Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: BncZfSbzzoxtJGHUq3s+mTxr0O0MOwfJ9jlROmltBC4=
Subject key identifier: BE:70:46:55:89:40:6C:86:3B:6E:04:EE:25:71:68:89:F5:1C:37:45
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 01A0DACD4705D7A77CD5EF5181B401444C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 23:01:21 +0000
Manifest this update: Fri 25 Sep 2026 23:01:21 +0000
Manifest next update: Sat 26 Sep 2026 23:01:21 +0000
Files and hashes: 1: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: BWbzPL53N5+UGvuCSDABg2cq8lDvCnAqcwNROA6Dogc=)
2: a27hhTWfb3ZPwrefxvzFE-4LpOE.roa (hash: YD2HgofzORwQjqE1QvYrEUR0cZCvAl9rAIiyQ1ikAHA=)
3: jEXsJW-dSuLpQO5YOKPLDNwuGDI.roa (hash: UIwmv+B0668akDpzT0mGvVjjYi0KKoE4bndrHcRym44=)
4: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (hash: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:47:05:d7:a7:7c:d5:ef:51:81:b4:01:44:4c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Sep 25 23:01:21 2026 GMT
Not After : Sep 26 23:01:21 2026 GMT
Subject: CN=be70465589406c863b6e04ee25716889f51c3745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:ba:71:e6:44:d6:8c:b9:74:94:8a:b7:50:
ad:89:44:76:62:9d:4b:f5:a6:83:fd:2c:2a:b7:e5:
18:56:8b:c9:91:62:99:b3:70:51:8f:90:b9:b3:ba:
b5:3b:54:3b:e7:20:3e:a7:d1:2d:68:38:a9:fb:b2:
06:af:a2:f1:c4:2e:83:52:1c:fa:80:40:dc:b2:57:
84:74:22:2e:33:67:eb:29:af:0b:d2:53:cd:46:8d:
18:ec:32:3a:ae:a1:c8:7d:ca:98:af:cb:ba:94:ba:
0f:53:1b:f1:31:45:77:cf:62:0a:e6:06:da:e4:cc:
aa:e1:28:bf:17:bf:1d:d2:47:7b:09:f7:c6:82:0e:
7b:82:46:30:14:64:f4:a2:ef:61:61:86:e0:be:17:
18:61:53:6f:7d:fd:87:77:a0:d6:7d:91:1e:7c:2c:
41:57:49:12:ef:6d:a5:f7:16:86:db:0c:80:b0:ee:
7c:bd:0a:05:78:0c:9c:88:14:a9:42:d3:b8:a5:0b:
40:a5:be:0b:5f:99:14:b1:0f:53:4f:04:7e:b3:f2:
05:12:d4:43:77:ba:82:e3:07:43:b1:92:5c:85:70:
3a:e4:66:b6:47:7b:b7:cc:94:8c:05:81:fa:ab:1d:
22:ab:0a:72:94:ab:2d:05:e6:56:a2:8f:e5:30:e2:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:70:46:55:89:40:6C:86:3B:6E:04:EE:25:71:68:89:F5:1C:37:45
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6f:71:da:b7:84:23:06:db:1f:51:4a:04:64:39:43:97:4d:
34:28:3a:f2:b0:4e:f4:b0:5a:c8:c2:b9:30:22:67:0a:94:54:
67:48:56:c9:5e:19:f1:9d:73:63:54:94:4b:17:a3:ac:e6:b2:
f0:82:4c:ad:c3:ec:1c:59:44:fa:ed:53:e7:41:95:71:1b:9a:
04:37:e1:25:b1:f4:85:c9:ff:ca:e4:fa:00:58:35:28:44:73:
e3:a8:00:ce:da:f9:2f:2c:c0:ea:9d:dd:7f:e7:ef:89:3f:86:
10:d0:08:17:71:87:ca:7a:a9:e3:22:2f:10:88:bd:77:f7:b0:
e3:5f:29:1e:8c:fc:0b:bc:8f:f5:63:39:ab:9c:07:27:f6:23:
88:88:13:b6:6c:0f:e5:58:b4:48:7a:1f:87:56:d4:79:74:de:
25:19:c6:ba:5d:38:3c:e1:f8:31:b7:a9:e2:18:f1:83:3e:6e:
b4:06:1c:fa:af:00:55:6e:dc:d9:f5:1a:8e:c2:91:3a:8a:8e:
87:ac:7e:6f:07:38:a7:1d:20:3f:bd:59:0d:a9:d7:14:bc:9d:
8a:d5:a0:64:6a:86:92:0a:fa:7d:cd:05:3a:76:23:6d:d1:bb:
a9:04:e8:a8:fe:ba:36:ae:06:ca:42:d7:6e:1e:ad:6a:e0:42:
75:a2:79:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazUcF16d81e9RgbQBREwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYWZmNzUyMDk2ODRhMzU0NjY5MDYxZDIzZGEyOWY4ZWEy
ZjFkNWUwHhcNMjYwOTI1MjMwMTIxWhcNMjYwOTI2MjMwMTIxWjAzMTEwLwYDVQQD
EyhiZTcwNDY1NTg5NDA2Yzg2M2I2ZTA0ZWUyNTcxNjg4OWY1MWMzNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSq6ceZE1oy5dJSKt1CtiUR2Yp1L
9aaD/Swqt+UYVovJkWKZs3BRj5C5s7q1O1Q75yA+p9EtaDip+7IGr6LxxC6DUhz6
gEDcsleEdCIuM2frKa8L0lPNRo0Y7DI6rqHIfcqYr8u6lLoPUxvxMUV3z2IK5gba
5Myq4Si/F78d0kd7CffGgg57gkYwFGT0ou9hYYbgvhcYYVNvff2Hd6DWfZEefCxB
V0kS722l9xaG2wyAsO58vQoFeAyciBSpQtO4pQtApb4LX5kUsQ9TTwR+s/IFEtRD
d7qC4wdDsZJchXA65Ga2R3u3zJSMBYH6qx0iqwpylKstBeZWoo/lMOJkQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5wRlWJQGyGO24E7iVxaIn1HDdFMB8GA1UdIwQY
MBaAFDCv91IJaEo1RmkGHSPaKfjqLx1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTct
OTc4NWEzMzU1NDJhLzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTctOTc4NWEzMzU1NDJh
LzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACW9x2reE
IwbbH1FKBGQ5Q5dNNCg68rBO9LBayMK5MCJnCpRUZ0hWyV4Z8Z1zY1SUSxejrOay
8IJMrcPsHFlE+u1T50GVcRuaBDfhJbH0hcn/yuT6AFg1KERz46gAztr5LyzA6p3d
f+fviT+GENAIF3GHynqp4yIvEIi9d/ew418pHoz8C7yP9WM5q5wHJ/YjiIgTtmwP
5Vi0SHofh1bUeXTeJRnGul04POH4Mbep4hjxgz5utAYc+q8AVW7c2fUajsKROoqO
h6x+bwc4px0gP71ZDanXFLyditWgZGqGkgr6fc0FOnYjbdG7qQToqP66Nq4GykLX
bh6tauBCdaJ5Zg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:41:47 2026 by rpki-client