Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: 3cT5yZwAzdURWJT71hI6MyEB7HjShg5V7OnzHd6hYTE=
Subject key identifier: 85:2F:7E:99:D7:D0:4F:A4:F5:ED:EE:44:7E:7F:C1:CF:38:6C:87:87
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 019D98F4716D47FDB69E4BEA130308B5D642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 01:00:49 +0000
Manifest this update: Fri 17 Apr 2026 01:00:49 +0000
Manifest next update: Sat 18 Apr 2026 01:00:49 +0000
Files and hashes: 1: SYtSh6MgqpX8fZ4WHojx0wxmwAU.roa (hash: qfAbswAstxuSdJu35mimEN1jiqsDnLeGp+g0coBMNag=)
2: YIp8U7durT_VOWJi51t_EhaEZmc.roa (hash: uqZNroUU2FsZFyQ6iEi3c3DU2XeoL0O/vrop/BVrvjs=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: 24ybImFvUoUtKu1A/lVmIaERYwJArfH8AMsWvut9OVk=)
4: pEE9oryUWOVeetd5uFrgO_cdrpE.roa (hash: jDaM82TLaH8oaB0vSE3Avb/s35Fb5rQ5AgRFhpcBjks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:71:6d:47:fd:b6:9e:4b:ea:13:03:08:b5:d6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Apr 17 01:00:49 2026 GMT
Not After : Apr 18 01:00:49 2026 GMT
Subject: CN=852f7e99d7d04fa4f5edee447e7fc1cf386c8787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:49:32:c2:5f:40:b3:3d:dc:c5:35:0e:37:8d:
96:a8:45:04:c8:85:8e:71:ba:44:b2:bd:d7:b4:f0:
39:ee:ac:ab:3b:b8:30:ae:11:68:d0:82:84:ac:bf:
75:f5:dd:39:c5:8a:c1:42:c9:5d:5d:b2:94:96:9b:
8f:b5:79:1c:a6:a1:c1:02:05:11:73:dd:64:8d:70:
b6:ec:38:75:cc:bb:95:e5:fe:7c:ea:19:36:cc:03:
86:35:17:f1:83:de:f6:ce:92:53:c5:16:8f:52:67:
cd:5f:72:8a:22:91:3b:cf:bc:1e:a7:fd:5b:e4:4b:
e5:a7:a9:e0:3b:22:57:97:9b:f1:2a:b0:62:ad:79:
5f:e2:3a:0a:69:24:ef:cb:4b:08:01:61:90:c9:a7:
4b:5a:ec:47:03:90:fa:e4:71:e1:c3:1c:5b:92:0d:
e1:4c:66:72:30:0f:b7:cd:3b:13:69:e6:07:2d:44:
76:05:2d:f2:5c:55:b0:b9:b8:de:2e:55:97:a7:f7:
90:38:fe:9f:fb:04:d4:01:d7:eb:42:4d:5d:79:00:
4c:1a:f6:73:72:2b:1f:c0:e2:1f:ab:34:ba:e2:b0:
6b:3e:be:6e:a9:5f:62:40:06:fd:a6:6f:4c:d5:e3:
74:e3:21:bc:e8:b0:a8:ba:5c:6d:8d:f2:00:c9:dc:
ec:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2F:7E:99:D7:D0:4F:A4:F5:ED:EE:44:7E:7F:C1:CF:38:6C:87:87
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f4:5f:8b:ed:a2:17:9a:62:60:c3:ac:27:fb:32:87:47:53:
c7:ab:de:63:68:ba:49:78:a8:3f:5c:f5:78:1e:25:b2:4b:78:
76:df:85:23:5b:25:73:df:24:88:d8:1e:e4:21:65:a4:77:b6:
36:72:6a:cd:b3:40:45:3d:76:88:1c:36:06:f2:6e:a0:b7:8c:
e6:11:eb:14:dc:55:04:48:0a:8d:6e:20:ed:b6:09:e3:53:e9:
28:a3:94:b8:bf:99:da:e2:57:48:00:98:3f:19:51:a2:bd:12:
9d:9b:db:08:7e:59:60:2c:c8:f5:01:80:bc:7c:fa:bf:a8:aa:
9b:4e:c9:e7:79:36:39:70:b1:18:29:23:55:34:ec:75:13:46:
70:eb:2b:1c:06:70:84:fc:04:d3:2e:37:37:dc:0f:7c:e5:e0:
17:dd:ca:56:45:bd:f7:8d:c8:7e:cc:dd:75:2d:8b:5b:04:92:
7d:e9:45:dc:7e:04:0e:9d:9a:65:03:12:08:92:8e:04:6c:f1:
8c:33:0d:c7:05:21:be:71:ac:35:0d:ba:74:19:53:b1:99:9b:
ab:99:50:b2:15:7d:08:33:9b:6e:b1:8c:e2:c7:04:3d:4a:6b:
94:a9:17:67:41:31:ae:e4:f3:34:2b:58:b6:03:9d:93:9a:0e:
d4:3b:62:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:42:59 2026 by rpki-client