Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: 6PPRN6x3OPaVuKsTOjpyGF+wJ0jnzOfqlVNlePYkBhA=
Subject key identifier: 43:AE:26:EA:41:0C:69:84:75:82:7D:9F:61:41:53:5A:53:AA:90:55
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 019D99D087A21CAA756C867DB2978E6B16F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0980
Signing time: Fri 17 Apr 2026 05:01:13 +0000
Manifest this update: Fri 17 Apr 2026 05:01:13 +0000
Manifest next update: Sat 18 Apr 2026 05:01:13 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: t83UzmbxuSw6u1iPz/aes13ZeZ/pWb5bNNpJxd7FgiA=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:87:a2:1c:aa:75:6c:86:7d:b2:97:8e:6b:16:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Apr 17 05:01:13 2026 GMT
Not After : Apr 18 05:01:13 2026 GMT
Subject: CN=43ae26ea410c698475827d9f6141535a53aa9055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:77:85:a2:c0:e8:89:64:01:bc:01:40:1d:
d9:9a:96:22:23:9b:8a:f9:85:d9:1f:a1:5b:a9:d3:
31:8c:97:b1:ba:8e:d7:87:ec:7f:03:01:d5:d3:af:
f3:7a:29:93:82:00:60:57:10:44:3c:e3:7f:8f:4c:
cb:97:e1:17:39:95:aa:7b:79:d7:e5:bf:ab:9f:da:
1b:37:53:ed:e8:62:ab:30:3f:91:87:8e:87:07:1d:
4b:d0:1c:8c:54:60:72:36:42:99:6d:62:f2:4e:06:
69:07:0a:a6:73:3f:f3:98:92:b0:80:ed:7d:9b:e2:
42:4c:30:b3:b9:8e:83:c3:68:26:04:53:e9:ab:59:
ff:c7:e3:89:28:ab:9b:7d:76:f2:0d:06:7f:bb:08:
c1:22:d8:14:7b:1b:4c:72:e9:09:2b:b9:71:cd:69:
bf:21:39:d1:b3:d9:92:0f:10:10:92:98:51:e6:27:
2c:9d:86:3f:3f:3f:cd:fa:53:30:22:2e:d4:c6:90:
98:53:40:87:ca:51:34:9a:7a:ba:04:cd:fe:19:04:
8b:16:e1:1b:84:05:8a:02:6e:b3:ce:26:ec:dc:62:
44:45:41:fd:a0:5e:ca:ef:96:94:7f:fb:ff:1f:6c:
27:c2:a1:39:1b:b1:1e:b4:9f:8d:cb:3d:26:d8:56:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AE:26:EA:41:0C:69:84:75:82:7D:9F:61:41:53:5A:53:AA:90:55
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b1:c1:09:e2:67:f8:b1:96:71:9f:a2:65:76:ba:68:d5:6e:
73:98:1f:ad:17:ae:4f:19:3d:34:47:90:79:cf:e8:0b:4c:40:
b4:92:8e:b9:72:33:81:ec:d2:86:c9:e5:ff:79:ed:20:09:a8:
ec:21:df:40:ae:eb:de:b0:14:5d:69:b8:55:f9:0f:e7:7f:18:
54:b5:3e:24:10:57:97:18:9b:6b:31:0d:3d:27:eb:0d:21:4c:
84:22:e5:eb:7b:3f:38:e8:6b:38:c6:63:47:71:92:54:1a:de:
64:60:79:15:17:ec:5c:44:60:17:5d:6d:06:bb:f9:a5:fb:05:
ea:02:27:f5:2d:45:28:27:1e:a1:b8:a4:0a:78:98:0d:77:ee:
17:4e:df:34:b9:00:28:2b:03:32:0d:02:f3:2a:22:f7:91:c8:
55:85:85:ad:bf:ec:87:c9:57:2e:00:ea:de:db:8e:e7:97:74:
1a:8e:a2:ff:7c:34:ea:dc:3f:e7:21:b8:0d:66:d5:aa:78:4e:
59:4c:f9:45:0c:70:2b:80:51:ad:97:5d:05:a4:6e:fb:9a:a1:
13:ed:76:b8:26:45:30:65:72:ce:75:0a:a1:95:d5:fd:e5:92:
9e:04:72:a3:24:fb:40:15:52:c4:0b:62:a6:4c:86:e5:b4:c5:
68:69:30:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:55 2026 by rpki-client