mft (raw, json)
Hash identifier: nIxoHBHc7V4c6pdbw5f5NjGZKXjCgf6o5scS1PRmcgg=
Subject key identifier: 97:2C:B1:5F:83:F7:0A:CF:2B:BC:B8:D4:C5:11:0B:9B:65:05:B3:FF
Authority key identifier: 9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
Certificate issuer: /CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Certificate serial: 01A0D4CB85B47C13B941FD98725DB86C5704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 19:01:42 +0000
Manifest this update: Thu 24 Sep 2026 19:01:42 +0000
Manifest next update: Fri 25 Sep 2026 19:01:42 +0000
Files and hashes: 1: KGRZtAAx-sknvQQcwhztrA8NJos.roa (hash: uYCNY8bnQOpiSbQHGpcKZAraJm0QfOSnQkHdbbBpb7U=)
2: mkM22h63IW4g7ASn8DHrShtjG7M.crl (hash: qM1FFTSJuEbe/4xOw/7z6eefDy/ntmN7MTIuIYvsTo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:85:b4:7c:13:b9:41:fd:98:72:5d:b8:6c:57:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Validity
Not Before: Sep 24 19:01:42 2026 GMT
Not After : Sep 25 19:01:42 2026 GMT
Subject: CN=972cb15f83f70acf2bbcb8d4c5110b9b6505b3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:7c:96:bb:32:35:f9:5e:ac:75:bb:b9:63:
0f:9c:32:94:2c:14:7d:7e:70:85:bd:69:a2:99:5a:
62:f5:c6:b0:6a:96:57:f2:c5:d2:df:bb:a0:cb:8d:
22:df:48:bb:c2:81:87:93:7a:3e:7d:a4:90:02:c1:
43:7a:b3:c1:3d:e5:f0:24:33:49:08:ca:c1:6b:b0:
3d:83:b1:ff:44:ef:2d:4f:ab:03:90:e2:56:cb:05:
36:64:89:9e:79:9f:fd:ab:69:d1:c5:49:f9:20:ca:
4c:9c:8d:f0:e9:aa:aa:c4:23:85:89:06:af:5c:f5:
bd:89:42:92:cd:fd:0a:6c:ae:df:de:8a:02:43:bf:
65:f4:8f:3e:07:d9:a5:2f:3a:33:30:56:36:e5:7c:
60:f6:9f:2d:ce:dd:cd:ed:8d:f9:a1:26:a7:47:92:
01:81:ae:87:45:35:f7:a6:0f:a5:85:f1:ba:06:14:
79:30:56:9f:94:73:b9:78:15:ec:fe:7f:6d:08:30:
2d:47:e0:43:0b:c9:ff:bf:70:33:06:17:f3:70:e7:
c9:be:93:c0:ff:c8:f0:59:a3:84:f2:76:16:46:eb:
ba:a3:e4:19:a4:42:78:21:ba:f5:ba:29:2a:98:c5:
23:05:7e:5c:56:a0:ca:ea:30:c1:36:52:22:53:37:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:B1:5F:83:F7:0A:CF:2B:BC:B8:D4:C5:11:0B:9B:65:05:B3:FF
X509v3 Authority Key Identifier:
keyid:9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f4:9b:73:c1:f0:a0:3f:83:60:09:36:f0:e3:07:74:e4:00:
84:a5:9f:56:b0:43:cd:cc:26:b0:85:41:c0:d9:ff:21:8a:2f:
24:c4:aa:86:28:2d:f4:c1:86:c2:ee:38:49:3d:b3:ec:ad:81:
67:bb:50:d9:f3:82:84:6f:36:f9:2e:d1:da:ea:9b:06:0d:31:
24:4d:4d:c7:02:1f:06:2d:5a:30:b9:77:fc:54:27:33:83:03:
99:a5:ef:76:84:06:c0:63:c6:74:0d:b0:5c:f9:14:a9:b9:6d:
d7:55:e2:96:1d:10:bc:26:47:32:6e:ed:20:fd:ea:55:9e:59:
84:c3:bf:39:23:4e:82:a5:45:4c:cf:74:8a:1d:23:2b:d1:6a:
11:ae:1f:fe:ab:26:75:ae:79:67:24:d7:54:d2:0b:13:5a:1d:
55:a8:c6:e1:6d:02:35:38:1b:59:dc:0c:f3:4b:f2:9e:30:d1:
2d:0c:1c:44:5b:7e:09:63:35:dd:30:6d:d8:24:27:a0:61:74:
36:ba:40:97:10:c2:ab:ce:0b:fa:20:fc:2a:e2:46:97:d8:80:
69:e2:b0:27:5f:64:8a:ae:ad:5f:29:bc:11:10:86:f4:ba:99:
3e:df:15:81:d2:87:d1:8e:29:dd:e7:80:6d:e8:d1:f8:44:76:
58:a1:a5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:52:51 2026 by rpki-client