Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
File: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft (raw, json)
Hash identifier: Di0+GG530tuemnf/sghlt1j+rl3hMzofgaTDsTVhreM=
Subject key identifier: D4:C7:D2:55:69:DB:1A:43:66:35:B5:64:8D:9A:E1:74:E4:AE:FD:EF
Authority key identifier: 30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
Certificate issuer: /CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Certificate serial: 019D27DF8687A938A260C0AD41D3248399C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:00:53 +0000
Manifest this update: Thu 26 Mar 2026 02:00:53 +0000
Manifest next update: Fri 27 Mar 2026 02:00:53 +0000
Files and hashes: 1: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl (hash: /TuCx0GL8Ejm+NCddlOSyI7Nb02S/H8SrMWKcc6T91I=)
2: obgVf-JtsYpCUbCziUNUZUCJX0s.roa (hash: elZk4GLccy9BtoLZB3Moi/HhDxse12ofYTVsYp+AUXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:86:87:a9:38:a2:60:c0:ad:41:d3:24:83:99:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Validity
Not Before: Mar 26 02:00:53 2026 GMT
Not After : Mar 27 02:00:53 2026 GMT
Subject: CN=d4c7d25569db1a436635b5648d9ae174e4aefdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:ed:cc:94:5a:a8:4e:52:03:da:46:1a:1f:
21:95:d3:76:50:22:8b:a3:36:9f:53:09:a8:de:a0:
f5:5c:64:68:09:cb:40:0c:bb:37:9b:b3:03:5b:32:
37:0d:92:e4:d4:fc:a9:6c:aa:8f:fe:dc:71:c2:3c:
1f:14:f3:8a:74:e3:fd:6a:f2:ae:71:e2:21:9a:39:
70:3c:32:16:88:4e:49:e3:be:1a:46:8b:aa:2e:1a:
d8:3e:28:40:46:99:1c:66:a6:3e:7f:8c:5e:59:5e:
19:e9:0e:d4:65:4e:ba:2d:ca:39:7f:d7:a3:66:46:
ed:79:de:59:7d:99:1f:d3:38:57:a0:45:0d:6e:9c:
e1:35:0e:1a:fa:26:60:03:01:db:02:e4:2e:22:91:
d5:51:d1:31:3d:9f:ba:d7:c0:5d:c9:61:17:11:eb:
cc:1e:9a:23:86:b3:4f:63:02:07:bc:63:1d:11:b1:
d7:97:65:05:5a:77:5d:3f:1b:cc:53:5e:49:6d:4c:
25:f9:c2:5e:3e:39:06:3a:cd:ee:42:63:6a:31:19:
86:87:24:5e:28:06:82:d4:6c:6e:af:24:98:11:ab:
17:3a:6f:8b:f5:ad:a2:ea:57:0f:14:f4:d0:ba:6d:
8f:d5:a8:b4:d3:0d:66:0b:df:64:9c:e9:be:86:2a:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C7:D2:55:69:DB:1A:43:66:35:B5:64:8D:9A:E1:74:E4:AE:FD:EF
X509v3 Authority Key Identifier:
keyid:30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:45:52:3d:6d:95:4d:c4:75:fc:a6:29:cf:6e:dd:cc:f4:b2:
89:93:3a:f7:e5:77:a1:4b:d6:50:0f:e2:f8:8c:c8:74:89:e9:
4f:d1:36:3e:7c:ef:d9:ab:99:af:25:56:a7:0d:b1:86:11:0c:
d9:ef:8f:d8:d6:18:9c:0d:28:23:ff:df:73:0d:80:28:7b:43:
bc:4a:9d:d0:90:cc:38:9f:69:07:e3:7e:ce:84:17:0c:f3:73:
d3:60:65:36:70:d1:3e:40:54:ff:99:71:c1:8f:75:50:0d:af:
bd:b0:fd:ab:aa:3f:81:07:7c:bf:19:01:96:e5:d9:21:af:1f:
b0:1b:05:4e:59:f6:cc:2d:c8:df:90:2e:bc:32:87:5a:20:9a:
00:23:c7:77:37:6a:3f:28:76:f5:5f:cf:b6:36:8e:50:86:2f:
2c:46:c6:27:ca:93:17:8d:69:f3:dc:08:c8:6f:94:d6:6e:56:
57:68:14:29:4f:6f:cc:8e:fb:73:e3:5a:58:d4:b7:62:29:99:
d9:36:20:08:e9:be:d9:e6:59:3b:63:14:2b:01:61:87:f7:04:
94:5a:31:45:d1:58:76:a6:cf:85:91:c1:a7:b7:52:b4:49:57:
b6:5c:7d:ed:f0:38:94:32:ca:b1:63:cc:a6:e3:87:bf:66:5e:
d4:f8:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:42 2026 by rpki-client