Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: k74Ev9ey0zQSv6wRFlK00A8KfkrHUCa5+HFeDSV5Nhk=
Subject key identifier: 3B:B0:8C:00:22:BC:8F:6B:83:17:14:56:7F:36:52:C2:E2:FA:19:8C
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 01A174DDE38911F60D2C9987575D21742215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 1634
Signing time: Sun 25 Oct 2026 21:01:01 +0000
Manifest this update: Sun 25 Oct 2026 21:01:01 +0000
Manifest next update: Mon 26 Oct 2026 21:01:01 +0000
Files and hashes: 1: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (hash: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=)
2: _aGsIkHdm69JuDVPQz7v4_sNbPM.roa (hash: OlUUaLGTOWMuneie8M0isdkVhnsbncnaYj7jEv7cF7I=)
3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: rgJDlBeRpNGH9cWMDlgB9Za301UV0NQQb8SRQl0Aqyo=)
4: vZCS-cDmopO-qNxnU9jSVeCrpJg.roa (hash: ojMpU7jstaT9u+/Jymeixtegt7Gz6xXftszxg6yH2ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:e3:89:11:f6:0d:2c:99:87:57:5d:21:74:22:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Oct 25 21:01:01 2026 GMT
Not After : Oct 26 21:01:01 2026 GMT
Subject: CN=3bb08c0022bc8f6b831714567f3652c2e2fa198c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:d8:d5:b2:b0:8d:59:3c:82:e0:b5:c6:5a:
17:30:31:87:86:6d:57:41:ce:12:dd:3a:f3:83:20:
f1:a6:49:45:6b:78:56:c6:f4:62:e9:5b:bc:3f:bf:
f8:98:8f:5c:34:17:e3:43:9a:4b:ab:61:8e:cc:62:
5b:7a:68:eb:b0:08:a0:da:95:ff:ca:4b:b2:3b:33:
24:fd:ca:d6:a2:82:ed:ce:95:aa:ba:35:3d:55:69:
ea:b3:d5:8a:f2:31:bf:1e:ae:25:17:fc:fc:59:a2:
88:30:c4:e5:f8:96:60:e5:b2:40:a5:91:91:54:da:
e8:42:ac:cc:73:d4:15:16:91:d7:b8:8b:e1:2b:88:
7f:3f:69:a5:99:b8:dc:eb:f9:d1:27:a8:3e:a5:cb:
89:e1:2d:cc:b9:5f:6a:16:6d:a6:ff:d1:3d:c5:9f:
fa:95:36:db:2f:55:f7:b6:48:0f:1c:47:4a:f5:b6:
4c:5c:37:f6:2a:25:5f:1a:0c:18:e7:45:70:26:11:
20:e2:82:f9:26:5e:f2:8a:4c:01:4f:d3:41:0b:f6:
59:84:7e:73:ec:31:88:a8:12:55:ca:c5:ac:ea:dc:
35:fd:45:32:75:ae:9a:3a:5b:b8:0f:d0:86:2f:53:
75:35:70:50:8f:77:fd:a8:79:79:08:1f:9d:0b:02:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B0:8C:00:22:BC:8F:6B:83:17:14:56:7F:36:52:C2:E2:FA:19:8C
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d7:f9:79:1f:c2:90:95:12:d7:b1:80:10:0f:6d:29:5a:46:
2a:95:7c:88:6e:35:3b:71:e2:06:4e:bd:7b:43:34:b5:f9:ee:
e0:a1:52:3b:4e:e9:12:d6:1f:28:c3:ca:ba:5a:33:09:3e:15:
64:f0:e5:bb:c8:bc:d4:d8:f3:17:29:92:c2:19:ff:05:72:9a:
b4:29:45:dd:9a:49:c2:57:e1:3d:c9:28:f0:d5:bd:c0:0e:22:
50:0c:13:d4:83:23:15:e0:f0:c2:a3:20:01:4e:d0:1f:8c:d2:
2c:e7:72:c7:0e:cb:9e:08:08:d4:f5:99:b9:1c:e7:75:e8:42:
50:1c:74:67:e1:91:6e:be:4a:c8:2b:e4:f3:df:4a:ad:07:40:
48:59:c2:a8:28:95:b1:a2:f8:3d:ea:20:5a:29:ac:14:e3:d7:
2e:a0:6d:e5:b9:e9:f3:68:71:c0:73:85:f1:08:89:2a:8e:40:
f5:90:1b:4b:a8:50:50:0d:30:34:03:14:46:7e:d6:e0:a6:ee:
e8:a9:40:2f:fe:54:f1:63:5e:b1:59:3a:49:ee:b5:5f:80:ff:
1c:6a:58:ca:d8:30:91:c1:c8:6e:d0:bd:c0:97:7f:cd:ed:56:
96:74:cb:3e:1d:f6:64:45:09:17:77:8a:fb:4a:a2:74:ba:89:
2b:52:aa:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF03eOJEfYNLJmHV10hdCIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNDhjMWQ4MDA4Y2RjMDU5ZGIwYjI3YWE5NTE0Nzk5YzA2
ZDU0NDMwHhcNMjYxMDI1MjEwMTAxWhcNMjYxMDI2MjEwMTAxWjAzMTEwLwYDVQQD
EygzYmIwOGMwMDIyYmM4ZjZiODMxNzE0NTY3ZjM2NTJjMmUyZmExOThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxLY1bKwjVk8guC1xloXMDGHhm1X
Qc4S3TrzgyDxpklFa3hWxvRi6Vu8P7/4mI9cNBfjQ5pLq2GOzGJbemjrsAig2pX/
ykuyOzMk/crWooLtzpWqujU9VWnqs9WK8jG/Hq4lF/z8WaKIMMTl+JZg5bJApZGR
VNroQqzMc9QVFpHXuIvhK4h/P2mlmbjc6/nRJ6g+pcuJ4S3MuV9qFm2m/9E9xZ/6
lTbbL1X3tkgPHEdK9bZMXDf2KiVfGgwY50VwJhEg4oL5Jl7yikwBT9NBC/ZZhH5z
7DGIqBJVysWs6tw1/UUyda6aOlu4D9CGL1N1NXBQj3f9qHl5CB+dCwLEEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuwjAAivI9rgxcUVn82UsLi+hmMMB8GA1UdIwQY
MBaAFJpIwdgAjNwFnbCyeqlRR5nAbVRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAt
NWEzNjYzMTVjMTY2LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAtNWEzNjYzMTVjMTY2
LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftf5eR/C
kJUS17GAEA9tKVpGKpV8iG41O3HiBk69e0M0tfnu4KFSO07pEtYfKMPKulozCT4V
ZPDlu8i81NjzFymSwhn/BXKatClF3ZpJwlfhPcko8NW9wA4iUAwT1IMjFeDwwqMg
AU7QH4zSLOdyxw7LnggI1PWZuRzndehCUBx0Z+GRbr5KyCvk899KrQdASFnCqCiV
saL4PeogWimsFOPXLqBt5bnp82hxwHOF8QiJKo5A9ZAbS6hQUA0wNAMURn7W4Kbu
6KlAL/5U8WNesVk6Se61X4D/HGpYytgwkcHIbtC9wJd/ze1WlnTLPh32ZEUJF3eK
+0qidLqJK1KqNA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 01:49:18 2026 by rpki-client