Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: So9EhPscOkan+ukiIhjvdYtGRIhftPyIqtiE9uXCA0o=
Subject key identifier: 28:74:1B:A2:C7:C2:EA:8F:C1:EC:00:44:49:C7:12:49:94:77:33:2C
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 01A0D382D2090AF460D0B108FFB824C55B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 1A78
Signing time: Thu 24 Sep 2026 13:02:41 +0000
Manifest this update: Thu 24 Sep 2026 13:02:41 +0000
Manifest next update: Fri 25 Sep 2026 13:02:41 +0000
Files and hashes: 1: SYtSh6MgqpX8fZ4WHojx0wxmwAU.roa (hash: qfAbswAstxuSdJu35mimEN1jiqsDnLeGp+g0coBMNag=)
2: YIp8U7durT_VOWJi51t_EhaEZmc.roa (hash: uqZNroUU2FsZFyQ6iEi3c3DU2XeoL0O/vrop/BVrvjs=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: pIbCcN/DZyWb5RRrgG1xGd8G9mfA3VOIvNcHP7BljPI=)
4: pEE9oryUWOVeetd5uFrgO_cdrpE.roa (hash: jDaM82TLaH8oaB0vSE3Avb/s35Fb5rQ5AgRFhpcBjks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:82:d2:09:0a:f4:60:d0:b1:08:ff:b8:24:c5:5b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Sep 24 13:02:41 2026 GMT
Not After : Sep 25 13:02:41 2026 GMT
Subject: CN=28741ba2c7c2ea8fc1ec004449c712499477332c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:3c:e1:aa:83:e0:0c:d5:c4:49:49:85:50:
fd:be:88:f0:cf:d0:b3:59:67:3a:4f:c1:e7:d1:72:
83:ae:7a:fe:8d:24:36:93:36:df:52:f3:5e:37:ac:
9b:e2:f6:5e:63:50:59:67:b4:57:71:56:53:bf:9e:
d1:1d:49:06:24:59:41:fb:36:da:eb:7a:7c:82:99:
55:e3:0d:c9:01:67:fe:3d:42:6c:af:6e:85:c3:57:
57:1a:6d:6e:e6:ce:09:2a:bb:05:0e:b1:68:66:7a:
c7:df:de:85:00:43:72:77:9a:80:a4:60:57:93:35:
26:9c:b2:ff:05:3d:aa:a6:4c:94:53:a0:f1:8e:15:
f5:b2:b1:48:a4:c8:98:c9:2e:a2:15:f7:60:94:4d:
51:ce:57:9d:68:a7:41:fa:0c:d4:c8:5b:cf:5f:6c:
37:3d:f1:62:ec:26:f7:f9:0b:93:5a:2a:f4:e7:85:
fa:1f:c1:0b:ff:4d:48:85:97:49:0d:0c:36:62:27:
ad:cf:06:f6:cd:c8:40:37:ec:19:1b:f9:fb:24:6b:
bd:a8:ae:1a:5b:54:fb:13:ba:88:13:e4:08:65:27:
63:bc:c4:f8:c4:9e:ed:b6:e7:4a:62:5d:e6:f3:ee:
78:42:37:06:ae:3f:71:73:39:84:7a:92:ff:ac:8e:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:74:1B:A2:C7:C2:EA:8F:C1:EC:00:44:49:C7:12:49:94:77:33:2C
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0c:a3:25:bc:79:68:33:ee:f1:b6:a0:d9:1b:48:ac:32:ad:
4d:05:cc:aa:b0:d9:d6:a6:8a:f6:57:0f:f4:65:84:29:d4:1d:
9f:b8:52:25:fe:5f:0f:ff:cd:1f:4f:0a:09:1a:38:a3:58:4a:
23:84:01:4d:6e:49:e9:55:3d:38:b7:ba:09:f2:f5:5c:87:35:
98:62:bd:49:c4:ee:f5:d9:93:5a:a6:92:14:dc:4f:ae:fb:94:
29:53:25:a6:f9:af:c5:2b:23:55:eb:de:03:3c:0a:26:8e:a0:
ce:33:77:84:16:30:eb:43:7a:c5:46:94:c7:bd:af:92:fc:cd:
85:38:a9:b6:9d:ec:c5:6d:2d:1d:b3:47:f4:87:4f:c3:8a:1d:
96:80:4f:cd:b2:46:2b:87:62:24:06:79:a4:5b:bc:bf:51:69:
3d:1f:3b:ad:7f:81:1f:58:30:53:64:df:ba:ff:fa:d0:b3:ca:
a5:69:20:ba:21:6b:ad:66:5f:ac:48:de:cd:c0:2f:d4:18:48:
02:23:fc:40:ec:b6:14:d2:8a:a1:af:34:48:7c:a2:95:46:61:
b9:35:d4:dc:05:df:a7:d8:ee:99:44:c1:47:76:22:4c:7f:57:
04:d3:e5:9d:4b:4c:ec:c7:8a:8a:0d:72:91:6c:ae:2d:47:01:
d0:8a:a3:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTgtIJCvRg0LEI/7gkxVsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNGQ3NmRkMmY0NjA2OGIwODcxYWQ0NTAwYWM2ZTU3N2Fm
ZTQ2OWMwHhcNMjYwOTI0MTMwMjQxWhcNMjYwOTI1MTMwMjQxWjAzMTEwLwYDVQQD
EygyODc0MWJhMmM3YzJlYThmYzFlYzAwNDQ0OWM3MTI0OTk0NzczMzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFk84aqD4AzVxElJhVD9vojwz9Cz
WWc6T8Hn0XKDrnr+jSQ2kzbfUvNeN6yb4vZeY1BZZ7RXcVZTv57RHUkGJFlB+zba
63p8gplV4w3JAWf+PUJsr26Fw1dXGm1u5s4JKrsFDrFoZnrH396FAENyd5qApGBX
kzUmnLL/BT2qpkyUU6DxjhX1srFIpMiYyS6iFfdglE1RzledaKdB+gzUyFvPX2w3
PfFi7Cb3+QuTWir054X6H8EL/01IhZdJDQw2Yietzwb2zchAN+wZG/n7JGu9qK4a
W1T7E7qIE+QIZSdjvMT4xJ7ttudKYl3m8+54QjcGrj9xczmEepL/rI5m2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCh0G6LHwuqPwewAREnHEkmUdzMsMB8GA1UdIwQY
MBaAFJpNdt0vRgaLCHGtRQCsbld6/kacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQt
NDQ2OTJkYmNjYjMyLzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQtNDQ2OTJkYmNjYjMy
LzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAyjJbx5
aDPu8bag2RtIrDKtTQXMqrDZ1qaK9lcP9GWEKdQdn7hSJf5fD//NH08KCRo4o1hK
I4QBTW5J6VU9OLe6CfL1XIc1mGK9ScTu9dmTWqaSFNxPrvuUKVMlpvmvxSsjVeve
AzwKJo6gzjN3hBYw60N6xUaUx72vkvzNhTiptp3sxW0tHbNH9IdPw4odloBPzbJG
K4diJAZ5pFu8v1FpPR87rX+BH1gwU2Tfuv/60LPKpWkguiFrrWZfrEjezcAv1BhI
AiP8QOy2FNKKoa80SHyilUZhuTXU3AXfp9jumUTBR3YiTH9XBNPlnUtM7MeKig1y
kWyuLUcB0Iqjhw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:29:18 2026 by rpki-client