Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: 4s8z0fgf8KY/Aa2U0BIPKSRsCS49R6qo9dRzmL0wGfM=
Subject key identifier: 70:B5:D1:FF:A7:11:5C:D5:17:B2:A0:52:D2:76:C2:73:F6:E3:70:90
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 019FAAF5701E4AE6F08C24EB841CE1EED945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0A92
Signing time: Tue 28 Jul 2026 23:00:39 +0000
Manifest this update: Tue 28 Jul 2026 23:00:39 +0000
Manifest next update: Wed 29 Jul 2026 23:00:39 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: 2d9R/ro1GedG9cD+pof89GP+ANT5hgo/gO++cLnYBQI=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:70:1e:4a:e6:f0:8c:24:eb:84:1c:e1:ee:d9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Jul 28 23:00:39 2026 GMT
Not After : Jul 29 23:00:39 2026 GMT
Subject: CN=70b5d1ffa7115cd517b2a052d276c273f6e37090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:ad:9e:2e:b3:b3:26:69:5c:b0:de:dd:e0:
ae:e5:e0:26:50:21:ca:be:09:d2:bb:6a:5b:ef:e1:
d2:f6:7f:6f:da:d5:49:87:eb:2c:39:5e:04:c4:3e:
9b:be:b9:85:4d:02:b4:7f:0f:40:f7:6c:b4:c1:a2:
a8:76:af:39:c1:88:fd:67:37:af:2f:66:a1:b5:1b:
f1:e2:af:a6:0f:97:50:36:64:b0:38:6b:10:8a:55:
31:e7:c0:f1:37:b4:fe:80:27:27:82:94:f4:dd:b7:
81:83:74:de:7c:73:13:e5:99:4b:5a:6d:a0:ef:72:
b4:a0:cf:7e:9e:55:07:21:68:19:4a:ea:2b:9f:43:
3b:10:66:7d:51:82:46:fc:0b:b9:ae:d7:08:28:50:
04:43:4b:35:2b:04:14:f2:ce:53:2f:bc:dc:c4:21:
a3:35:6e:32:d6:65:6b:10:28:43:34:6f:75:28:22:
d6:65:da:34:53:57:8d:b1:34:81:80:e8:e7:8a:3f:
f6:e4:93:67:1f:bf:ac:49:0d:f7:d9:34:1c:2f:49:
f3:75:ca:bc:e5:9b:79:81:4d:01:0b:83:e5:5e:cd:
ed:cd:c7:a2:86:3c:9c:6b:e6:50:77:e3:d8:96:a2:
5e:bd:ce:e5:0d:f0:6d:96:5f:37:61:76:5f:f4:20:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B5:D1:FF:A7:11:5C:D5:17:B2:A0:52:D2:76:C2:73:F6:E3:70:90
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0c:a9:e9:39:3b:b5:32:6c:7b:65:16:41:b3:12:4a:a1:7d:
36:f7:d5:5b:82:08:4c:09:62:50:65:39:d8:c8:97:4f:a2:ac:
ce:4a:bd:ae:fc:e9:e4:f8:bd:62:5c:fb:06:e8:42:26:b2:2b:
3b:e2:f9:e5:e1:0a:8c:ac:a6:94:78:37:09:1d:15:9d:43:45:
fd:f1:46:91:6d:c5:60:0e:1e:c8:64:05:11:e0:09:2b:04:19:
92:c6:e2:9b:0e:3f:07:8c:0e:2f:b3:49:6b:bc:50:8a:ef:86:
cb:4d:6c:50:01:b8:c4:26:05:0e:bb:17:3d:a0:78:8b:8b:92:
58:41:3b:b1:85:5c:c5:86:20:b9:66:fe:58:f5:2e:7d:3a:78:
27:f2:a4:ee:cd:e7:d8:a4:0e:9b:0d:f8:18:82:27:5e:f6:bd:
31:c8:1e:0c:28:a7:34:0e:d5:40:d7:d8:2b:d7:00:8c:90:18:
29:51:02:7f:ad:2b:25:05:75:b0:a4:93:0f:50:82:71:ae:2e:
63:87:23:5a:2f:3c:94:f8:33:a7:f2:7c:a3:94:cd:29:32:bb:
65:ff:7b:3c:af:70:d0:47:d8:29:dc:11:3a:ad:13:7e:cf:32:
33:38:ef:85:db:ac:db:60:2f:52:d6:a2:39:63:2d:f3:b9:ad:
dd:f4:dc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:53 2026 by rpki-client