Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: gJloTfaJmzDvCJDDNZU2TGM8aYfIFTHHZDd/yaDj+/Q=
Subject key identifier: 20:C6:C6:F6:AB:87:BE:E5:0D:C9:9C:1A:F2:19:38:6E:D8:23:1F:06
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 019DCF074D99BE4F1C34BA12D30D13EDB410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 18E8
Signing time: Mon 27 Apr 2026 13:00:55 +0000
Manifest this update: Mon 27 Apr 2026 13:00:55 +0000
Manifest next update: Tue 28 Apr 2026 13:00:55 +0000
Files and hashes: 1: SYtSh6MgqpX8fZ4WHojx0wxmwAU.roa (hash: qfAbswAstxuSdJu35mimEN1jiqsDnLeGp+g0coBMNag=)
2: YIp8U7durT_VOWJi51t_EhaEZmc.roa (hash: uqZNroUU2FsZFyQ6iEi3c3DU2XeoL0O/vrop/BVrvjs=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: 4DpuG3Sj5G9PEgbYP7h/HdbLBPobmL3u4IwtQyIfGjg=)
4: pEE9oryUWOVeetd5uFrgO_cdrpE.roa (hash: jDaM82TLaH8oaB0vSE3Avb/s35Fb5rQ5AgRFhpcBjks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:4d:99:be:4f:1c:34:ba:12:d3:0d:13:ed:b4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Apr 27 13:00:55 2026 GMT
Not After : Apr 28 13:00:55 2026 GMT
Subject: CN=20c6c6f6ab87bee50dc99c1af219386ed8231f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:0b:5d:b2:d2:99:f8:50:b7:b2:93:bc:53:
9d:48:b7:b3:fd:1e:0c:60:de:13:68:2e:26:3d:d6:
37:6f:5e:76:06:5a:9c:4f:1a:3e:d9:62:75:2a:6a:
3c:c6:fa:9d:ef:26:5c:38:d8:a8:dc:d0:52:22:0f:
a1:fe:0d:06:57:78:61:4d:03:36:a8:d4:50:6b:27:
f7:ee:4e:10:41:cc:9c:15:70:cd:cf:c2:f4:6e:67:
32:de:50:57:97:44:f4:b4:1d:04:b0:f1:d2:22:97:
4d:df:54:ea:13:54:4d:7e:e6:4b:8b:d6:7f:8d:cd:
5a:ba:d6:12:28:60:56:cb:38:a7:21:a4:9b:38:b5:
24:32:46:53:ee:ca:b1:3e:9a:ac:eb:b6:3e:78:b6:
6a:15:9f:63:91:c8:21:e4:c3:5d:b4:d2:89:65:47:
f3:c6:35:44:f3:2a:bb:ca:60:ec:2e:8f:0e:ca:e7:
36:86:e7:14:75:9b:35:f5:78:fa:bf:88:ec:48:47:
cc:06:5e:87:66:ca:07:22:d5:98:4a:55:20:62:79:
24:40:20:70:e0:30:0e:e3:20:aa:f5:fe:d6:ed:79:
d6:34:dd:b8:48:5d:02:04:a6:07:a3:bb:32:6b:b0:
44:d9:36:db:55:d2:4e:57:43:93:eb:b4:61:f1:a2:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C6:C6:F6:AB:87:BE:E5:0D:C9:9C:1A:F2:19:38:6E:D8:23:1F:06
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:9e:cc:2a:59:dc:27:54:76:29:83:cf:70:05:30:8a:64:
a5:55:43:ef:f7:fa:8f:04:c5:94:66:c2:b4:ec:9c:98:ca:01:
61:c4:b0:ca:86:35:96:93:dc:ff:32:b7:e9:0a:fe:6b:da:81:
7e:a0:01:9f:0f:9f:1b:2f:21:ad:1d:f0:c0:a1:c0:41:72:04:
25:62:f6:d2:ab:b2:d5:4d:9e:de:3e:e9:17:01:e3:50:e2:b0:
e7:2a:7e:2e:de:43:25:ec:6f:ab:d1:69:f3:21:ae:19:15:38:
75:10:18:1d:03:77:a7:66:08:79:1b:24:55:56:dd:5b:a1:fc:
14:ac:74:12:45:13:d0:bb:16:09:04:c1:9a:bb:d5:a3:71:9b:
5e:2d:8e:0c:2f:c8:b6:a8:b6:3d:a0:dc:fd:af:e9:5d:4d:fb:
e8:7e:e6:73:4e:7c:ce:b9:f1:f3:f3:6d:dc:a1:fd:48:25:47:
46:69:66:2d:ce:7a:14:9b:6a:16:18:f3:d1:5e:ac:80:58:02:
dd:e1:46:3f:4c:bc:ea:e9:44:5b:9c:f9:d0:7c:4c:33:f2:5e:
43:92:dc:ca:f9:92:c8:92:f3:23:d9:72:5e:07:d4:f5:12:bb:
25:64:c9:9b:6c:12:45:88:11:09:75:c8:48:9d:5a:53:cd:60:
b2:f6:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:38:37 2026 by rpki-client