Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: FUZVxB6uQL6wfuG2PysEiwubsH1WE81RH6aDGEZr4HY=
Subject key identifier: 03:CE:82:49:A7:38:B9:97:B4:1F:16:62:61:23:F3:02:B7:10:21:76
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 019D2A72E8A23BA062E5B8E4B81B5A1DE553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 14:01:06 +0000
Manifest this update: Thu 26 Mar 2026 14:01:06 +0000
Manifest next update: Fri 27 Mar 2026 14:01:06 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: br3rMdOx2YGic65gvTmr9Pgau+nw+fCQ+gIU0pDsj/w=)
2: cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa (hash: /VirzHss1ndnL0VauqeSmTCntzhbwvddkhihXgztiNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:e8:a2:3b:a0:62:e5:b8:e4:b8:1b:5a:1d:e5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Mar 26 14:01:06 2026 GMT
Not After : Mar 27 14:01:06 2026 GMT
Subject: CN=03ce8249a738b997b41f16626123f302b7102176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:ba:c8:97:8f:8c:0c:42:0c:91:e3:c5:f1:
19:af:5a:07:51:ab:e6:ab:55:d2:49:2c:9b:03:4f:
14:84:25:7d:f3:a6:8d:62:ae:35:28:5b:89:d4:f3:
8a:3a:36:dd:7a:a4:de:a4:7c:6d:f4:ba:58:7c:5c:
a7:54:ca:62:a2:a6:d6:5b:ef:89:5a:d3:5f:4a:bb:
91:e3:6e:a6:9a:a5:18:1c:a5:72:62:74:f1:9a:14:
fc:e5:fe:f4:9e:d9:d0:76:63:9c:8e:7b:05:b2:9d:
ae:b2:03:4d:be:24:b1:5a:26:a6:95:95:58:ce:3e:
14:ea:fc:ac:7c:83:da:9d:d0:36:c2:c3:43:32:ef:
62:15:8d:b1:88:71:32:09:e0:77:20:c1:71:57:a3:
75:26:2c:04:89:26:e2:ad:06:b9:9f:f3:59:4a:47:
b7:85:43:26:d6:21:29:09:06:ac:4c:fd:37:a6:82:
0e:d0:2d:99:bb:eb:aa:35:9a:fa:24:45:c5:0e:e8:
3e:87:c1:81:d3:11:04:9e:50:6b:3b:55:ce:4f:be:
da:0c:8a:36:a6:6c:16:43:c5:6c:80:93:9c:b1:7a:
d8:17:1e:b6:43:d0:9c:31:ff:28:07:a2:d1:d2:99:
7b:dc:3f:90:ce:88:af:5f:48:59:b3:75:00:21:06:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CE:82:49:A7:38:B9:97:B4:1F:16:62:61:23:F3:02:B7:10:21:76
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:72:40:2f:b8:cf:f6:b2:23:c6:22:5f:9b:e3:eb:df:b3:2e:
a9:f2:04:7b:da:f2:44:24:df:9f:d2:fa:1b:08:00:4a:4c:45:
88:51:45:d4:a5:ec:c9:37:cc:c4:18:04:ea:cf:52:9f:a0:a1:
59:4c:db:b0:51:09:d1:12:64:53:92:be:7b:11:fc:53:f8:a2:
39:44:29:f0:f4:7a:d5:24:16:f2:d3:0f:d1:fd:cd:68:76:90:
b8:0b:ed:04:7f:19:8f:5b:a6:c8:be:56:25:f4:c8:93:f8:be:
28:4d:e3:3e:cd:ab:5b:3f:f9:b7:1c:29:40:b0:3d:62:02:23:
c5:4c:5a:38:09:85:24:98:7b:e7:20:ca:1d:6c:79:da:b3:2a:
85:71:3c:c1:8d:a0:3d:c4:86:70:a6:40:9f:c7:ce:87:2e:b2:
24:76:f6:4c:63:6d:28:e4:29:7e:7e:a3:48:ce:92:f4:e6:83:
e4:17:bf:3f:4b:56:87:78:c3:5e:ec:88:31:fd:bb:b0:2b:ec:
bc:b2:90:86:b9:18:89:9c:e4:20:33:73:09:c1:e4:ab:27:a6:
18:6c:d8:c8:92:3d:96:57:02:aa:cf:e2:b9:b0:47:4b:b4:70:
e8:89:02:65:f6:e4:73:e2:72:2b:7e:b7:d6:7e:73:20:79:76:
53:e1:ef:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:24 2026 by rpki-client