Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: /ULSMl+iylb26UGUyqBdk9ZjvD7QKJLqgg0azIDISAo=
Subject key identifier: 0B:6B:4F:E3:97:55:F7:2A:82:B9:3E:7D:D9:E1:98:21:21:72:D7:1E
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 019CAB6AFAF7355310A113349C3AFD4DE5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 1851
Signing time: Sun 01 Mar 2026 22:00:40 +0000
Manifest this update: Sun 01 Mar 2026 22:00:40 +0000
Manifest next update: Mon 02 Mar 2026 22:00:40 +0000
Files and hashes: 1: SYtSh6MgqpX8fZ4WHojx0wxmwAU.roa (hash: qfAbswAstxuSdJu35mimEN1jiqsDnLeGp+g0coBMNag=)
2: YIp8U7durT_VOWJi51t_EhaEZmc.roa (hash: uqZNroUU2FsZFyQ6iEi3c3DU2XeoL0O/vrop/BVrvjs=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: r1PTHFFTr3ifMSQqSQ1ZDJJtJk2UvEURs1pm0z5V1Lg=)
4: pEE9oryUWOVeetd5uFrgO_cdrpE.roa (hash: jDaM82TLaH8oaB0vSE3Avb/s35Fb5rQ5AgRFhpcBjks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:fa:f7:35:53:10:a1:13:34:9c:3a:fd:4d:e5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Mar 1 22:00:40 2026 GMT
Not After : Mar 2 22:00:40 2026 GMT
Subject: CN=0b6b4fe39755f72a82b93e7dd9e198212172d71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:13:0b:a9:86:1b:bb:14:94:d8:f5:25:a8:
79:b9:a4:a1:0e:2a:1f:bb:2e:53:cb:ca:15:9c:29:
3f:34:16:e9:56:23:1c:bb:89:0c:c2:a9:81:3c:0e:
98:e9:05:f6:d9:e4:0a:d6:63:13:ab:fe:b9:d7:c1:
de:75:f5:95:d3:b2:32:12:23:e3:e0:17:50:47:e8:
cd:08:51:b5:ef:e4:6f:4c:63:ac:1b:38:67:31:6f:
df:76:1b:1e:11:28:e4:e1:a3:51:2b:e7:69:77:cb:
56:d8:05:9a:b5:97:e2:3e:99:66:4d:eb:a0:b4:dc:
03:d4:04:1f:a0:ec:0e:ab:2f:a4:b1:63:84:bf:8d:
da:c4:86:b0:54:2d:b6:4e:b0:fb:c1:36:97:71:a5:
2b:6e:bd:3b:22:fc:d3:0b:56:59:ad:6b:24:d7:2b:
50:22:1e:1b:c2:4d:e8:6c:d1:d9:5a:b5:b3:61:87:
e2:b6:0c:4e:a3:33:34:a6:7a:6c:aa:6e:b1:49:a2:
1c:f6:8d:21:42:a7:f9:40:1a:84:de:38:83:02:7b:
f3:0d:22:9b:b7:fc:31:75:5f:4a:17:f4:2e:8a:79:
75:e4:23:87:46:25:b4:44:09:7f:b6:90:b9:c2:d6:
5d:0c:d6:4a:be:c7:a1:d9:aa:24:3e:be:dc:f9:70:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6B:4F:E3:97:55:F7:2A:82:B9:3E:7D:D9:E1:98:21:21:72:D7:1E
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bb:4a:d0:6e:ae:fc:98:7d:f2:41:31:c7:f0:d4:9c:a7:0a:
37:cd:f3:8f:77:03:c2:53:52:d4:b2:1a:ca:f5:34:f6:19:61:
e9:d9:37:c9:39:b5:7c:ee:64:02:b3:3b:c9:8c:40:8d:e3:ff:
93:0a:94:c6:1a:38:39:c4:ae:a3:02:75:1a:45:79:62:bb:ca:
9c:e7:04:f9:9b:e7:fe:55:26:9a:ff:4f:07:d0:d6:43:bd:c1:
27:ac:bb:d5:3f:96:65:b2:2b:0f:4a:e7:cf:d2:8f:63:a6:46:
4a:c4:5d:81:e1:85:cb:ed:bb:d7:fc:98:e9:3e:7c:6a:03:cc:
dc:f2:6e:86:42:45:ad:15:40:ae:3c:bc:5c:55:41:bb:70:5a:
31:87:e5:a3:cd:cb:6b:37:52:d3:63:1f:b1:f0:df:54:6c:78:
ef:7f:d2:15:52:2c:f3:88:d4:0a:87:e8:08:aa:65:cc:e7:77:
67:fe:da:76:1b:8b:ec:f8:16:e9:c8:f3:ee:38:16:e3:5d:ab:
43:a2:91:67:4a:4e:aa:a6:73:31:4b:43:b8:ef:50:28:4e:79:
37:d9:ec:a1:56:49:42:23:90:a3:22:43:48:5b:0f:eb:bb:2b:
d4:04:ad:8f:cb:ad:5d:ce:db:95:4e:7a:07:04:a6:6d:5b:02:
ce:94:c8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:26 2026 by rpki-client