Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
File: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft (raw, json)
Hash identifier: otEN7n9DQRNfboMqR273zWSt7R8JuNAnWFIIKSWV/zU=
Subject key identifier: 5F:98:98:41:A7:38:07:40:08:71:24:C9:04:2B:D9:3B:25:B0:FE:82
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Certificate issuer: /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial: 019ED3F426A03DB833BD616F8DF4737C9D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
Manifest number: 01AA
Signing time: Wed 17 Jun 2026 05:00:53 +0000
Manifest this update: Wed 17 Jun 2026 05:00:53 +0000
Manifest next update: Thu 18 Jun 2026 05:00:53 +0000
Files and hashes: 1: HAvcKkRLr_-FXcfu2XV7UUaU5F8.asa (hash: Ern+cmfZwFsU2HhkvPFkDC0xdjwIG4SYe7YBQ5RzsPs=)
2: iS_RjiJ5hKPzS36a9K6GI2jCpSc.roa (hash: oKmLMmS60dhNLyeJppUGpS47iPqdNIjtFfF23b9zJgg=)
3: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl (hash: AKBtbTe4d6IsQaRCQ+IVaJJd2tYlK9RRIHIRpGZ2LWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f4:26:a0:3d:b8:33:bd:61:6f:8d:f4:73:7c:9d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Validity
Not Before: Jun 17 05:00:53 2026 GMT
Not After : Jun 18 05:00:53 2026 GMT
Subject: CN=5f989841a7380740087124c9042bd93b25b0fe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:c9:5a:44:bf:d8:15:ee:52:e5:4c:cc:86:
ae:c8:e6:13:7f:62:ac:a1:2e:86:85:5b:ee:5d:a3:
56:5a:0d:8a:bf:c1:f7:e0:51:9f:fd:1a:09:83:6d:
9c:61:c6:12:3b:79:14:91:46:af:3d:31:91:5c:1c:
8f:8e:e5:38:bb:6b:df:37:d8:de:11:5d:42:eb:4c:
17:d8:7c:d7:f5:39:45:16:88:4e:a8:94:6b:d3:20:
ab:95:4d:0f:e5:b9:2f:da:cc:35:ac:3c:a2:08:49:
60:e3:bb:c0:36:1f:11:64:22:1a:73:18:c0:41:89:
98:20:c3:53:6e:d4:c6:cf:03:29:28:5d:3a:67:77:
a7:2e:00:55:22:2c:5f:7b:3d:fb:10:d7:ed:66:a1:
bf:45:56:9c:17:e9:af:49:1a:7c:6b:fe:0b:2d:d3:
ab:ba:61:36:49:91:3a:6b:b6:ad:b6:23:b8:94:ef:
9c:09:21:fe:8d:3f:c4:ee:ca:f6:28:00:1a:02:05:
34:20:4c:16:2a:7a:ce:b5:0d:f0:bc:c9:a4:9b:67:
53:18:56:d7:d6:14:b5:f3:6d:54:d1:ba:31:55:43:
6d:52:ae:ff:88:fe:dd:42:7a:4c:f7:9e:54:7d:f8:
ef:d5:69:dc:c6:49:c1:d0:38:ac:4b:44:90:77:96:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:98:98:41:A7:38:07:40:08:71:24:C9:04:2B:D9:3B:25:B0:FE:82
X509v3 Authority Key Identifier:
keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:39:d4:1f:14:af:b4:76:9c:a9:93:9d:ab:97:41:b0:cd:f1:
46:7f:b4:39:39:2d:12:70:a7:07:01:1d:42:ee:de:d9:ab:0a:
df:aa:3f:3c:f1:02:9c:0e:4b:f9:90:f3:ac:10:08:15:7c:61:
7b:79:77:92:a8:21:23:12:76:1a:98:1d:b3:38:7a:a6:54:6e:
18:7e:e1:72:3d:98:0c:1d:93:c0:c9:6b:65:04:c7:26:03:5c:
43:0e:65:43:0c:7e:8a:16:dd:39:ba:d1:06:55:ca:9d:b4:af:
30:44:fa:aa:53:77:ba:39:8d:73:b2:73:ec:34:74:32:d4:d9:
ce:ab:6b:d3:bd:04:61:00:72:08:f1:95:86:9e:e9:e4:0b:63:
41:da:32:c6:1b:46:d8:a7:be:36:1b:e7:b7:71:f4:3e:44:6f:
8a:a9:3f:3e:4d:a8:af:3b:70:73:59:01:c1:00:d2:b4:4c:fd:
b3:98:b9:d8:21:63:41:33:8e:0c:24:fa:74:36:f1:a7:1e:fe:
ca:09:7c:f7:b6:ff:ba:1f:fa:3c:11:05:27:84:df:c2:56:01:
87:60:b6:3e:60:82:ef:bc:fd:65:3e:34:75:d4:55:1f:68:46:
70:bb:3d:67:4e:0f:2e:40:a3:0b:32:8a:20:3e:41:54:90:84:
5d:9d:c4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:17:44 2026 by rpki-client