Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: iQdh0D8Uwhwv4rB5kccL7gE/CULEugrMNbWZ1UUHG38=
Subject key identifier: 1C:32:25:29:BB:F6:F8:13:38:23:35:74:C6:A4:EF:3E:E9:D2:53:8C
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 01A17882F1A1D646A6AE09F1B64684FA5E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0B81
Signing time: Mon 26 Oct 2026 14:00:09 +0000
Manifest this update: Mon 26 Oct 2026 14:00:09 +0000
Manifest next update: Tue 27 Oct 2026 14:00:09 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: 9AK9QVQky9B+PPUmJiCPLd1l7Gz4Yy8SduLbz4BErFM=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:82:f1:a1:d6:46:a6:ae:09:f1:b6:46:84:fa:5e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Oct 26 14:00:09 2026 GMT
Not After : Oct 27 14:00:09 2026 GMT
Subject: CN=1c322529bbf6f81338233574c6a4ef3ee9d2538c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:4b:74:0e:c1:ee:8b:2a:4a:f3:04:31:82:
b8:b5:9f:09:69:95:49:38:dd:1a:98:67:3c:df:d8:
16:f2:b1:a1:a1:e8:f0:96:7b:b8:b9:eb:f6:08:c3:
42:40:41:c6:db:f2:72:e1:0d:93:7c:09:09:c2:54:
b6:45:9c:f1:e0:71:6d:6d:c9:1e:d1:bf:b3:13:6e:
18:14:3e:c2:35:7f:e2:54:91:88:dd:b4:fe:22:03:
07:92:31:30:28:93:cf:a0:95:d7:9e:14:33:a4:4f:
b8:05:1e:28:80:22:79:e4:1e:3d:c7:db:2c:3e:5c:
47:98:81:ca:79:89:7b:23:14:01:c1:c1:1d:05:94:
55:72:98:2a:d9:4a:bb:9c:57:4d:e7:e5:5b:57:bf:
bb:7a:b3:00:85:2a:d9:6a:a8:49:02:20:66:a2:e5:
9d:b9:82:76:40:ae:e0:3e:bc:65:d2:f7:7e:65:f8:
74:e3:0c:73:d6:5d:57:d8:1c:d4:be:67:67:99:b9:
36:88:5d:51:d3:8a:cb:70:6b:64:f1:1d:1d:0e:49:
fe:c4:41:4d:c2:1f:e0:34:05:cf:10:9a:5b:6d:26:
95:c4:6b:ed:2c:d9:9e:ca:a7:4e:1f:29:4b:65:5a:
73:a4:67:f4:3e:4c:8f:31:f9:56:0a:86:69:b9:40:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:32:25:29:BB:F6:F8:13:38:23:35:74:C6:A4:EF:3E:E9:D2:53:8C
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:de:fe:20:6f:39:7e:e2:8d:11:0d:9e:39:7b:e0:a0:65:36:
c1:cc:4b:ca:bd:41:a9:eb:00:e8:6c:0a:d7:c7:86:5c:3f:83:
f2:64:19:50:62:2e:ad:cc:34:3e:17:72:e8:ae:9b:44:e1:31:
6a:63:e8:c4:fa:59:6d:f1:4f:f5:0a:21:18:75:b0:65:41:c0:
6a:85:66:7f:65:b8:52:31:cb:2f:82:cf:9c:ee:ae:eb:24:8b:
f6:56:1a:b7:56:da:c8:48:f7:a9:28:07:69:d1:e3:33:8f:4b:
04:f8:98:1c:04:94:64:96:f1:f5:6a:e5:19:6f:24:cb:27:82:
d7:53:27:a9:2a:11:69:41:89:b4:74:1a:3b:4f:60:8e:46:29:
ec:ca:0b:15:28:19:ed:34:5e:0d:30:ca:7c:2f:db:69:3c:c5:
78:95:a4:b1:a0:6b:8f:ab:fe:54:15:16:b5:c9:df:67:8e:22:
6b:72:f1:59:2c:12:29:70:f8:20:7a:56:28:49:98:40:13:cc:
11:50:76:51:8a:83:ab:4c:12:4c:41:3a:54:7c:07:80:19:91:
87:06:f3:5c:89:5b:43:bc:2d:cb:d2:eb:81:d4:b0:aa:9f:83:
af:54:4a:51:d9:ff:8c:34:34:8c:f3:45:e3:f1:38:80:5c:9e:
6a:98:c0:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4gvGh1kamrgnxtkaE+l4kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTM0ZjlkMWRiZDIwYWE4N2ZiMGY2MmJkMmI2YzVlMzBj
NjE0YTIwHhcNMjYxMDI2MTQwMDA5WhcNMjYxMDI3MTQwMDA5WjAzMTEwLwYDVQQD
EygxYzMyMjUyOWJiZjZmODEzMzgyMzM1NzRjNmE0ZWYzZWU5ZDI1MzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2ZLdA7B7osqSvMEMYK4tZ8JaZVJ
ON0amGc839gW8rGhoejwlnu4uev2CMNCQEHG2/Jy4Q2TfAkJwlS2RZzx4HFtbcke
0b+zE24YFD7CNX/iVJGI3bT+IgMHkjEwKJPPoJXXnhQzpE+4BR4ogCJ55B49x9ss
PlxHmIHKeYl7IxQBwcEdBZRVcpgq2Uq7nFdN5+VbV7+7erMAhSrZaqhJAiBmouWd
uYJ2QK7gPrxl0vd+Zfh04wxz1l1X2BzUvmdnmbk2iF1R04rLcGtk8R0dDkn+xEFN
wh/gNAXPEJpbbSaVxGvtLNmeyqdOHylLZVpzpGf0PkyPMflWCoZpuUD2fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwyJSm79vgTOCM1dMak7z7p0lOMMB8GA1UdIwQY
MBaAFDCjT50dvSCqh/sPYr0rbF4wxhSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEt
ZWI2NTNkMzYyMmJiLzEvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEtZWI2NTNkMzYyMmJi
LzEvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO97+IG85
fuKNEQ2eOXvgoGU2wcxLyr1BqesA6GwK18eGXD+D8mQZUGIurcw0Phdy6K6bROEx
amPoxPpZbfFP9QohGHWwZUHAaoVmf2W4UjHLL4LPnO6u6ySL9lYat1bayEj3qSgH
adHjM49LBPiYHASUZJbx9WrlGW8kyyeC11MnqSoRaUGJtHQaO09gjkYp7MoLFSgZ
7TReDTDKfC/baTzFeJWksaBrj6v+VBUWtcnfZ44ia3LxWSwSKXD4IHpWKEmYQBPM
EVB2UYqDq0wSTEE6VHwHgBmRhwbzXIlbQ7wty9LrgdSwqp+Dr1RKUdn/jDQ0jPNF
4/E4gFyeapjAyg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:56:40 2026 by rpki-client