Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
File: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft (raw, json)
Hash identifier: XIsXfSYl/FI39+PZy+Ab2SU02Qf7LBrOTZfxkTAG19s=
Subject key identifier: 00:35:79:05:2B:DD:6A:E4:FF:3C:65:F1:5D:D2:01:EC:B2:E5:03:E6
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Certificate issuer: /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial: 019F11C0B08D1040DCFB584A8181F25859C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
Manifest number: 01CA
Signing time: Mon 29 Jun 2026 05:01:08 +0000
Manifest this update: Mon 29 Jun 2026 05:01:08 +0000
Manifest next update: Tue 30 Jun 2026 05:01:08 +0000
Files and hashes: 1: HAvcKkRLr_-FXcfu2XV7UUaU5F8.asa (hash: Ern+cmfZwFsU2HhkvPFkDC0xdjwIG4SYe7YBQ5RzsPs=)
2: iS_RjiJ5hKPzS36a9K6GI2jCpSc.roa (hash: oKmLMmS60dhNLyeJppUGpS47iPqdNIjtFfF23b9zJgg=)
3: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl (hash: Xv9dd23UiRtfcMOlnJwdovuBeaJc5zELhfUxP2Wj7Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:b0:8d:10:40:dc:fb:58:4a:81:81:f2:58:59:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Validity
Not Before: Jun 29 05:01:08 2026 GMT
Not After : Jun 30 05:01:08 2026 GMT
Subject: CN=003579052bdd6ae4ff3c65f15dd201ecb2e503e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:3a:5e:5e:ba:28:f7:1a:6a:93:bb:53:a7:
de:7a:29:1d:64:a7:92:66:ad:27:0d:96:4f:11:7e:
c6:35:ab:6f:27:64:30:38:a3:c1:53:56:d2:88:2f:
02:9d:60:48:e1:1b:bc:be:96:56:e3:e4:e2:db:26:
27:c1:51:2a:4b:d6:26:00:c6:13:89:b0:af:e4:7b:
d8:09:ab:d3:5e:e8:37:0c:a2:71:26:18:07:5b:25:
cb:31:71:ac:bf:a9:f0:07:21:5a:01:73:15:a1:a9:
1c:8d:03:ab:52:11:13:18:62:81:27:da:7b:4b:41:
69:84:65:a4:af:08:e7:fb:80:c2:6b:cd:30:0f:aa:
59:91:07:3a:1d:ad:b0:d1:89:99:b7:2f:4e:6b:0d:
58:69:07:39:d7:81:9f:5b:3e:cc:f9:c7:36:de:b4:
a1:0f:26:31:5b:b6:2c:92:54:25:fc:3c:c8:56:fe:
05:ec:66:37:0a:5f:f9:5e:b1:59:cb:bd:6a:fa:13:
e9:a0:da:80:10:0d:e3:a0:4e:6c:87:b5:8c:8a:68:
7a:83:7c:8f:71:9c:b2:d3:97:25:8b:62:f9:5d:e1:
54:80:a8:2f:9c:9c:35:87:c5:98:52:ac:8f:47:6b:
f1:4f:25:bb:7d:9e:1b:2b:9f:79:bc:ee:1f:bd:8c:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:35:79:05:2B:DD:6A:E4:FF:3C:65:F1:5D:D2:01:EC:B2:E5:03:E6
X509v3 Authority Key Identifier:
keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c7:90:a9:d7:94:f7:1f:9f:b6:26:6f:8e:bd:e5:35:63:b2:
8a:d0:f5:1d:a6:6c:0f:f0:93:e4:77:0b:f7:84:6f:9f:92:86:
26:4a:46:86:f9:2e:1b:4f:19:28:26:4b:dc:c5:6f:11:1e:76:
02:08:23:dd:f4:b7:06:11:e0:37:3b:8d:8a:7f:85:ce:26:51:
ef:1b:7b:24:2c:99:94:d6:9b:37:42:35:ce:f3:90:bc:ae:7a:
9c:d0:4e:bd:39:b3:26:f7:fa:d1:41:75:c0:af:53:5a:0b:f4:
bf:fa:cb:4d:38:51:01:ee:9b:6c:6d:44:81:69:81:65:a1:51:
a3:b7:19:6f:e5:6e:90:8f:27:48:7c:5f:96:c5:3a:7e:19:87:
a1:ef:1c:bd:c6:c2:bf:7d:a4:91:81:ea:bd:24:c2:c6:cd:50:
0c:12:12:c2:15:25:0d:07:e4:dc:ea:2e:0e:e1:93:31:98:11:
3e:e7:d4:bf:02:ed:a7:18:ab:46:16:58:75:12:5f:de:2e:25:
2c:3d:1a:12:ba:9b:42:83:8c:06:a7:28:ce:5a:68:4a:25:76:
ab:27:fe:cd:ad:3e:f3:85:bc:cc:4f:19:a6:08:38:3e:d7:53:
43:03:12:a0:46:f3:cf:3b:57:d2:29:3d:1c:23:d7:06:a7:98:
a6:e3:48:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:23 2026 by rpki-client