Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: 1pmBWovREjUCUhNj2c26gMYOnoecyUuwBZwHYKd80tg=
Subject key identifier: 2B:57:37:38:3B:41:49:D0:27:87:2D:A6:E6:6D:EF:07:09:94:84:CA
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 01A0B652708415FA1D0D3C42D3CD9ACF2F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 1144
Signing time: Fri 18 Sep 2026 21:00:51 +0000
Manifest this update: Fri 18 Sep 2026 21:00:51 +0000
Manifest next update: Sat 19 Sep 2026 21:00:51 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: J4E7thyI5ATR2XV0SfwAGRJ96vHiOeGZpmQTs4Q99h0=)
2: W-thWstLj_54HzMDe1CPmkWaZZY.roa (hash: LM0Lib5MmpvXnboN7sbqoV81b7z7jQPCb/hPX5AYcvM=)
3: _a4udz3Wowgk3kz0TQHNdav2CGQ.roa (hash: hiqTVe26hrw7pmofqQ2A/tv62bg85cwYZkNLdMZlYYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:52:70:84:15:fa:1d:0d:3c:42:d3:cd:9a:cf:2f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Sep 18 21:00:51 2026 GMT
Not After : Sep 19 21:00:51 2026 GMT
Subject: CN=2b5737383b4149d027872da6e66def07099484ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:7d:3f:bc:9e:25:47:9d:c9:d7:7b:d4:e2:
d3:c6:ab:13:9e:13:ef:da:a2:b1:1c:b9:4d:4c:c8:
17:bd:b3:25:3c:b9:13:da:70:40:5a:50:42:89:98:
c9:b2:b1:4a:c5:01:b6:42:f8:45:95:dd:2b:f6:59:
65:75:62:8c:f5:d9:41:f0:95:45:2d:1d:0f:a7:84:
54:d9:04:8c:c9:a9:f5:6f:cc:00:79:63:ce:5b:cc:
4c:b2:79:37:b9:43:de:9a:e8:fa:58:67:24:bb:d4:
25:d0:cb:88:c5:ba:33:ab:60:13:1a:10:61:ce:e8:
96:87:86:b0:d7:8c:8a:f5:45:4c:55:c1:1c:8a:a4:
87:c3:48:12:8b:88:de:d2:82:80:13:5a:eb:85:7e:
97:ab:9f:49:c7:b5:e1:30:79:03:3c:de:95:05:5f:
40:dc:96:f0:ff:a3:5b:95:fd:f2:10:d3:66:5c:2a:
39:56:b7:86:a2:5e:66:97:62:3d:fc:78:26:2d:d6:
1f:c8:ea:a7:45:cf:f3:82:cf:62:3f:2e:84:44:6d:
30:fc:b1:c1:c3:01:dd:08:8c:39:dd:0c:c2:ca:c8:
d7:d7:a8:1c:86:44:9c:99:52:61:ae:7f:3b:11:60:
1d:65:5a:5d:51:1f:4e:84:3e:06:ed:a2:42:dd:bd:
f6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:57:37:38:3B:41:49:D0:27:87:2D:A6:E6:6D:EF:07:09:94:84:CA
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:72:b5:f5:2b:83:47:db:4e:8e:3d:a3:1a:da:50:39:f8:55:
61:4b:a4:06:ec:2e:72:d3:b5:04:61:51:4d:44:d4:80:30:38:
6f:fb:c5:59:b9:e0:96:01:8f:b1:8d:1c:24:33:1d:18:60:d2:
10:01:93:a3:5f:a0:5c:86:c0:c3:8f:25:32:05:6c:d6:6c:19:
89:02:7d:df:39:2b:1c:38:56:a4:c9:11:de:c5:22:8b:29:ba:
2b:42:eb:69:ab:95:03:ab:98:55:7e:45:ec:67:53:28:43:14:
33:61:3d:c4:60:eb:14:73:2d:9a:bf:fe:29:af:f9:7c:97:b9:
9c:8b:f9:23:13:c8:b0:32:52:b1:a9:cd:e0:da:a9:c4:46:90:
8f:22:43:4f:ba:5e:5c:c3:90:80:12:f3:d4:88:95:0d:b6:69:
a7:12:dc:58:4a:42:86:59:41:f5:13:2a:c9:e6:1a:58:ec:e2:
7d:ce:9a:38:41:18:b0:f3:20:9c:3a:be:f8:35:a9:a5:d0:8a:
ba:a0:92:f3:26:33:54:1c:3d:03:25:56:bf:f5:ab:34:46:f3:
99:65:6d:f6:bd:57:13:67:55:42:bd:95:3e:db:50:3f:f0:da:
ed:6d:1e:27:ef:aa:4a:65:d7:3c:a1:de:03:e8:e4:45:d2:fe:
9f:36:51:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:07:57 2026 by rpki-client