Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: xXspcXSch9GM09FihTWSfi2GcyTtlLhvEu9Qfdmmqfg=
Subject key identifier: B5:47:BA:4B:5F:C0:0C:FC:64:68:F5:E5:32:4A:AF:FE:8A:87:09:69
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019E1DFE97ED46C85D68611D62A406576701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0FEC
Signing time: Tue 12 May 2026 21:01:24 +0000
Manifest this update: Tue 12 May 2026 21:01:24 +0000
Manifest next update: Wed 13 May 2026 21:01:24 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: Y/CpTcPefN7nMuwzgk4GcJrGLFv3Ur1iJdmjAT/j7K8=)
2: W-thWstLj_54HzMDe1CPmkWaZZY.roa (hash: LM0Lib5MmpvXnboN7sbqoV81b7z7jQPCb/hPX5AYcvM=)
3: _a4udz3Wowgk3kz0TQHNdav2CGQ.roa (hash: hiqTVe26hrw7pmofqQ2A/tv62bg85cwYZkNLdMZlYYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:97:ed:46:c8:5d:68:61:1d:62:a4:06:57:67:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: May 12 21:01:24 2026 GMT
Not After : May 13 21:01:24 2026 GMT
Subject: CN=b547ba4b5fc00cfc6468f5e5324aaffe8a870969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:70:78:77:87:4d:1b:3b:0f:0a:fa:d4:87:8b:
12:50:1a:48:ae:6a:a5:49:0e:63:55:5f:78:e2:61:
0e:42:bd:37:0e:ac:17:1c:20:06:c9:f6:58:bd:46:
60:07:98:a2:83:57:e4:4b:3f:41:b4:c7:9a:13:c6:
86:5e:c2:be:d9:61:94:d5:d7:04:bd:98:39:91:99:
21:fc:7e:9b:ea:f3:c2:71:95:c6:ac:ea:13:44:83:
9c:af:f0:9c:cf:00:cd:b0:68:58:47:8f:17:55:7e:
ed:d3:18:4e:b4:9b:b8:9d:a7:d5:1a:78:ee:23:d4:
cc:77:19:9e:20:3b:c7:a3:72:e4:2a:0b:49:50:81:
61:3b:b4:15:07:1a:28:cc:05:2a:0d:a9:f4:e9:f9:
23:47:82:f1:c8:4d:3f:a9:66:62:b9:c8:b6:5b:ac:
cb:bb:64:39:fe:2b:f2:ef:72:ba:ef:c2:f1:d4:a7:
0e:4c:7b:29:18:6f:8f:8f:84:8c:20:05:f2:9e:03:
ec:58:57:98:2b:da:22:bb:4d:7b:99:73:a4:e0:49:
b7:89:77:88:fc:51:4d:cc:64:67:ad:cb:a5:f3:e7:
96:fb:8c:16:09:7f:02:6e:f0:c6:62:c2:4a:24:80:
50:6f:b5:db:7c:9a:1c:c2:5a:77:67:64:f0:71:5d:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:47:BA:4B:5F:C0:0C:FC:64:68:F5:E5:32:4A:AF:FE:8A:87:09:69
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d6:e6:f3:c2:5d:d2:9b:7a:d9:7a:c1:a9:e7:9b:fd:11:d6:
42:c5:ec:c4:b1:66:b6:8c:5c:6e:3c:8f:ae:3c:f9:da:e7:a5:
ae:f2:e1:3a:45:60:9a:89:3e:85:57:31:ed:70:49:ee:de:63:
a8:da:45:0e:23:3b:38:41:0e:85:dd:53:83:a0:a1:2c:55:86:
86:62:64:d1:20:65:8c:40:43:b4:48:d2:36:bd:8d:a0:e3:72:
59:92:c9:6b:c8:01:52:81:8a:7f:69:22:5c:93:9f:43:52:99:
a3:d3:61:85:60:7c:fe:1d:75:c3:90:cf:8e:8b:27:8b:9a:45:
60:80:0b:2c:d9:81:95:8b:6a:43:c1:23:9c:50:c7:05:f3:da:
fe:ad:14:e4:ec:6b:60:17:67:94:51:8d:6d:e6:81:a6:f5:7d:
1a:e5:75:82:7e:cd:58:cd:fc:77:90:73:db:fc:9d:c2:95:33:
cc:88:40:ef:76:8a:77:35:b7:12:13:2c:58:53:77:bd:0b:04:
72:2e:51:3c:68:bd:b3:4d:34:d3:67:bf:13:f4:5c:de:b0:ae:
6b:fe:db:8f:d1:0d:78:10:f8:02:cb:63:34:fc:46:66:2d:ac:
29:fd:c7:75:6f:b7:2d:a5:84:b0:bf:f7:80:74:d7:bc:c2:47:
0e:2e:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:28:37 2026 by rpki-client