Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
File: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json)
Hash identifier: IAHdJlbgMtGOHlvUjLx6CaSXkgDVIxXiGRkWLpuAAIQ=
Subject key identifier: A2:EB:B3:69:E1:1B:FB:54:D9:27:0F:7E:11:32:FD:30:A4:B7:7E:FF
Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
Certificate issuer: /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Certificate serial: 019FA44E57F86B0420183BA63F81CB32CF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 16:00:25 +0000
Manifest this update: Mon 27 Jul 2026 16:00:25 +0000
Manifest next update: Tue 28 Jul 2026 16:00:25 +0000
Files and hashes: 1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: rdKwTPKPxf4eaVh7YT3cY4nJvo1g3PDn7eWCs+aTgpI=)
2: PI-iyfgjqOsckNLoaqd8v_mV8Ao.roa (hash: xH29u4bjzu1wjXHSI6AzFo4CKDsCw4Lu39FOZp62TT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4e:57:f8:6b:04:20:18:3b:a6:3f:81:cb:32:cf:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Validity
Not Before: Jul 27 16:00:25 2026 GMT
Not After : Jul 28 16:00:25 2026 GMT
Subject: CN=a2ebb369e11bfb54d9270f7e1132fd30a4b77eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:a6:37:95:31:dd:92:4e:0b:74:b6:4d:23:
a6:b8:2f:b1:e4:2e:95:3c:2b:60:af:f7:14:2a:09:
55:e3:8f:22:dc:fb:d5:3a:22:c9:7f:ea:13:20:11:
a1:57:b4:d1:99:a8:4f:a7:d5:c2:ea:f2:43:5c:d8:
04:2c:47:c9:34:e5:2a:0e:98:20:46:14:26:0c:c1:
d6:e0:f6:34:ae:05:9a:7e:80:48:37:7f:5c:f9:f7:
ef:aa:65:ab:90:f2:21:45:da:d8:3f:b6:dc:51:45:
db:16:68:52:e6:64:06:4c:a2:3b:67:22:cd:ee:a2:
e5:ac:df:76:fc:89:6d:0c:9e:0c:eb:81:2d:80:e9:
fa:07:08:27:d2:68:7a:d1:6d:50:29:d6:c9:e4:a1:
9c:f1:58:2b:4d:32:ae:e1:e2:56:34:12:f1:c5:4f:
45:2c:86:82:7f:d6:93:d2:c0:46:9f:33:5b:9c:2e:
80:02:32:12:46:e7:08:7b:64:a1:2b:91:57:ac:12:
b5:89:58:62:5a:4b:76:c1:6b:0f:a1:33:e0:c0:8d:
21:a1:73:c6:25:22:d1:1a:56:95:35:d0:bb:bd:34:
b9:ac:b5:14:47:81:09:15:64:0a:4d:16:6e:30:2c:
9c:9d:c3:39:da:9c:7f:fd:b5:d2:41:84:2e:f5:80:
41:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:B3:69:E1:1B:FB:54:D9:27:0F:7E:11:32:FD:30:A4:B7:7E:FF
X509v3 Authority Key Identifier:
keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fb:10:36:8c:88:7a:a4:cb:cc:84:19:75:16:0f:bb:29:d3:
24:09:2d:57:c9:e2:bd:05:38:75:82:4d:81:65:0a:26:40:44:
8e:8c:2c:86:3e:9b:55:4b:0b:f0:96:b0:1d:28:fe:1a:57:5f:
95:99:33:cb:a3:f6:2f:a8:85:8c:c0:2f:1a:6b:47:e4:70:8d:
76:a0:31:8b:4d:23:a9:20:e9:8a:4e:9e:d6:52:d1:f7:49:59:
0b:77:8e:3e:55:90:82:d4:54:17:f1:b0:9b:d9:5b:1f:19:c3:
2d:15:5b:6f:38:f1:bd:b2:4f:b7:9c:7f:9b:42:c9:0d:31:8b:
5d:6a:5a:91:2b:dd:6e:29:7d:18:d6:25:11:1d:43:7d:bd:2d:
3d:9d:19:50:a7:b8:22:fa:e8:7d:2b:cf:8a:be:76:6d:54:e6:
33:40:56:07:36:a6:a3:ae:28:3a:42:60:90:6d:8d:62:f8:8c:
95:0c:33:80:e8:61:fd:e2:10:13:51:65:78:f3:4a:d9:5f:a4:
6f:ea:a6:30:78:ae:03:44:fb:3e:22:91:31:8f:97:de:16:44:
cb:b2:e4:c7:0b:96:ec:af:4c:b8:88:d1:eb:65:d5:fc:28:6a:
be:e8:f2:75:e3:41:59:64:15:68:13:98:bc:55:d3:fc:3b:fe:
92:94:cd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:17:48 2026 by rpki-client