Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
File: mkM22h63IW4g7ASn8DHrShtjG7M.mft (raw, json)
Hash identifier: Zhwc8e0nC0YL4i1pn0VteDpdnOH/pYd6gvTrgTlv8UQ=
Subject key identifier: 21:F5:7D:94:7F:B6:98:5D:83:81:34:38:7B:C3:4A:96:3D:E3:5F:F1
Authority key identifier: 9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
Certificate issuer: /CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Certificate serial: 01A0024B1328B889453BB2AD639F563F742C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 22:01:09 +0000
Manifest this update: Fri 14 Aug 2026 22:01:09 +0000
Manifest next update: Sat 15 Aug 2026 22:01:09 +0000
Files and hashes: 1: KGRZtAAx-sknvQQcwhztrA8NJos.roa (hash: uYCNY8bnQOpiSbQHGpcKZAraJm0QfOSnQkHdbbBpb7U=)
2: mkM22h63IW4g7ASn8DHrShtjG7M.crl (hash: 32UwppzaFBsYs50c503xZ8fGohtidq67zmCR8x1pE5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:13:28:b8:89:45:3b:b2:ad:63:9f:56:3f:74:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Validity
Not Before: Aug 14 22:01:09 2026 GMT
Not After : Aug 15 22:01:09 2026 GMT
Subject: CN=21f57d947fb6985d838134387bc34a963de35ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:8e:6e:d5:fe:f5:12:46:43:3e:fd:8e:1c:
b7:05:21:8e:57:41:a5:5d:cf:a6:0c:e2:82:ff:7b:
68:9f:41:4b:c9:3f:35:08:cb:18:91:aa:8e:b2:34:
1f:da:d8:e0:f2:50:5a:ba:07:d1:8a:48:49:35:73:
61:63:b4:05:97:90:72:ee:ca:11:b1:b9:a4:75:db:
1b:14:77:31:39:ad:23:2d:d4:f6:b5:0d:f3:80:05:
c7:b4:4c:d4:6e:6f:0a:0f:f7:49:b3:88:1b:15:d6:
c3:24:aa:f5:7c:f0:d8:bc:21:57:5b:62:c2:51:dc:
c6:d5:4b:15:02:10:e9:b3:c5:42:ac:df:7a:bf:df:
68:f6:f1:c1:82:e7:46:36:69:94:bb:1c:bb:68:b2:
36:81:79:41:77:c3:9c:d6:e1:d3:de:67:82:96:47:
74:4e:2c:4f:8b:0d:5b:4a:e5:1e:db:91:49:61:a2:
05:b9:0e:73:75:ac:bb:07:18:7f:66:94:51:b8:ba:
d8:50:d9:8a:d2:b2:a6:d2:34:2f:0c:07:32:3e:3d:
39:5e:ba:43:ce:6f:13:8f:8f:75:6f:5f:1b:e8:5a:
03:0a:e8:4e:63:fe:98:e0:1b:18:4c:d7:8f:fd:e7:
86:4e:70:ee:34:56:f9:8b:d9:d6:47:b2:4d:57:ca:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F5:7D:94:7F:B6:98:5D:83:81:34:38:7B:C3:4A:96:3D:E3:5F:F1
X509v3 Authority Key Identifier:
keyid:9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c8:14:f2:a9:7f:62:df:76:6a:55:8a:2d:e2:9b:ca:be:e8:
67:5c:ae:d9:61:b7:74:ab:ff:b6:b6:1b:11:1b:26:8a:6f:a5:
ac:35:5c:b3:32:51:03:27:6b:c5:8c:2a:0c:6f:ce:8c:ae:fe:
a2:51:34:45:a1:91:38:5e:5f:34:fb:9b:9e:03:02:49:f2:a7:
6a:4e:06:27:1e:21:94:0f:23:0a:f3:c8:36:9d:73:fa:c6:dd:
90:b8:12:e7:cc:87:1b:a4:dc:58:b0:08:19:8d:ee:e8:62:c8:
63:7e:3a:20:38:2c:ab:11:52:3c:6c:69:1e:de:cd:1b:94:98:
3f:b5:a6:d7:37:c6:b8:40:6d:ae:5c:ef:79:5b:9a:31:50:91:
ae:14:f4:b2:27:92:63:f2:c2:ff:2b:34:65:96:45:07:c8:e6:
16:f8:f7:b2:35:0b:92:d2:24:9d:84:32:25:a8:e1:ed:fd:44:
a4:41:f5:07:6f:63:0d:00:f6:d7:a7:ac:5d:19:ce:b6:e4:f5:
76:f0:e6:60:df:ee:87:ae:41:f0:c7:06:00:ed:f7:c0:0c:f1:
4d:1c:63:6d:d9:b4:95:7c:be:e5:6e:d6:6d:36:74:4f:9d:a1:
98:80:3c:ff:3a:3a:fa:51:b1:36:f6:0d:33:70:fb:75:39:aa:
b4:b0:98:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSxMouIlFO7KtY59WP3QsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNDMzNmRhMWViNzIxNmUyMGVjMDRhN2YwMzFlYjRhMWI2
MzFiYjMwHhcNMjYwODE0MjIwMTA5WhcNMjYwODE1MjIwMTA5WjAzMTEwLwYDVQQD
EygyMWY1N2Q5NDdmYjY5ODVkODM4MTM0Mzg3YmMzNGE5NjNkZTM1ZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiWObtX+9RJGQz79jhy3BSGOV0Gl
Xc+mDOKC/3ton0FLyT81CMsYkaqOsjQf2tjg8lBaugfRikhJNXNhY7QFl5By7soR
sbmkddsbFHcxOa0jLdT2tQ3zgAXHtEzUbm8KD/dJs4gbFdbDJKr1fPDYvCFXW2LC
UdzG1UsVAhDps8VCrN96v99o9vHBgudGNmmUuxy7aLI2gXlBd8Oc1uHT3meClkd0
TixPiw1bSuUe25FJYaIFuQ5zday7Bxh/ZpRRuLrYUNmK0rKm0jQvDAcyPj05XrpD
zm8Tj491b18b6FoDCuhOY/6Y4BsYTNeP/eeGTnDuNFb5i9nWR7JNV8qrVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCH1fZR/tphdg4E0OHvDSpY941/xMB8GA1UdIwQY
MBaAFJpDNtoetyFuIOwEp/Ax60obYxuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWtNMjJoNjNJVzRnN0FTbjhESHJTaHRqRzdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hN2U5YjktNmJhYy00NTM4LWE5ZTYt
ZmE4ODA2YTAyNGM0LzEvbWtNMjJoNjNJVzRnN0FTbjhESHJTaHRqRzdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hN2U5YjktNmJhYy00NTM4LWE5ZTYtZmE4ODA2YTAyNGM0
LzEvbWtNMjJoNjNJVzRnN0FTbjhESHJTaHRqRzdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8gU8ql/
Yt92alWKLeKbyr7oZ1yu2WG3dKv/trYbERsmim+lrDVcszJRAydrxYwqDG/OjK7+
olE0RaGROF5fNPubngMCSfKnak4GJx4hlA8jCvPINp1z+sbdkLgS58yHG6TcWLAI
GY3u6GLIY346IDgsqxFSPGxpHt7NG5SYP7Wm1zfGuEBtrlzveVuaMVCRrhT0sieS
Y/LC/ys0ZZZFB8jmFvj3sjULktIknYQyJajh7f1EpEH1B29jDQD216esXRnOtuT1
dvDmYN/uh65B8McGAO33wAzxTRxjbdm0lXy+5W7WbTZ0T52hmIA8/zo6+lGxNvYN
M3D7dTmqtLCYFw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:30 2026 by rpki-client