Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: OHN4le4fh5sb1ZUM52oJWWJWDlcb93qF5+zw32OtZyM=
Subject key identifier: 0B:77:21:E2:E5:E0:CC:67:E5:F9:65:2C:DA:6F:AD:00:22:A2:A9:00
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 019FA44E99849C897CD58DC26466F97578BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 19DB
Signing time: Mon 27 Jul 2026 16:00:42 +0000
Manifest this update: Mon 27 Jul 2026 16:00:42 +0000
Manifest next update: Tue 28 Jul 2026 16:00:42 +0000
Files and hashes: 1: SYtSh6MgqpX8fZ4WHojx0wxmwAU.roa (hash: qfAbswAstxuSdJu35mimEN1jiqsDnLeGp+g0coBMNag=)
2: YIp8U7durT_VOWJi51t_EhaEZmc.roa (hash: uqZNroUU2FsZFyQ6iEi3c3DU2XeoL0O/vrop/BVrvjs=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: ZILbxoikN//AvoKbjEGEBl1uhoAzXI/Uoi5Qa7Q5aX4=)
4: pEE9oryUWOVeetd5uFrgO_cdrpE.roa (hash: jDaM82TLaH8oaB0vSE3Avb/s35Fb5rQ5AgRFhpcBjks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4e:99:84:9c:89:7c:d5:8d:c2:64:66:f9:75:78:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Jul 27 16:00:42 2026 GMT
Not After : Jul 28 16:00:42 2026 GMT
Subject: CN=0b7721e2e5e0cc67e5f9652cda6fad0022a2a900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:8b:ca:18:09:9c:aa:67:39:15:5e:0c:de:
ab:f1:87:c6:55:f5:51:e5:dd:18:ec:ff:bd:cb:26:
bd:75:49:06:a4:fc:8a:3b:85:47:5e:60:77:45:af:
f2:25:90:4c:32:89:27:02:7e:0b:86:78:57:e1:a0:
89:e9:22:1c:61:fa:45:49:d4:67:8e:99:f4:94:22:
f5:d9:5a:f2:67:da:fe:a1:a8:47:83:c1:78:51:ce:
2c:0b:41:13:97:6d:51:21:78:f8:4d:f0:e0:cd:cb:
32:11:4d:4f:e0:61:4b:52:c5:ef:58:25:33:e0:74:
9c:36:ae:0e:37:ef:b7:b1:ca:94:aa:f3:0c:e8:a1:
1c:42:c3:e7:61:cc:76:a7:cf:71:16:34:e5:cb:f3:
2e:83:d5:f8:ca:89:c7:5e:bd:1d:3c:23:8e:cb:47:
98:36:03:42:fc:cf:f0:43:70:43:ea:3e:85:6a:ce:
ab:e4:23:9e:fb:85:bf:37:c2:0b:73:fc:ea:6d:3e:
0f:fb:c4:74:9b:a5:5c:68:8b:91:93:dc:fd:ce:14:
b5:9e:b9:04:5a:d7:bf:89:47:da:f0:08:fb:45:7c:
be:ec:71:21:82:19:e5:4e:85:06:e0:6c:02:f8:ae:
9c:6d:ca:83:7f:10:1b:88:dc:26:98:e8:99:6a:a2:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:77:21:E2:E5:E0:CC:67:E5:F9:65:2C:DA:6F:AD:00:22:A2:A9:00
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8f:a1:e0:0e:26:34:9c:3a:97:d3:96:29:9b:28:0a:e1:1a:
3d:96:d8:fc:a3:4f:0e:13:8a:7b:89:7d:60:10:57:0f:d8:e9:
ee:fa:e7:ad:cc:78:05:a0:13:6a:25:35:6c:b4:91:ce:dd:37:
83:cc:4a:42:4d:75:5b:0f:a5:ea:dd:1c:ac:01:99:ce:47:d9:
eb:53:38:f6:53:b3:ae:0b:cf:67:7a:26:b4:01:00:3d:38:0a:
36:66:93:7d:1b:d7:06:97:4c:b0:bc:11:f6:ee:5a:62:83:55:
21:1e:e0:b8:bd:3a:7c:df:80:ae:6d:65:69:58:f2:79:1c:c6:
5d:5c:54:eb:c3:f6:bf:0f:e9:f6:9a:d0:cf:0a:63:5b:eb:fd:
e0:f1:fd:7a:c7:42:31:24:8a:e6:f8:d5:65:d8:4f:14:a9:f0:
1a:9c:87:2a:1e:ca:f7:1f:54:74:ef:d6:c3:ec:b9:10:f6:f5:
10:c5:bc:6b:31:39:85:36:41:98:0f:0c:9f:5e:8a:20:06:8a:
a8:33:bc:57:2f:1e:4b:b5:ce:8a:5d:74:0b:57:5d:ac:a8:c5:
cb:6b:f7:62:0a:f2:86:26:cf:fb:7f:80:72:5d:8e:e3:2d:62:
89:f0:7f:50:5d:46:70:f1:ad:e0:61:8a:d3:be:d4:7c:ab:f4:
5d:7c:af:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+kTpmEnIl81Y3CZGb5dXi7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNGQ3NmRkMmY0NjA2OGIwODcxYWQ0NTAwYWM2ZTU3N2Fm
ZTQ2OWMwHhcNMjYwNzI3MTYwMDQyWhcNMjYwNzI4MTYwMDQyWjAzMTEwLwYDVQQD
EygwYjc3MjFlMmU1ZTBjYzY3ZTVmOTY1MmNkYTZmYWQwMDIyYTJhOTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5+LyhgJnKpnORVeDN6r8YfGVfVR
5d0Y7P+9yya9dUkGpPyKO4VHXmB3Ra/yJZBMMoknAn4LhnhX4aCJ6SIcYfpFSdRn
jpn0lCL12VryZ9r+oahHg8F4Uc4sC0ETl21RIXj4TfDgzcsyEU1P4GFLUsXvWCUz
4HScNq4ON++3scqUqvMM6KEcQsPnYcx2p89xFjTly/Mug9X4yonHXr0dPCOOy0eY
NgNC/M/wQ3BD6j6Fas6r5COe+4W/N8ILc/zqbT4P+8R0m6VcaIuRk9z9zhS1nrkE
Wte/iUfa8Aj7RXy+7HEhghnlToUG4GwC+K6cbcqDfxAbiNwmmOiZaqLmTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAt3IeLl4Mxn5fllLNpvrQAioqkAMB8GA1UdIwQY
MBaAFJpNdt0vRgaLCHGtRQCsbld6/kacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQt
NDQ2OTJkYmNjYjMyLzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQtNDQ2OTJkYmNjYjMy
LzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4+h4A4m
NJw6l9OWKZsoCuEaPZbY/KNPDhOKe4l9YBBXD9jp7vrnrcx4BaATaiU1bLSRzt03
g8xKQk11Ww+l6t0crAGZzkfZ61M49lOzrgvPZ3omtAEAPTgKNmaTfRvXBpdMsLwR
9u5aYoNVIR7guL06fN+Arm1laVjyeRzGXVxU68P2vw/p9prQzwpjW+v94PH9esdC
MSSK5vjVZdhPFKnwGpyHKh7K9x9UdO/Ww+y5EPb1EMW8azE5hTZBmA8Mn16KIAaK
qDO8Vy8eS7XOil10C1ddrKjFy2v3YgryhibP+3+Acl2O4y1iifB/UF1GcPGt4GGK
077UfKv0XXyvfw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 20:30:38 2026 by rpki-client