
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: M9AcfMgwVWoxhYDQrWYe/+hxWbqFU5kcQQDrisWi3bg=
Subject key identifier: 39:59:6B:87:EE:A4:BA:92:08:BE:B2:6B:18:54:09:0D:B3:BD:EF:A0
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 019F848C4DC5054F8C9EB03C54FBEC90A25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 1533
Signing time: Tue 21 Jul 2026 12:00:15 +0000
Manifest this update: Tue 21 Jul 2026 12:00:15 +0000
Manifest next update: Wed 22 Jul 2026 12:00:15 +0000
Files and hashes: 1: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (hash: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=)
2: _aGsIkHdm69JuDVPQz7v4_sNbPM.roa (hash: OlUUaLGTOWMuneie8M0isdkVhnsbncnaYj7jEv7cF7I=)
3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: NaYBeEK/bzoJhP8/oyy8N9Bl0iS/6UxHtGBQeCAgRio=)
4: vZCS-cDmopO-qNxnU9jSVeCrpJg.roa (hash: ojMpU7jstaT9u+/Jymeixtegt7Gz6xXftszxg6yH2ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:4d:c5:05:4f:8c:9e:b0:3c:54:fb:ec:90:a2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Jul 21 12:00:15 2026 GMT
Not After : Jul 22 12:00:15 2026 GMT
Subject: CN=39596b87eea4ba9208beb26b1854090db3bdefa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:94:fb:19:40:0e:ea:b5:67:21:fd:ae:12:
b5:99:1e:8c:46:c2:2d:e9:1f:ee:03:60:a1:b5:52:
3b:dd:8f:6c:e6:cc:e7:37:fa:82:c3:40:33:13:74:
bb:18:59:64:16:0c:ec:f7:c5:51:7d:ac:11:c1:34:
a4:f0:8e:60:9e:15:5c:ff:64:6c:4c:a9:d0:ed:db:
f6:81:b4:f4:f8:94:2a:37:b8:6f:27:90:c0:59:6f:
eb:d8:c0:7f:e3:c9:7d:f3:30:01:6b:fd:3a:03:fc:
53:73:3c:98:c7:41:d1:c7:84:ef:b2:62:41:b9:86:
3e:f4:b6:9b:90:63:be:89:fb:55:cb:35:c3:63:3d:
45:ee:e4:19:03:ee:9c:90:83:b3:f7:f4:17:7e:9c:
bc:88:3c:61:15:33:f8:03:ec:d9:81:b6:da:fd:b0:
e2:c4:8f:14:62:fb:89:90:ec:e4:68:24:35:87:00:
23:87:53:c6:e3:9b:f7:f5:3b:ae:72:fa:ee:42:2c:
53:e2:a5:3c:f6:72:f0:ab:97:50:18:49:47:2a:c5:
26:5d:c6:2c:b4:f6:db:6e:55:1c:bc:7e:9a:ac:04:
ff:ea:2f:4c:ba:76:4b:ab:27:d8:63:da:e8:32:2a:
e4:7d:86:49:22:f8:2e:a7:cc:61:3e:48:46:66:19:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:59:6B:87:EE:A4:BA:92:08:BE:B2:6B:18:54:09:0D:B3:BD:EF:A0
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ff:ca:19:1f:86:b6:07:95:dd:66:40:15:78:77:52:4f:97:
74:bf:00:76:e6:e4:bd:80:b7:ed:0e:2d:0e:54:e8:3f:71:d1:
51:78:42:a0:68:75:40:a0:dc:d9:e2:9d:e3:89:b3:38:54:57:
f8:b5:54:07:f6:94:e2:c1:20:f2:af:95:71:5a:84:ec:e3:13:
e5:93:2f:3b:f1:48:19:41:7a:18:1f:66:bb:f7:cb:74:5f:aa:
7c:99:03:c9:ea:2d:46:bb:ef:7b:a2:a4:0d:d8:2d:60:c1:82:
77:98:0c:fa:a0:e1:34:16:8f:51:79:c8:d8:0d:e7:0c:ce:08:
91:7a:75:0e:87:d8:a6:90:7b:68:26:91:da:43:16:b1:79:ed:
bd:2e:11:a2:bf:f6:ac:a9:0e:c0:20:58:ab:56:6d:8a:26:8b:
d7:d6:85:e9:a0:dd:a5:96:74:29:53:5a:b8:36:8e:13:89:33:
79:51:6d:30:07:f0:09:7c:23:c6:83:6e:a2:9e:e2:f1:5a:a6:
4a:95:35:01:39:82:db:d8:fc:f0:c0:27:ea:b0:a8:8f:33:b1:
2d:cb:61:39:a7:1a:9f:a1:be:ef:f6:1b:ff:02:08:12:88:6c:
af:2b:e4:51:53:ce:b0:12:d4:ee:d2:be:f8:c6:e1:d9:9f:c3:
26:b7:14:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:34:38 2026 by rpki-client