Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: vFRe97l7KzWgfGs2ni1AXTAvObn1EOHwqnGwnY9s/Xs=
Subject key identifier: 3C:46:D2:D2:FE:18:04:22:AE:09:63:1B:DF:7B:B4:81:BC:BB:DB:89
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 019FA14D44BCAF8CFEFD5C80AD23AC55B69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0A8D
Signing time: Mon 27 Jul 2026 02:00:23 +0000
Manifest this update: Mon 27 Jul 2026 02:00:23 +0000
Manifest next update: Tue 28 Jul 2026 02:00:23 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: QKpshSYXbhH1oimADiQ2NjUQN+m/A/JqVAQ+u7v0h5M=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:44:bc:af:8c:fe:fd:5c:80:ad:23:ac:55:b6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Jul 27 02:00:23 2026 GMT
Not After : Jul 28 02:00:23 2026 GMT
Subject: CN=3c46d2d2fe180422ae09631bdf7bb481bcbbdb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b3:a8:c5:5f:a7:d0:e5:22:5c:32:fe:77:45:
e6:bb:da:fa:c3:b1:91:e8:0e:2d:dc:3f:be:55:25:
05:ee:90:e5:24:e4:84:89:f8:6f:db:c9:d0:5e:b0:
b8:76:87:1d:d9:4d:26:db:24:6a:74:42:ea:40:b8:
80:13:b3:74:65:da:55:03:11:06:b6:82:d2:c8:cb:
86:8c:eb:4c:98:5c:d4:37:a4:d6:66:f5:5c:e8:b7:
bf:66:86:57:b4:11:45:55:b8:8d:77:34:1e:8c:bb:
40:f2:f3:fd:84:e2:e2:ff:35:04:5d:68:8d:f7:4d:
64:f3:d0:d0:df:d2:aa:83:d6:cc:b9:fe:90:d9:54:
bd:ee:55:9b:de:7c:3e:1d:79:53:c2:8f:39:62:5d:
07:63:3b:80:fe:72:3e:e2:0b:b4:a5:52:d5:0a:a6:
8b:c6:40:e5:84:ac:a6:2c:9f:16:7f:94:bf:05:91:
5d:65:04:0a:71:c5:52:95:16:7a:ba:10:72:9c:ed:
0d:74:f1:56:01:89:b9:33:45:6f:54:39:4a:0d:f1:
49:61:9f:78:81:7a:22:6d:fd:a2:c7:ca:47:28:5e:
0c:4e:31:64:7d:7c:d6:28:90:69:09:98:d3:e5:8c:
4d:cb:ac:8b:3e:ea:20:8a:79:05:a0:55:85:ca:a7:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:46:D2:D2:FE:18:04:22:AE:09:63:1B:DF:7B:B4:81:BC:BB:DB:89
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:90:81:ab:63:d5:ad:27:b6:24:e5:42:1e:e7:28:41:23:e3:
1e:7e:0d:1a:57:4d:34:67:04:7f:75:54:2d:48:09:0f:53:0b:
41:67:d7:d6:95:c5:5f:8b:13:99:e4:98:b3:d2:d1:cb:07:25:
af:a3:cb:ec:e2:c9:b2:60:9a:cd:13:75:cf:ff:f4:a1:03:7e:
30:99:73:58:2c:31:1c:15:70:0f:48:16:03:85:9a:72:3a:34:
7b:72:9f:e9:78:ba:3f:ac:c6:bf:c0:84:60:15:9c:10:07:ab:
8d:67:c6:92:22:57:82:23:40:36:50:87:29:27:b2:72:76:6e:
ba:24:d7:c5:d3:72:7f:ed:38:06:42:04:92:13:e6:b2:b7:87:
5e:5b:39:a6:28:2e:6d:f4:d0:a9:51:47:1e:9b:11:e7:ce:3a:
8e:a4:4f:3c:a6:8c:8f:40:40:0c:d5:2e:af:65:ce:72:d8:07:
01:c4:3c:c3:3b:ec:61:a6:99:eb:3b:a6:74:fd:a7:86:75:76:
c7:19:b7:59:6b:c7:cb:8d:8f:8b:dc:c2:a6:ac:9c:d9:f7:e2:
4c:39:cc:6d:55:7f:c8:44:c7:62:15:eb:36:8b:fb:c4:6d:be:
4f:85:f6:a0:c2:dc:d0:58:a6:f3:8e:34:42:b3:a4:6b:75:a5:
35:d5:18:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:02 2026 by rpki-client