Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: Pt8comum0QfuiNDmuOWsZL9DVmms8XGu9NJQuCOGVBM=
Subject key identifier: CD:43:B4:6E:BD:23:EC:29:5E:9B:BA:22:00:B2:98:A1:4C:90:74:6F
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 019EC1495BEAF5F5A21FD97B3F7DB75FFABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0A19
Signing time: Sat 13 Jun 2026 14:01:10 +0000
Manifest this update: Sat 13 Jun 2026 14:01:10 +0000
Manifest next update: Sun 14 Jun 2026 14:01:10 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: f3LITSD6+qRHHyKZRlQhBaSvxvgN2xJL8Hkx2LJBDPo=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:5b:ea:f5:f5:a2:1f:d9:7b:3f:7d:b7:5f:fa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Jun 13 14:01:10 2026 GMT
Not After : Jun 14 14:01:10 2026 GMT
Subject: CN=cd43b46ebd23ec295e9bba2200b298a14c90746f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b0:d1:23:d3:2e:e0:b8:f9:9c:d8:14:41:d1:
40:37:36:5d:a8:21:be:8c:96:b4:2f:06:b4:76:ce:
7d:87:07:aa:ec:ef:65:fe:6b:3e:3c:40:f8:6d:10:
e1:ba:cf:9b:5d:b9:8c:5e:d6:7c:fd:57:4a:e3:cd:
b0:d9:d1:8a:ca:0d:0b:38:6a:9e:bf:79:ed:88:f8:
02:8a:33:4f:6a:e0:84:71:d7:e3:d1:46:e4:17:e6:
78:8a:ee:1a:2f:cf:d7:40:42:fe:a9:be:ed:02:2c:
9f:69:dd:a0:be:a8:a3:57:33:0d:4f:5b:ac:10:31:
a1:06:3e:72:50:fb:3d:61:11:d6:b1:da:fc:c7:09:
66:f4:0b:37:95:d6:95:2f:ad:18:0a:10:8e:62:70:
83:0f:4f:89:9b:eb:09:21:74:5f:d4:65:f1:08:7f:
f7:ae:6b:e5:8b:89:fa:ac:3a:c1:c0:5e:1f:fe:4b:
09:ea:81:f1:fd:cd:34:bd:62:3e:65:52:ee:5e:59:
c3:10:39:d9:95:7f:01:9a:4b:80:0c:64:96:9b:1e:
6e:c6:ff:49:88:bd:4b:a2:0f:c7:e2:f3:fc:7c:18:
16:ca:48:01:a6:a5:49:f8:e6:fb:ed:5d:0a:0c:67:
c7:3c:d3:4e:a1:c6:99:9b:2e:48:8b:21:2d:7a:8d:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:43:B4:6E:BD:23:EC:29:5E:9B:BA:22:00:B2:98:A1:4C:90:74:6F
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b6:23:c0:31:f5:98:75:9f:78:44:cc:98:85:91:3d:81:76:
db:d2:2c:d0:eb:ea:93:4c:a0:5a:f2:c0:51:cc:de:3e:f0:d6:
f2:95:f3:02:87:ff:5e:4a:bc:c6:bc:a5:32:5d:fa:42:0c:78:
cb:89:8b:19:f4:ec:82:7e:92:26:d1:5e:58:c8:ba:35:20:01:
3f:1d:c9:ab:62:29:b0:c1:84:ad:51:50:1b:5e:5d:9b:f0:8d:
75:ae:4f:b4:5e:42:4b:84:be:cb:c8:79:c3:55:c1:38:0d:68:
b5:03:20:57:af:d1:b3:db:c7:10:3a:b6:c7:e2:c7:c2:fd:ff:
67:8d:af:dd:fd:b0:9a:36:d8:d5:4d:86:7d:c0:88:07:72:df:
06:96:e5:c2:51:f2:14:fb:42:90:ed:b3:5a:5c:5b:73:6a:e8:
72:b1:26:de:9a:46:c4:56:e1:42:ca:c3:a3:2b:f1:a3:c1:ff:
85:64:81:8e:99:6e:51:fd:21:ba:84:97:48:81:a6:0f:48:0a:
49:06:af:94:2a:9c:a5:a3:60:b0:6f:5c:49:53:6e:51:ad:4e:
8a:e4:46:7a:9b:a8:bb:c8:a9:e4:5b:54:1b:2e:55:91:6c:0a:
69:0a:cd:74:ef:25:a9:06:c8:28:3b:c9:d9:a9:b8:de:25:0c:
a2:4b:39:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:57:11 2026 by rpki-client