Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: 10CaFXhjfTBSBEihwhHGJLE3pA+FOTuB+PKOWskya5M=
Subject key identifier: A8:40:A8:11:EF:CF:24:25:E1:54:7A:D8:20:42:E8:FC:C8:EE:0B:D6
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 019CAE35E618ED94F8A23C667470060FF1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0906
Signing time: Mon 02 Mar 2026 11:01:33 +0000
Manifest this update: Mon 02 Mar 2026 11:01:33 +0000
Manifest next update: Tue 03 Mar 2026 11:01:33 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: 32nacBd0E71+srhtPuMYlnG/+PlHFiAiUUA25JkEewM=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:e6:18:ed:94:f8:a2:3c:66:74:70:06:0f:f1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Mar 2 11:01:33 2026 GMT
Not After : Mar 3 11:01:33 2026 GMT
Subject: CN=a840a811efcf2425e1547ad82042e8fcc8ee0bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:a5:61:13:8f:b0:99:d1:26:55:f8:b5:f9:
d8:b4:24:33:02:98:71:0d:e9:5b:8d:97:8c:62:07:
55:c2:ae:ca:ce:6c:00:77:58:a6:56:49:ac:ae:7b:
30:c3:8e:f4:cb:63:fb:48:38:8a:10:16:55:d3:28:
96:0e:24:06:e4:53:78:1b:47:86:52:ba:3a:5f:a2:
6d:0b:32:ff:29:b5:5a:fc:b1:d8:95:70:aa:6e:ca:
cf:2d:bc:aa:a4:d1:0f:51:26:87:31:c3:f5:6f:6e:
c9:ce:f3:f6:af:a6:cf:38:39:bd:f6:51:b3:59:df:
12:c3:38:3f:45:06:a2:b0:51:dd:d9:42:25:85:39:
ee:d6:e5:3b:36:d0:28:32:f3:ab:20:dd:73:b1:7d:
d1:90:df:9e:16:09:54:60:b3:df:4f:8b:68:81:46:
93:27:c3:99:9a:0c:8d:7a:c3:32:a3:b0:5a:a9:6f:
6d:87:0a:c0:88:37:5d:f8:ce:5a:1b:df:b1:9b:aa:
58:68:b1:a4:3d:a4:53:8e:1a:6e:5c:10:8c:6e:43:
0a:4a:38:94:cf:4c:49:22:de:e5:40:d8:6a:01:04:
62:55:03:80:99:52:ab:c3:43:7e:fe:b5:7e:39:ee:
0d:30:6d:a7:4d:7b:7c:5f:1b:06:e5:e1:7f:e8:d1:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:40:A8:11:EF:CF:24:25:E1:54:7A:D8:20:42:E8:FC:C8:EE:0B:D6
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c8:7d:a4:3a:c8:05:08:10:0b:04:82:d1:8f:fa:e2:99:82:
4e:ed:67:ab:c5:40:62:b0:f9:41:be:4f:0f:0c:b7:62:12:b8:
8d:bc:a8:6d:e2:55:4c:e7:39:da:df:f2:c7:d1:12:95:c7:b2:
f8:8d:a2:39:63:5e:ad:c5:31:2e:f1:98:19:0a:c4:31:2f:0e:
76:e2:3e:e9:62:60:f7:ad:ee:f7:94:4c:37:05:81:ab:ab:0f:
76:cb:5a:95:cc:a8:e5:38:c1:dd:cc:eb:75:b6:89:7f:42:c8:
37:68:3b:06:5c:48:9a:12:05:d3:67:29:98:c0:d6:03:9e:8e:
5f:14:e1:7c:27:a5:f8:5e:78:44:ec:36:85:ae:e7:8f:f5:38:
a2:75:1d:60:93:18:77:d8:9b:50:ca:86:85:e7:25:ee:b2:96:
36:8e:bc:96:4f:66:0e:c5:cd:7a:eb:00:1f:71:df:00:0a:e2:
79:75:dc:03:19:75:34:b9:d9:8c:55:85:18:ea:34:ee:72:b2:
2c:37:ad:57:99:52:a7:6d:7a:90:43:f0:57:25:00:d4:67:ae:
c8:ba:05:2d:22:e2:24:06:92:7b:07:9c:11:88:e5:24:67:f7:
a1:5c:55:4c:c6:51:e8:e0:51:39:56:bf:71:55:6a:88:64:c6:
9d:28:5d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:54 2026 by rpki-client