Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: X07mT77wY881wDAPNeL8IDUu5hjHTRi0qp4RcBfrxLA=
Subject key identifier: B2:80:BB:28:CA:63:90:63:D2:00:B9:1B:93:BD:C4:D5:19:16:D9:52
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 01A0009342E431EB3D64E73EA3DB14C8E37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 1608
Signing time: Fri 14 Aug 2026 14:00:45 +0000
Manifest this update: Fri 14 Aug 2026 14:00:45 +0000
Manifest next update: Sat 15 Aug 2026 14:00:45 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: C0nWu9rckFpy3H/b6acnz74klfLETBtm/51G5D/NBmY=)
2: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (hash: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo=)
3: tH1Bo7evq-tTidCvwen9559FhFc.roa (hash: 57Hw84SssQf/NBx/FR+pqq4YLkW702V9wsHdAb14cwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:42:e4:31:eb:3d:64:e7:3e:a3:db:14:c8:e3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Aug 14 14:00:45 2026 GMT
Not After : Aug 15 14:00:45 2026 GMT
Subject: CN=b280bb28ca639063d200b91b93bdc4d51916d952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:77:03:b8:66:00:5a:99:fd:79:c8:98:f6:
4a:c5:b2:aa:18:40:4e:90:69:05:94:d4:64:3c:fb:
68:ac:66:a8:5b:f7:d3:3c:98:4e:dd:b7:41:c8:e6:
94:d2:e9:c8:10:cb:a1:56:48:01:03:c8:48:4a:1c:
cd:67:81:83:99:33:58:a9:8e:92:12:f5:cd:5c:23:
f9:9e:85:30:74:2f:28:ae:cf:71:7c:31:0a:a6:4a:
7b:5b:e7:51:0a:5c:17:80:d2:e2:59:d9:3e:7b:b8:
a5:d5:7f:c1:96:24:0c:25:76:70:77:10:f5:ce:32:
fc:53:9e:5e:c8:35:b0:e1:ef:45:1c:38:fe:ad:39:
73:8c:f7:c8:3c:ec:89:91:d6:c2:cd:f1:4f:2a:8f:
c0:39:ab:9c:8e:47:2a:ab:1c:e5:e8:0a:a3:d8:3f:
3f:25:1b:b0:30:98:78:dd:a7:fd:84:c1:06:f9:ad:
7c:19:f2:99:85:61:e4:33:3d:71:8e:63:60:42:61:
9a:c3:54:cb:db:18:1c:bb:3a:08:35:f2:fe:c6:eb:
09:12:56:d9:45:4d:9d:60:35:99:6b:8e:fe:99:c1:
eb:40:a4:12:8c:e0:3d:7a:0f:cb:3f:0d:d8:45:17:
8e:3d:e9:95:c1:fe:6a:b9:68:ce:9f:a6:b1:f1:c2:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:80:BB:28:CA:63:90:63:D2:00:B9:1B:93:BD:C4:D5:19:16:D9:52
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9e:a5:58:33:60:ab:3c:72:f6:24:c1:5d:a4:46:ce:b7:d9:
f5:dc:f4:db:78:d2:60:ed:30:2a:56:d1:42:f3:23:c9:51:99:
6d:1c:88:de:a4:d6:a6:3f:39:47:3b:4a:18:76:eb:8f:63:52:
37:76:41:a8:90:ca:4f:84:cd:e8:f5:2b:99:d9:04:0d:46:0e:
f7:2c:d1:7b:a2:10:85:68:6c:d0:b8:be:05:a0:01:a5:a8:d6:
f0:ca:df:c4:35:5e:a8:ea:36:b5:2e:de:0e:22:09:cf:1e:87:
ea:8d:cb:83:c2:0f:31:fa:f2:32:d6:31:10:a2:48:90:96:a5:
04:93:cf:f6:a7:b8:c2:17:e3:6c:3a:65:b6:46:35:44:8e:91:
d4:52:44:67:0f:88:92:f7:fb:5d:54:0f:9b:27:11:f3:73:80:
45:36:1f:e7:fa:88:08:72:1a:b6:97:c4:aa:38:e7:e7:d1:6f:
0c:60:ac:9e:a2:73:de:e3:25:a8:72:70:b6:92:27:3a:ae:be:
d2:89:e4:e4:09:69:4d:2b:29:9e:ef:f3:a6:04:1d:0a:b1:17:
e1:3b:0c:56:9a:d8:cb:8a:d4:1a:fb:f2:37:42:41:3e:01:48:
a3:7e:f2:cd:19:96:33:d8:c1:9c:78:c9:2f:fb:9a:3a:a9:fe:
8e:67:00:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:48 2026 by rpki-client