Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
File: mkM22h63IW4g7ASn8DHrShtjG7M.mft (raw, json)
Hash identifier: Xn3h/8+s/okYeWGHgS3hfPkRmOQojnRNrh2IVju8wRQ=
Subject key identifier: 2F:DD:C4:A7:F8:7E:EA:9D:69:03:33:41:B4:8E:5C:57:E9:43:5F:72
Authority key identifier: 9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
Certificate issuer: /CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Certificate serial: 01A148A9CDAB3EC8D129528909DAEBA30E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
Manifest number: 1AAA
Signing time: Sat 17 Oct 2026 07:00:50 +0000
Manifest this update: Sat 17 Oct 2026 07:00:50 +0000
Manifest next update: Sun 18 Oct 2026 07:00:50 +0000
Files and hashes: 1: KGRZtAAx-sknvQQcwhztrA8NJos.roa (hash: uYCNY8bnQOpiSbQHGpcKZAraJm0QfOSnQkHdbbBpb7U=)
2: mkM22h63IW4g7ASn8DHrShtjG7M.crl (hash: dA5rVNdZYE5ZkMbn4fw5xU6Y0TwVvwg3d72fe+L/jAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:a9:cd:ab:3e:c8:d1:29:52:89:09:da:eb:a3:0e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Validity
Not Before: Oct 17 07:00:50 2026 GMT
Not After : Oct 18 07:00:50 2026 GMT
Subject: CN=2fddc4a7f87eea9d69033341b48e5c57e9435f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:48:18:5d:f2:11:bc:ef:17:70:e1:c5:bc:
38:43:bc:3c:64:ce:ed:87:f4:be:12:87:03:35:2d:
7b:4f:30:ea:cc:77:e0:ea:df:dc:a7:31:6f:eb:24:
9f:6f:71:f4:f4:37:9b:45:8b:da:1b:fb:30:34:f4:
c8:36:38:a5:df:7f:32:ae:23:73:ed:c0:b2:24:c7:
30:7f:ce:83:5f:7f:18:fb:44:2e:7b:a5:5d:be:f9:
d8:2a:ae:5e:5f:63:f9:3c:9b:c2:4f:87:00:e4:d7:
a5:7b:ff:8b:96:0c:cd:93:b6:c0:7a:bc:79:f6:e4:
dd:d7:66:4b:bb:8f:e7:8b:e9:c7:1a:b7:c4:d7:a8:
a4:64:29:83:15:2a:64:c3:2f:8e:db:18:08:b0:31:
0c:bf:1e:01:27:68:8b:fd:e6:d2:8b:1b:96:12:e1:
66:00:18:35:aa:67:a5:a0:41:fb:e0:86:8d:b9:0a:
38:f8:58:99:65:5f:96:f3:5b:80:ec:5b:67:c3:11:
4a:67:d0:b6:f8:0b:fc:fd:d7:11:98:18:5a:54:a2:
3e:13:54:dc:3b:11:9b:c7:78:95:5e:e6:06:0e:5c:
3c:c0:0c:92:64:8d:00:cf:1c:85:fc:17:0f:22:c9:
c9:21:28:d7:a4:f7:26:19:e4:93:6d:1f:58:83:bb:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DD:C4:A7:F8:7E:EA:9D:69:03:33:41:B4:8E:5C:57:E9:43:5F:72
X509v3 Authority Key Identifier:
keyid:9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:aa:96:84:68:25:25:79:cf:00:45:ca:94:46:f2:0f:fa:
ed:9e:cd:a9:4f:01:3c:f4:47:96:6f:4a:9f:e8:09:34:85:09:
30:a0:6a:a2:54:ec:e6:45:ca:15:2f:f4:62:ed:95:4e:2a:59:
cf:b3:04:25:9b:27:8c:1e:13:f1:cf:97:7a:6d:b1:72:8f:a4:
ae:dc:6d:cd:c9:4d:d8:91:6b:24:87:e1:67:0e:44:e1:3e:29:
fe:cb:e6:ad:d9:35:83:ce:c5:a8:42:df:fe:0d:87:7d:92:ee:
7f:34:48:a7:2f:29:1c:2a:04:1f:53:1c:de:f5:34:d9:d7:18:
64:7d:7d:a2:6e:de:5c:bf:e7:83:3a:59:5d:43:e7:dc:b2:64:
55:ba:88:bd:42:bb:d2:2f:9d:cc:bb:43:1b:ee:2e:da:db:4f:
c0:3a:b2:32:d9:11:94:93:c2:e5:3c:5c:bc:44:31:0c:33:f9:
1e:15:b8:0b:9b:b1:b3:68:6c:52:da:d3:ea:aa:99:16:aa:e0:
f8:06:ab:20:45:32:94:b6:3f:d9:32:95:58:1c:5c:db:6a:91:
67:5e:3e:d7:86:85:ad:5f:a5:fd:e2:30:a6:d7:16:48:7b:b2:
a0:9b:e1:ec:ca:0a:46:a7:55:b7:34:de:c5:46:47:79:42:6f:
10:93:a0:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFIqc2rPsjRKVKJCdrrow4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNDMzNmRhMWViNzIxNmUyMGVjMDRhN2YwMzFlYjRhMWI2
MzFiYjMwHhcNMjYxMDE3MDcwMDUwWhcNMjYxMDE4MDcwMDUwWjAzMTEwLwYDVQQD
EygyZmRkYzRhN2Y4N2VlYTlkNjkwMzMzNDFiNDhlNWM1N2U5NDM1ZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMdIGF3yEbzvF3Dhxbw4Q7w8ZM7t
h/S+EocDNS17TzDqzHfg6t/cpzFv6ySfb3H09DebRYvaG/swNPTINjil338yriNz
7cCyJMcwf86DX38Y+0Que6VdvvnYKq5eX2P5PJvCT4cA5Nele/+LlgzNk7bAerx5
9uTd12ZLu4/ni+nHGrfE16ikZCmDFSpkwy+O2xgIsDEMvx4BJ2iL/ebSixuWEuFm
ABg1qmeloEH74IaNuQo4+FiZZV+W81uA7FtnwxFKZ9C2+Av8/dcRmBhaVKI+E1Tc
OxGbx3iVXuYGDlw8wAySZI0AzxyF/BcPIsnJISjXpPcmGeSTbR9Yg7seeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/dxKf4fuqdaQMzQbSOXFfpQ19yMB8GA1UdIwQY
MBaAFJpDNtoetyFuIOwEp/Ax60obYxuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWtNMjJoNjNJVzRnN0FTbjhESHJTaHRqRzdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hN2U5YjktNmJhYy00NTM4LWE5ZTYt
ZmE4ODA2YTAyNGM0LzEvbWtNMjJoNjNJVzRnN0FTbjhESHJTaHRqRzdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hN2U5YjktNmJhYy00NTM4LWE5ZTYtZmE4ODA2YTAyNGM0
LzEvbWtNMjJoNjNJVzRnN0FTbjhESHJTaHRqRzdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHauqloRo
JSV5zwBFypRG8g/67Z7NqU8BPPRHlm9Kn+gJNIUJMKBqolTs5kXKFS/0Yu2VTipZ
z7MEJZsnjB4T8c+Xem2xco+krtxtzclN2JFrJIfhZw5E4T4p/svmrdk1g87FqELf
/g2HfZLufzRIpy8pHCoEH1Mc3vU02dcYZH19om7eXL/ngzpZXUPn3LJkVbqIvUK7
0i+dzLtDG+4u2ttPwDqyMtkRlJPC5TxcvEQxDDP5HhW4C5uxs2hsUtrT6qqZFqrg
+AarIEUylLY/2TKVWBxc22qRZ14+14aFrV+l/eIwptcWSHuyoJvh7MoKRqdVtzTe
xUZHeUJvEJOg1A==
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:48:48 2026 by rpki-client