Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: 748/DVfdaa9ARYDkT14ngJL9kwQag81WRngOSPL/vW4=
Subject key identifier: 8D:39:68:6E:44:A9:91:6F:9E:2D:E4:F1:39:5C:A3:98:E5:61:2B:A0
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019FCCA66BF6C6BFA643E30B69F3ECA20578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 10CB
Signing time: Tue 04 Aug 2026 12:01:26 +0000
Manifest this update: Tue 04 Aug 2026 12:01:26 +0000
Manifest next update: Wed 05 Aug 2026 12:01:26 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: 99UprmA3nTLj9hFGHOIw92e9kChO8REX+89xp2+vEbY=)
2: W-thWstLj_54HzMDe1CPmkWaZZY.roa (hash: LM0Lib5MmpvXnboN7sbqoV81b7z7jQPCb/hPX5AYcvM=)
3: _a4udz3Wowgk3kz0TQHNdav2CGQ.roa (hash: hiqTVe26hrw7pmofqQ2A/tv62bg85cwYZkNLdMZlYYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:a6:6b:f6:c6:bf:a6:43:e3:0b:69:f3:ec:a2:05:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Aug 4 12:01:26 2026 GMT
Not After : Aug 5 12:01:26 2026 GMT
Subject: CN=8d39686e44a9916f9e2de4f1395ca398e5612ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:29:1d:bc:5f:3f:4e:91:98:6d:28:91:f5:
ca:3e:9a:87:8f:98:2c:32:42:55:d8:91:11:76:2e:
87:9e:d2:07:0f:4e:47:8b:27:33:f5:d3:75:ec:6d:
2f:05:2c:fb:c5:34:74:b8:8f:4a:7a:42:a6:92:04:
c7:59:cf:13:dd:a5:cd:97:9c:d6:00:b5:5e:9b:69:
7c:19:b6:da:1f:8c:c6:dc:70:6b:6e:1e:7b:b7:2e:
f2:85:66:b2:f7:6e:99:3f:c9:df:b4:a6:d4:ad:ea:
82:43:f1:eb:c8:d0:e6:ac:14:9d:24:9c:25:86:36:
66:f2:00:c7:ac:f9:a5:b2:55:22:ae:a1:08:63:1a:
93:0f:8b:c9:bc:8c:6c:77:eb:d2:81:9a:63:6d:03:
ec:97:8e:53:92:03:ad:be:f3:15:22:90:93:e6:46:
6f:3d:7d:ed:b3:7b:e5:7d:d3:56:a3:75:4d:55:ee:
7b:97:40:84:6d:d8:f6:92:e5:5d:c6:7b:f0:9d:61:
e1:d4:d2:e1:c8:3d:d8:b0:bc:61:7f:b5:db:a0:52:
ea:3b:dd:12:63:8f:73:9b:0b:2c:ca:76:46:55:fc:
37:9f:90:98:72:15:12:90:35:e9:34:00:2c:fa:46:
a8:e2:f3:a3:1d:7c:b4:34:dd:fa:be:ca:f9:92:50:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:39:68:6E:44:A9:91:6F:9E:2D:E4:F1:39:5C:A3:98:E5:61:2B:A0
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a8:2e:be:7d:a1:fd:fd:5c:ea:a8:0e:e8:c8:74:2e:42:73:
fb:56:af:b7:67:10:4a:43:67:d7:eb:87:a0:2d:0a:b6:f6:56:
98:5d:71:f0:1f:40:29:96:24:5f:92:d5:de:f8:e9:ad:69:be:
42:7c:1f:13:ac:8a:42:10:8f:54:79:a6:8f:16:22:f3:3e:8f:
b0:48:44:73:23:75:ff:9e:13:08:11:e5:89:38:11:67:81:e4:
89:36:da:3a:42:bd:8c:25:88:71:e1:55:8a:54:0a:84:09:47:
f6:11:e4:1b:5a:fc:b6:cb:4f:2f:ae:a4:08:64:25:f1:23:ff:
2a:77:ae:64:93:d6:47:05:8b:27:a4:e4:83:45:ae:a6:eb:d6:
0f:0f:9b:78:0d:4e:a0:1a:ba:e4:d3:2e:bd:f5:99:2b:b8:9f:
02:6d:a4:42:7c:03:72:60:cc:13:2e:8a:bd:9b:08:c2:4b:85:
60:2c:6d:61:1e:53:b7:c7:35:79:63:96:78:fe:85:3e:96:12:
8b:9d:e4:40:55:32:f8:a8:dd:f8:fc:04:62:11:73:29:68:52:
9e:3f:45:89:58:37:c6:ae:e7:9e:af:13:3a:85:d8:a3:c8:3e:
1e:11:6e:05:61:15:d1:1f:f7:55:8f:42:30:99:e6:4c:80:b5:
30:0a:ed:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 19:19:13 2026 by rpki-client