
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: 95GygwR2+XNFLamv+KQce/dWLAjAiGqbmGD7CmE9BbI=
Subject key identifier: 2E:FD:BB:F2:D2:F5:DA:A1:07:B1:ED:26:12:73:3C:B6:9B:0B:9E:FA
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 019E2F974736F347CA2DEA7757B60A3B0695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 1517
Signing time: Sat 16 May 2026 07:01:43 +0000
Manifest this update: Sat 16 May 2026 07:01:43 +0000
Manifest next update: Sun 17 May 2026 07:01:43 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: iAwUQqzoXx01o3nvvP7XaXFJzotVaMW7yLjC1Et3n/c=)
2: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (hash: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:47:36:f3:47:ca:2d:ea:77:57:b6:0a:3b:06:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: May 16 07:01:43 2026 GMT
Not After : May 17 07:01:43 2026 GMT
Subject: CN=2efdbbf2d2f5daa107b1ed2612733cb69b0b9efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:b8:ba:f0:25:de:44:2a:aa:1b:ce:f6:e6:
7d:42:d3:31:df:82:85:6b:b3:63:67:32:6e:91:d0:
5a:2c:74:21:2f:0f:63:29:86:f7:40:17:5d:43:f2:
48:8e:d3:87:8c:bc:0b:4f:57:98:f9:26:6e:1e:c1:
51:e8:a6:31:de:a0:8a:6b:e0:f0:16:e3:a1:e4:c8:
8c:6b:f3:2e:a2:df:60:74:3f:10:3b:d7:37:a7:06:
a9:e7:8e:32:ea:6b:1a:64:8c:21:0e:3d:07:6c:dd:
be:0c:96:a8:31:ca:01:65:d9:56:23:64:20:b9:39:
a9:20:42:ab:47:15:69:77:16:d3:40:a5:0c:cb:00:
2e:87:d0:0c:81:fd:de:ef:86:82:d7:77:9c:f6:91:
85:a0:be:4e:f3:bb:b7:29:56:89:86:e3:85:03:0d:
28:4e:c6:27:30:43:5c:22:80:51:35:da:69:ff:73:
54:e5:c8:f4:8c:41:77:75:53:f9:4b:ab:47:0f:a8:
a2:33:d5:89:7c:84:ea:0d:50:3f:20:42:23:b4:da:
7d:bb:f0:f1:f3:2e:fb:08:bd:24:b9:d1:e2:c8:22:
35:11:d1:e8:ff:5f:83:92:41:e4:f3:21:78:1f:4e:
26:77:25:7f:4b:74:b6:55:58:88:c5:ac:6d:b8:c7:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FD:BB:F2:D2:F5:DA:A1:07:B1:ED:26:12:73:3C:B6:9B:0B:9E:FA
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9e:ed:de:db:83:ab:a0:66:a0:45:3a:03:0b:b5:2a:8d:7d:
bd:1d:c5:ab:3d:57:95:60:45:18:99:95:3d:26:04:af:eb:31:
d1:4d:b1:5f:4a:cb:0f:be:22:a1:99:e1:13:19:70:a9:d3:6e:
df:84:f7:cf:d0:23:73:b2:95:2c:be:9f:89:d2:30:17:d9:9e:
49:75:d6:fd:24:fd:3a:b6:a6:3e:fd:7c:74:ce:7b:5d:43:90:
87:de:2f:46:6c:ee:d7:a5:90:43:75:9e:53:f8:e6:4d:d4:78:
2e:8a:a7:a4:1f:5f:07:9d:49:97:7b:85:dd:35:59:a1:5b:f7:
10:42:25:ad:c7:d8:4f:50:e3:4a:d4:6f:ce:e1:d9:e8:50:de:
43:6d:33:97:59:d4:f4:28:ae:f8:84:c9:5c:fe:fd:35:13:82:
5c:c9:ea:9f:fa:1e:74:0c:60:5f:80:a9:31:68:a4:42:60:8d:
cd:86:3e:c5:15:7e:8f:24:24:57:0f:c4:67:c1:cd:3e:3c:ee:
94:1f:d5:89:69:77:39:eb:61:b5:e1:75:3e:69:2d:bd:cb:42:
ca:15:4d:04:ae:62:7d:8a:e1:c0:55:c5:3d:af:d9:25:8e:dd:
da:f6:81:35:1b:d3:c6:b4:67:69:6d:d7:16:0b:07:50:7a:8a:
66:84:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:30 2026 by rpki-client