Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: 4/SLMONptLhwH4NXLyBIpwvZfJ7EwvWZZIb1lGWgkXo=
Subject key identifier: 57:B8:E7:3A:9A:73:AF:5B:08:C5:DC:17:62:0E:3E:66:61:84:60:C6
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 01A13F39B6CB3958986E841F072F2EF789B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 16AD
Signing time: Thu 15 Oct 2026 11:01:49 +0000
Manifest this update: Thu 15 Oct 2026 11:01:49 +0000
Manifest next update: Fri 16 Oct 2026 11:01:49 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: Z0IoY+6Ec+rUFDz5upbfOYcrFm/t2Eg9tBbQbVG5p+E=)
2: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (hash: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo=)
3: tH1Bo7evq-tTidCvwen9559FhFc.roa (hash: 57Hw84SssQf/NBx/FR+pqq4YLkW702V9wsHdAb14cwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:b6:cb:39:58:98:6e:84:1f:07:2f:2e:f7:89:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Oct 15 11:01:49 2026 GMT
Not After : Oct 16 11:01:49 2026 GMT
Subject: CN=57b8e73a9a73af5b08c5dc17620e3e66618460c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e6:32:26:63:04:36:cd:62:ad:b9:25:c8:cf:
75:04:97:51:1d:58:2a:de:34:99:57:ac:24:e7:82:
c8:c6:f7:3d:8a:0c:44:70:a8:46:55:66:93:c3:0f:
a4:3f:96:b4:21:d5:ae:85:15:50:9c:2e:f3:46:a0:
80:d8:37:b2:f9:5e:f3:44:d1:08:98:b3:b0:0e:60:
60:79:6f:a0:0e:53:f6:e9:de:10:d9:04:6a:6a:7d:
f2:ef:ed:1d:48:e2:74:37:52:ae:af:d2:64:d9:dc:
ee:a3:17:f2:c9:e9:9e:78:62:20:6d:63:ea:0d:86:
b7:43:e1:7a:e4:86:ad:bb:2b:54:d2:ce:f0:40:99:
7c:45:9c:c6:9e:4a:7f:d0:32:6e:32:eb:79:7f:40:
f9:04:02:9f:fa:c4:aa:44:ec:5e:00:78:5c:d4:18:
f8:01:de:51:40:9c:d9:0a:e9:69:07:20:a7:42:6c:
01:60:a9:74:32:42:57:3b:e0:14:4d:48:7c:59:7e:
4f:b7:60:15:34:47:18:7c:b9:b0:5b:b5:f9:33:f6:
94:0e:05:5b:48:78:5e:bc:d1:bc:18:a6:0a:1e:aa:
80:02:3d:c8:ca:c5:3a:05:f5:43:11:2d:3d:45:5e:
63:a8:1b:79:18:1f:b2:f2:67:be:57:49:06:89:7c:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B8:E7:3A:9A:73:AF:5B:08:C5:DC:17:62:0E:3E:66:61:84:60:C6
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:9b:2d:f0:7c:ad:94:00:b1:93:eb:0f:44:d3:3c:43:90:e8:
e6:6e:36:87:36:4e:ec:6b:f4:61:9b:fa:69:bd:8b:55:33:60:
74:1a:c0:8a:80:5b:24:25:8a:2c:e4:a4:03:35:d5:98:c5:6d:
a5:f4:4a:7d:fc:56:a7:64:55:dd:57:78:8e:29:53:81:ff:9f:
37:db:b0:f4:0c:7b:1b:29:3f:53:44:7c:c4:8a:43:bc:29:10:
9a:34:bb:09:df:c5:9f:cf:f0:6f:2e:56:d7:bb:38:84:98:4c:
dc:50:4b:2b:ef:58:37:50:92:a6:0a:9b:84:5e:89:87:11:6f:
64:dd:6f:12:76:9d:eb:b2:66:9c:ff:5e:c2:a6:ab:3f:9f:8a:
67:45:c5:79:22:cf:dd:70:31:07:69:36:f9:ca:c3:2c:2c:cc:
69:65:76:91:d2:eb:0c:99:e8:40:0b:a3:9e:b3:09:ab:4c:cf:
a6:24:8e:9d:bc:a5:20:b8:b4:a4:38:e7:d4:d0:01:20:f9:73:
1f:6b:e3:35:9c:b0:c3:dc:13:51:ba:69:4d:7f:8f:42:79:05:
27:9c:b4:66:eb:63:8d:17:80:19:e6:ba:64:ff:c6:21:7e:c9:
bd:3c:46:e0:3e:7c:c1:46:00:e8:4d:bf:c1:c7:9f:dd:96:b8:
bb:cb:cc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:40 2026 by rpki-client