Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: hg62TpNgwwTZtogviK86mEsVLVZ+gu60v86AvrbBn/Q=
Subject key identifier: 4B:93:58:A8:20:74:ED:FB:40:62:50:AA:5E:D8:88:CA:D1:6A:BC:C7
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 01A0D07FEBE9116B28B2021BA6C6B5AAE7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0B2A
Signing time: Wed 23 Sep 2026 23:00:39 +0000
Manifest this update: Wed 23 Sep 2026 23:00:39 +0000
Manifest next update: Thu 24 Sep 2026 23:00:39 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: l9kN/Ic6y9U5B8Mep+OsoWhdGcxrAK+0PzcEjnhSzGo=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:eb:e9:11:6b:28:b2:02:1b:a6:c6:b5:aa:e7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Sep 23 23:00:39 2026 GMT
Not After : Sep 24 23:00:39 2026 GMT
Subject: CN=4b9358a82074edfb406250aa5ed888cad16abcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:6c:e8:8d:4c:78:46:b1:42:e3:be:c6:71:
cd:ee:f2:e6:c9:96:49:16:2f:d1:30:f2:de:31:cc:
5c:24:b2:56:85:80:a4:da:23:b9:67:a7:c6:78:fd:
5c:72:53:f4:e8:d5:62:93:32:c1:78:fa:4e:a3:40:
8c:b5:a2:61:c1:e0:60:eb:cf:cc:70:22:b2:98:2a:
d3:09:f3:6c:c2:fe:2f:4b:25:75:8d:32:92:e3:8d:
ff:76:31:b1:8d:87:b0:32:b7:68:b4:cb:36:fa:b8:
2b:f6:fd:ee:9f:74:d6:7d:9c:46:94:1f:ef:a5:92:
01:a1:20:6a:87:23:5a:7d:73:2c:56:9c:2e:0c:f3:
a7:35:3b:3b:79:ee:2e:6e:b0:0b:3d:55:a9:47:fc:
4e:80:38:b6:a8:fc:76:aa:da:50:56:9c:ee:d2:e7:
f3:16:a7:67:d7:d5:c2:bc:3d:05:8f:79:4e:60:cc:
75:d1:e5:30:18:e0:1c:0d:c6:48:73:93:86:80:66:
cb:62:cc:c4:86:8a:8d:e7:ee:13:29:e7:48:82:ed:
89:f6:50:cd:74:d1:be:4a:43:15:9d:1c:09:ea:4b:
a1:0d:be:b0:35:26:f4:97:46:5c:c0:34:b0:c9:82:
9b:9b:f5:f0:b9:90:c7:65:5c:8e:61:7c:66:c4:9b:
1f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:93:58:A8:20:74:ED:FB:40:62:50:AA:5E:D8:88:CA:D1:6A:BC:C7
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d4:63:05:6a:2d:fc:d4:40:63:29:ca:2b:30:1f:d6:c8:6b:
7a:25:dd:17:14:d5:fc:6c:05:f4:c9:89:6e:8e:ad:5d:7d:35:
3f:05:b5:21:a7:e1:06:4d:09:47:e0:ba:4b:75:e3:3a:96:80:
2c:f9:c0:16:2f:e5:a9:e1:01:1b:5a:9c:30:cb:27:9e:8f:23:
3d:54:5e:d1:28:d4:3c:48:99:3e:58:8e:06:15:c2:13:bb:0b:
b7:ff:25:0c:80:ac:f9:1d:67:4f:ce:29:e0:c8:81:d7:15:5d:
dd:db:d2:db:ab:fb:42:c9:61:02:e7:19:8e:e9:a8:ce:c3:27:
b6:65:91:65:61:fa:2c:c0:6c:a5:a6:5e:62:ae:bd:b9:ed:6d:
8b:38:68:ca:f1:d8:8c:89:33:30:f0:01:c1:89:9a:ea:cd:a3:
86:7d:87:02:57:20:ea:9b:71:e8:a8:2b:92:44:06:25:6a:d1:
65:0f:e5:9f:c9:9b:3d:b4:d9:4d:63:bc:86:87:77:7a:94:da:
bb:3e:e4:af:41:a7:1f:59:9f:43:b0:52:6e:68:62:8e:6f:ff:
41:a9:bd:fd:62:67:14:e6:98:9f:50:ab:1c:b8:75:43:50:f8:
08:f1:ea:3f:e0:19:a9:69:09:42:36:a3:d6:d7:b1:c7:3b:41:
14:34:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:45:06 2026 by rpki-client