Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
File: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft (raw, json)
Hash identifier: uWWurL27MPSHNUEO+/TCE6od6cxD8pCroALAFVfAqCU=
Subject key identifier: 22:0C:4F:2A:9C:32:1B:0C:27:AB:B9:A4:E8:84:AD:A5:9B:4C:42:D4
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Certificate issuer: /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial: 01A0393929ABDB1B065CABE74B90E5684A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
Manifest number: 0263
Signing time: Tue 25 Aug 2026 14:00:42 +0000
Manifest this update: Tue 25 Aug 2026 14:00:42 +0000
Manifest next update: Wed 26 Aug 2026 14:00:42 +0000
Files and hashes: 1: HAvcKkRLr_-FXcfu2XV7UUaU5F8.asa (hash: Ern+cmfZwFsU2HhkvPFkDC0xdjwIG4SYe7YBQ5RzsPs=)
2: iS_RjiJ5hKPzS36a9K6GI2jCpSc.roa (hash: oKmLMmS60dhNLyeJppUGpS47iPqdNIjtFfF23b9zJgg=)
3: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl (hash: TmKU0i/21J+CskzxIPpg0bJmeG0pgiquJoN67ZoZvbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:39:29:ab:db:1b:06:5c:ab:e7:4b:90:e5:68:4a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Validity
Not Before: Aug 25 14:00:42 2026 GMT
Not After : Aug 26 14:00:42 2026 GMT
Subject: CN=220c4f2a9c321b0c27abb9a4e884ada59b4c42d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:ed:23:7e:87:21:c0:42:3d:ef:5b:bd:1f:
c0:4c:08:e1:05:78:de:14:90:83:22:1a:bc:1b:db:
1a:3a:be:eb:2d:8d:5c:eb:c6:50:9a:de:ff:2b:2a:
f4:19:a7:60:71:14:25:8a:ed:6f:12:7c:e6:99:97:
35:5e:8a:ce:7e:a6:33:ba:4e:fc:40:1e:fe:0c:94:
b8:a2:43:14:fd:28:c3:8b:30:da:8b:d9:0e:4c:31:
b5:9c:4e:60:c8:a4:49:ed:2c:9e:65:eb:6c:6a:86:
c2:af:66:a7:dc:0c:1d:2c:98:92:cc:df:a4:e6:2c:
af:c4:ab:47:f6:5a:9a:92:b3:46:fd:b3:53:ee:61:
f8:73:d5:1b:7b:8e:de:d4:d3:26:09:57:bd:9f:1a:
58:b1:a9:94:87:23:22:dd:e8:69:c9:b9:8e:a0:3e:
f8:3f:b5:ac:b6:33:af:b1:05:6c:e3:f1:45:b4:5f:
25:b4:6c:31:57:cf:aa:5c:5e:6c:31:e9:d4:21:bc:
57:5f:42:22:18:f9:47:4b:60:7c:24:dd:8e:89:52:
da:15:6a:ae:8d:54:d4:4f:dd:36:0f:0c:87:50:30:
52:5e:a2:f9:83:03:3b:e6:b5:72:08:0b:2c:29:ad:
5d:cf:54:e2:b1:c5:dc:c9:17:de:2f:7c:fb:1a:64:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0C:4F:2A:9C:32:1B:0C:27:AB:B9:A4:E8:84:AD:A5:9B:4C:42:D4
X509v3 Authority Key Identifier:
keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3d:0a:9d:58:8b:40:9e:af:de:fa:7b:92:a6:0b:0c:23:41:
5a:ee:71:9a:d8:b9:a4:b2:7e:9d:73:8f:68:36:15:57:21:6e:
43:94:b5:a2:e4:42:a6:2e:c0:6c:83:fc:b0:fa:d5:8a:15:3a:
99:a2:5f:aa:5e:d7:8d:08:b6:94:5e:dc:f2:1e:b7:27:b3:b7:
db:50:e8:f2:49:71:cf:fc:2b:02:cd:1f:ed:0c:0f:68:e2:68:
df:23:0f:68:ec:9f:28:39:af:3c:66:b3:80:e6:e4:7b:69:92:
17:f8:d8:a1:60:8d:8c:24:60:67:89:b8:97:6a:22:62:d2:ee:
4d:67:9f:c4:5c:9c:6b:68:92:0b:84:02:c7:23:ab:7f:1d:41:
e2:fb:dd:34:a1:16:9b:5d:98:e8:8c:a7:6c:71:1e:9c:3d:f9:
50:74:9b:fa:3a:08:8d:2a:06:db:8a:63:d1:5d:88:1d:c4:36:
62:49:88:56:72:32:d9:62:22:3f:8a:96:9b:fd:b7:be:3e:1e:
b0:7d:07:b6:f9:f7:a3:34:88:1f:0c:e6:3c:e2:d5:67:2c:f6:
ed:a1:f0:fc:7b:ec:47:44:b7:12:0b:01:72:2d:67:10:22:40:
20:44:ce:2f:f3:5b:66:7e:45:c3:da:8b:a8:97:c5:e2:a3:99:
ee:5b:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:59:41 2026 by rpki-client