Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
File: pMK1k9mMCS_TCmAepdJEqr08sU0.mft (raw, json)
Hash identifier: pLzcpjvqhbX6dvIouetXrhwWZSjoF+b+fkcvEPT1WeM=
Subject key identifier: 17:A0:14:86:55:37:FE:B2:E6:4C:E3:B1:74:40:D0:B7:A1:F8:65:93
Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Certificate serial: 019D382E6C00457A2616F80CFFCECB90BBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 06:00:59 +0000
Manifest this update: Sun 29 Mar 2026 06:00:59 +0000
Manifest next update: Mon 30 Mar 2026 06:00:59 +0000
Files and hashes: 1: TqluBkd6UQL59Ze0Zq97K0BmVTU.roa (hash: JviIbVzjJLsxCvwAUOWWxAWG+oSpM8WgOJkmQ0ir8uM=)
2: pMK1k9mMCS_TCmAepdJEqr08sU0.crl (hash: 9MGot/hqLEu/8ZNleZMXRis5jg0rWfx6Q2OmHYcw150=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6c:00:45:7a:26:16:f8:0c:ff:ce:cb:90:bb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Validity
Not Before: Mar 29 06:00:59 2026 GMT
Not After : Mar 30 06:00:59 2026 GMT
Subject: CN=17a014865537feb2e64ce3b17440d0b7a1f86593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:d1:14:cd:d6:9e:d9:f3:4c:c2:c7:38:66:
2f:cf:27:ef:3c:87:e7:5e:65:5b:f8:20:35:e7:99:
e5:41:91:5c:68:c1:4f:f1:ff:54:47:9e:aa:df:d9:
41:ae:02:09:7f:8a:b3:0a:ba:0f:3d:b2:56:48:c1:
aa:aa:b4:6c:7d:c0:fd:1c:b7:21:2a:ee:45:1f:ad:
d4:10:63:9a:8e:f8:0e:6e:8a:a5:d4:cd:13:50:c6:
dd:17:50:03:a5:d7:42:0c:fa:76:f8:21:3f:c8:48:
d3:53:81:ce:f5:49:91:c6:4a:e1:62:0c:de:68:4a:
92:bc:03:7f:03:0f:50:e6:aa:fb:dc:de:0f:64:8b:
48:cd:e7:1b:f9:9c:5a:34:15:21:0d:d5:f5:07:1a:
1c:fb:fb:fa:35:51:23:a9:d1:99:79:f3:20:dc:0d:
58:6f:1d:92:fc:b7:43:2d:84:8a:93:9b:7c:9f:ca:
c3:eb:c1:84:f1:fb:c9:69:a6:9f:ac:6a:cf:ec:32:
76:38:a7:f4:aa:08:a9:48:48:41:db:9e:38:07:4d:
10:16:32:e7:e2:a6:4f:61:bc:bf:51:0d:ff:6b:b3:
18:ac:e3:bc:a9:33:95:c4:88:ed:49:3a:cb:94:af:
a6:16:d1:b6:9c:32:04:be:f5:80:c3:01:b8:6a:ab:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A0:14:86:55:37:FE:B2:E6:4C:E3:B1:74:40:D0:B7:A1:F8:65:93
X509v3 Authority Key Identifier:
keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b4:7f:8f:f5:a4:9c:b0:57:dd:c0:ec:11:00:18:cb:be:f8:
65:cd:ac:16:96:53:a2:86:70:8f:1c:c5:12:80:89:bb:6b:05:
a8:4e:18:4c:fa:67:fb:46:9e:e2:51:08:21:fd:b1:0e:ef:a2:
f8:83:69:3e:9b:6b:b8:08:47:e9:41:d7:c0:b7:7e:be:13:92:
82:6a:27:fd:af:78:5e:b8:15:f8:e5:98:85:5c:0f:37:e5:19:
87:d1:7e:22:93:8d:45:ce:1b:3e:2a:2b:a4:77:86:fe:4f:22:
5e:d0:d5:04:cb:64:5a:67:d5:0c:57:3f:03:3d:fc:a9:b9:33:
55:d5:a9:9c:b1:35:16:cb:5a:d1:d5:fa:7e:24:8a:19:a3:5d:
f4:87:54:8d:71:0e:b1:b7:86:d7:6e:99:32:d4:a5:07:ec:45:
83:9a:e3:0e:32:43:aa:1b:cf:85:b4:33:30:38:55:68:ab:34:
e6:87:c9:50:e8:08:56:50:0d:2e:e5:2f:c6:3e:4a:20:ec:65:
ea:40:41:0c:bc:13:14:d2:0b:00:8f:41:b3:a8:ac:9c:b5:c1:
c6:38:ef:02:da:c4:5c:c6:19:dc:9a:a3:c6:f5:ef:de:58:e1:
aa:4d:f4:b8:d6:02:27:88:07:a0:95:5b:7b:14:e1:2b:1b:84:
ab:68:48:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:27 2026 by rpki-client