Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: Mji6u/XlVTMuZJKEpRd2zhVCD9QQI0usQXtuEKfxMGs=
Subject key identifier: 6E:27:7B:F9:24:BA:EE:31:9C:AA:D2:1E:AB:BB:8E:B0:5B:A6:11:F8
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 019CAC4719AC296ADB96D143A6E79D4BA2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0905
Signing time: Mon 02 Mar 2026 02:01:06 +0000
Manifest this update: Mon 02 Mar 2026 02:01:06 +0000
Manifest next update: Tue 03 Mar 2026 02:01:06 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: 18c0g/aXG4gtJPhan6OgW5d9iOA5PCggx9+k8z3h9yQ=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:19:ac:29:6a:db:96:d1:43:a6:e7:9d:4b:a2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Mar 2 02:01:06 2026 GMT
Not After : Mar 3 02:01:06 2026 GMT
Subject: CN=6e277bf924baee319caad21eabbb8eb05ba611f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:19:ef:51:87:52:0f:98:1a:aa:45:7f:7b:
60:62:7a:93:0b:de:b9:fc:c8:32:2d:be:5b:2d:85:
48:f1:18:b0:b2:18:91:a5:74:44:4e:e1:97:a2:02:
0d:c2:28:37:00:b3:9c:24:b8:dc:fe:57:a6:3c:4b:
c2:2f:64:96:15:2e:62:a1:5b:ad:d2:72:f3:ed:2c:
c6:c8:ea:4a:30:9e:66:f9:02:15:90:4e:57:5e:15:
fd:ec:e0:dd:e7:03:6a:8f:76:c1:66:e6:ce:dd:b2:
45:2e:e4:92:ae:2b:34:8f:15:77:9e:83:a9:67:74:
2c:a9:6c:bf:df:6b:0a:f6:f9:05:68:33:08:3b:7a:
0b:7c:cf:8e:6a:53:47:44:48:67:a9:0f:8c:b8:1c:
18:6d:6a:5b:96:6a:40:c0:6a:ff:46:11:07:69:ec:
b0:b8:78:70:d6:7f:c4:f5:1f:50:1d:bf:42:82:58:
11:f0:aa:84:dd:23:6a:19:40:7d:63:95:df:b9:07:
82:e4:a8:b0:cf:bb:3c:1f:15:e0:a8:1c:57:db:21:
49:10:c0:29:2c:01:d8:61:8a:26:4d:eb:92:d2:9c:
b4:d2:c9:8a:e2:29:6d:8c:29:af:93:a7:6d:5f:e9:
d2:8f:e8:19:bc:14:de:f8:d4:31:14:6f:59:b6:95:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:27:7B:F9:24:BA:EE:31:9C:AA:D2:1E:AB:BB:8E:B0:5B:A6:11:F8
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c3:0d:c8:72:6f:6c:1b:77:1f:99:59:f9:b7:a8:60:04:eb:
b1:05:e9:41:ba:9d:58:d5:b0:f2:2b:e1:8c:a9:7b:a2:65:46:
31:f0:22:81:4c:2b:9f:a6:71:d8:23:e0:cc:f0:6f:37:78:af:
d1:74:1d:17:e9:e6:67:23:21:18:20:e7:3e:81:b2:f2:73:7d:
7d:0e:21:80:2d:53:45:72:48:48:84:a5:20:e4:41:e1:2f:64:
97:18:09:34:77:e2:50:ae:09:20:33:3d:03:5f:d3:f0:ae:91:
5f:1f:d9:6a:7b:08:4a:bd:a1:75:34:b2:ca:ca:c3:c2:0b:a1:
95:38:38:39:d5:5d:a8:99:35:7a:4e:27:63:60:32:62:20:58:
dc:47:d0:a0:e0:8d:18:0d:ee:ef:42:f3:2c:bb:cc:ca:f9:9e:
ed:4b:47:60:3b:78:90:52:19:80:1d:5a:8c:cb:69:93:2b:cc:
5c:f4:0e:1b:e7:b5:b6:b5:be:5b:24:4a:6f:6f:dc:41:16:e5:
ac:a1:02:60:1d:b2:7c:03:1f:76:46:59:36:da:7b:da:6d:32:
ac:5a:68:8d:77:5b:ed:f5:f0:dc:45:60:5e:35:cc:67:0b:ea:
d5:a7:20:a9:0a:b2:a4:e3:97:14:02:35:37:b8:0e:3d:50:e3:
26:13:1b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:56 2026 by rpki-client