
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: WkRre5qqIJRc4aBGOePFijfSdx7wyay4QmU0dX51Djc=
Subject key identifier: 46:B7:07:62:32:A0:47:1F:EC:4F:0C:64:3E:49:8C:03:1C:2F:2C:A0
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 01A08AFB020B27D55C16D960F1F94D3FDBC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0B06
Signing time: Thu 10 Sep 2026 11:01:40 +0000
Manifest this update: Thu 10 Sep 2026 11:01:40 +0000
Manifest next update: Fri 11 Sep 2026 11:01:40 +0000
Files and hashes: 1: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (hash: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0=)
2: ME0H6FJMomj5qNZa55hYa_mg8BI.roa (hash: 9JjtlUlu4wsnh6OKmL8KpV7lEe7W07be+5Wu0KAr73g=)
3: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: ytmjtQzrm1zLok9TgXW4DL8E/kjih2bHzrhTLEGyVUQ=)
4: mxim8hiMW6KSmM1j_q23upqnj0k.roa (hash: hg33XIuLOCBoWLYKxDMan6DF9gxch5zAkStGQyi0GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fb:02:0b:27:d5:5c:16:d9:60:f1:f9:4d:3f:db:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Sep 10 11:01:40 2026 GMT
Not After : Sep 11 11:01:40 2026 GMT
Subject: CN=46b7076232a0471fec4f0c643e498c031c2f2ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:f3:c9:d2:d1:cb:0a:b6:79:4e:6f:a1:31:
68:da:ee:e2:cd:6e:7c:03:8e:03:c1:33:b7:cf:df:
a0:de:0f:98:a7:0f:9e:a5:62:9c:57:e0:7a:d7:fd:
50:28:b6:41:2c:f0:e4:1e:db:ba:68:7a:d8:ff:1f:
36:6b:39:66:33:ee:11:15:3d:e0:7b:54:dc:2e:05:
94:30:97:4d:51:f7:e7:dc:86:ae:5d:88:a0:9f:9d:
f8:56:2d:b5:b4:99:91:15:d3:10:4b:2d:3b:6e:d9:
f1:d3:07:29:ec:cf:6b:c1:85:ce:60:36:d2:ab:36:
60:9b:d3:5d:9d:aa:4f:45:ca:93:9c:14:f6:47:52:
c3:27:93:cf:1e:6d:6a:ac:90:f3:50:1d:bf:c0:21:
4a:54:82:d9:56:0f:ea:fe:7a:6a:c7:1b:4d:17:9a:
b6:72:13:7a:fc:a5:55:29:a3:ce:65:ee:a8:ac:3a:
0f:9a:cc:d5:fa:13:e2:ad:e8:01:62:55:50:3a:86:
05:4b:86:77:b1:b0:79:49:1f:63:6d:3a:e0:6d:b2:
ea:a7:e6:69:64:c3:f1:b9:d4:71:e8:79:5b:7c:85:
23:62:fb:cf:fe:1e:d2:d6:15:71:da:37:e1:3f:71:
2c:62:1f:17:6e:f4:ba:9f:3b:a3:3e:70:02:6a:8f:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B7:07:62:32:A0:47:1F:EC:4F:0C:64:3E:49:8C:03:1C:2F:2C:A0
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c7:53:4e:95:46:ff:45:41:06:71:79:f1:ca:0b:a6:74:1f:
07:00:d5:1c:9f:a2:7f:00:27:0d:63:0c:77:5d:96:65:21:80:
3c:09:54:c7:8d:27:67:74:68:bb:dc:50:7c:90:32:2a:4e:bf:
c5:68:ff:5e:0c:52:df:78:f8:ed:f8:fc:e2:bb:78:89:f1:71:
9f:a3:65:15:35:8c:e7:28:dc:00:1a:f4:39:07:40:17:16:48:
81:12:6a:3f:8b:e4:0f:4d:70:2b:cf:bc:92:96:44:ef:9a:8a:
79:90:14:1d:f8:71:e0:75:7a:97:de:1e:a1:39:e6:c1:0d:00:
2f:1a:f7:c2:aa:40:b3:85:83:c1:b1:81:53:9b:d4:d1:3f:f8:
d0:d2:db:73:45:1b:52:b2:ad:b3:de:29:fd:d3:f1:45:f6:5c:
6b:7f:44:6d:6c:b4:27:07:8f:cd:dd:c7:d7:1b:07:cc:bd:7d:
11:dc:4a:b0:02:79:47:9f:fd:93:57:49:69:bc:4b:5a:f2:bb:
4b:94:b2:49:db:a5:f7:60:e2:53:38:e6:20:e4:f2:27:70:b1:
45:98:8b:82:70:98:53:b1:1b:f3:96:ce:41:f9:74:83:60:95:
48:23:7f:e8:16:df:f3:fe:d7:31:7c:92:ee:f2:35:be:f8:99:
1e:89:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:26 2026 by rpki-client