Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
File: MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft (raw, json)
Hash identifier: qrP5p/nizCoyAL2O02M19Vyi/YH855SuanW83GX3h2k=
Subject key identifier: 7C:40:9C:04:08:E6:D5:92:41:D8:10:43:89:B5:DE:4C:01:F6:55:E9
Authority key identifier: 30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F
Certificate issuer: /CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
Certificate serial: 019D28F1FD6C42140C4A0B1A5F0DF67FDCC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
Manifest number: 0C0E
Signing time: Thu 26 Mar 2026 07:00:40 +0000
Manifest this update: Thu 26 Mar 2026 07:00:40 +0000
Manifest next update: Fri 27 Mar 2026 07:00:40 +0000
Files and hashes: 1: MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl (hash: OeH6MK3VBAiKkJwLghWgDG8/iI9KvgsNlJHxS2jTDFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f1:fd:6c:42:14:0c:4a:0b:1a:5f:0d:f6:7f:dc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
Validity
Not Before: Mar 26 07:00:40 2026 GMT
Not After : Mar 27 07:00:40 2026 GMT
Subject: CN=7c409c0408e6d59241d8104389b5de4c01f655e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:de:61:38:a2:7c:63:e7:43:9a:51:ab:45:
6e:0b:69:c5:cd:2b:6f:4a:d0:bd:cc:c0:b7:62:20:
77:ec:6f:3f:92:78:4b:18:24:9d:72:40:10:24:aa:
15:d1:2b:6f:25:67:67:85:30:4e:6b:1b:4c:11:c7:
e8:0b:a4:2e:f1:d3:e0:3b:0d:fc:7a:dd:c3:49:f5:
65:15:a8:cd:6c:7a:bc:06:e7:b6:75:79:dc:ca:39:
58:62:1b:2a:6b:96:92:84:f4:e4:56:f6:ba:84:d3:
59:bb:15:f1:5f:f9:fd:6b:51:1a:5e:15:d0:66:9f:
4c:a6:79:89:8c:2e:98:94:8a:7a:43:c8:5b:09:77:
ac:77:e7:1d:b7:db:41:70:6a:ec:21:1b:39:d9:c7:
66:ee:dc:c2:a6:69:ee:25:4c:24:73:32:95:93:b4:
dc:67:08:98:65:a7:6d:73:87:71:a6:21:5f:a6:1d:
4d:9b:d3:3d:31:f0:53:3e:3f:e3:e4:45:7f:86:f1:
8d:75:68:9f:6b:e3:da:01:d1:b6:97:01:14:46:54:
8f:8b:e2:38:57:9f:ea:b0:63:1e:0c:73:70:dc:85:
b7:dd:c2:af:9e:f6:ad:77:ab:8b:2e:31:3d:cc:0f:
35:42:ba:56:92:47:ba:69:f7:52:a8:49:a3:4c:24:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:40:9C:04:08:E6:D5:92:41:D8:10:43:89:B5:DE:4C:01:F6:55:E9
X509v3 Authority Key Identifier:
keyid:30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:86:ac:c3:14:9f:ef:a6:78:3a:9c:2d:4f:40:f5:8d:0c:fd:
8f:86:4b:b2:c2:67:8d:e0:44:4f:ec:35:41:97:81:2f:71:9d:
8f:2a:a2:95:4c:1a:fc:39:16:83:1a:cc:c6:4a:14:4b:1b:a0:
27:64:ef:e0:6d:5b:ec:18:87:66:b0:53:d3:c1:37:6e:94:b9:
3b:9e:7c:b6:b1:fa:15:c5:1b:57:67:68:c5:ee:d0:8c:b6:25:
cc:dd:14:c0:54:d5:b3:a9:1e:ad:ac:e6:7e:87:15:06:7c:b5:
72:5f:01:2b:16:65:fa:fe:05:a6:53:8e:0a:b6:c4:b8:e5:a0:
8b:6e:1f:0f:62:de:54:07:55:da:bf:d9:06:78:15:4c:e5:95:
6e:c2:3e:5f:b0:a2:3f:49:ed:26:62:3c:ba:6b:0c:b6:c6:a4:
15:32:53:5b:49:8f:7d:5a:14:4b:fc:1a:a5:dd:e9:a6:10:2c:
f8:5e:65:87:2b:e1:09:d1:29:95:24:1e:b3:9d:4f:4d:c6:b8:
29:61:32:4d:70:e5:e0:5e:9f:f6:34:22:c1:20:59:db:77:94:
75:42:58:2f:fd:df:52:1f:83:60:06:8c:37:ea:1e:f3:24:14:
3d:5a:f6:84:06:49:34:f2:42:fe:fe:67:43:e6:cc:7e:04:15:
b0:23:5f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:52 2026 by rpki-client