Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
File: MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json)
Hash identifier: zVaTmBVLFNZKcsZcR3Bvx+z1mFAxDFxTBzIAFYTO5eM=
Subject key identifier: 87:20:1C:3C:F2:3A:32:07:D3:89:5F:E3:F6:8B:1F:97:D9:13:10:47
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 019D33AD1FBA4503C7A87F65399C48E3B508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
Manifest number: 0C60
Signing time: Sat 28 Mar 2026 09:01:16 +0000
Manifest this update: Sat 28 Mar 2026 09:01:16 +0000
Manifest next update: Sun 29 Mar 2026 09:01:16 +0000
Files and hashes: 1: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: NJIR7SWBGmkcH2DC1EnWGiVkOnvD9JshYASelnTbfgQ=)
2: b5hEA0skW7XIPdQy24vlGY78QsQ.roa (hash: wOWtUPMhhEOhukktL5n5JA5DpIw7T84vi3SfnV7rzhc=)
3: wb3Uxkn8voTzDwcrNKLjdYKwRZo.roa (hash: e7gIuzOOhyYERCBNmfCsDBCus3fRDqXK6S2fVbX8rlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ad:1f:ba:45:03:c7:a8:7f:65:39:9c:48:e3:b5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Mar 28 09:01:16 2026 GMT
Not After : Mar 29 09:01:16 2026 GMT
Subject: CN=87201c3cf23a3207d3895fe3f68b1f97d9131047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:8d:81:69:3a:66:29:9c:e3:53:f6:08:ff:
80:b6:dd:12:a1:a9:d6:f4:6e:93:05:92:99:d2:87:
e4:88:22:47:1d:ea:39:92:fa:26:2c:3d:d2:f0:ca:
0d:74:45:35:98:b2:35:53:5f:09:a1:be:d4:c4:6d:
fc:55:77:94:71:c6:6d:7c:b0:d1:d1:87:f4:49:1d:
b7:af:79:c2:06:08:7f:1d:61:5b:ee:91:7a:95:7f:
3e:bf:c4:62:14:d6:de:9d:85:3e:41:97:65:20:07:
5d:26:bc:00:08:53:72:04:7c:03:82:ea:1a:3e:1f:
2c:61:c5:f4:ba:7f:9c:6d:56:5d:e0:6c:f9:ad:a3:
6f:ef:71:b9:f1:48:65:73:b7:54:11:31:b6:6a:de:
4c:06:4f:a7:ce:ba:81:44:9a:06:8e:83:d9:2c:45:
df:8b:ae:b9:d2:65:12:52:bf:cf:a5:eb:bf:6d:ce:
a9:20:a0:6b:bd:2f:bf:87:8d:a4:e8:c3:02:f5:12:
1c:e5:97:e6:9b:34:3d:fd:29:37:f9:4b:3b:8a:90:
b2:45:ae:c8:d4:8f:bc:15:10:58:46:e2:7e:82:69:
e2:a5:36:04:fb:41:19:28:34:0d:be:35:ae:59:a2:
87:37:ce:93:da:6b:ee:5a:a9:20:0a:7f:db:bd:a4:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:20:1C:3C:F2:3A:32:07:D3:89:5F:E3:F6:8B:1F:97:D9:13:10:47
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:eb:67:80:ac:de:4c:4e:56:22:34:49:b7:a6:ef:1e:22:06:
04:c5:a0:f4:d9:b7:75:1f:71:c6:47:b5:f3:e5:fe:3c:14:b3:
ac:44:52:e3:39:50:46:3a:5f:9c:f7:b3:43:d6:08:30:39:a5:
7b:3b:5a:91:0d:5f:ca:e0:12:98:ad:22:41:cc:dd:f7:28:1d:
58:34:4f:ca:e7:bf:55:ba:df:c9:7a:16:e9:91:0f:a3:2a:1b:
11:16:93:41:e4:3d:cd:57:9c:09:b5:64:b3:0e:07:b8:05:2f:
62:22:4d:a2:e4:5c:4d:31:39:9f:7f:c2:bf:ef:05:d4:d1:ea:
f9:1f:83:29:2d:c1:fa:2f:6f:77:8b:89:aa:7d:a3:94:f6:23:
5b:01:e3:1c:4f:8b:0a:cc:28:4c:fe:fd:94:7e:62:90:1d:92:
61:3d:cb:5a:36:95:d1:6b:26:13:73:3b:24:2b:53:47:12:d6:
8b:2d:94:eb:d5:48:3f:44:da:cd:61:cf:ea:93:cc:62:b1:60:
03:ce:07:b0:41:ce:32:a4:a6:7e:51:11:cf:ff:d7:18:6c:f5:
46:61:9a:81:0c:c0:ef:9d:10:c7:b0:83:1d:a9:e9:3c:69:40:
7a:16:9c:0f:8e:58:59:e3:66:2c:24:de:87:45:39:92:3e:3d:
3b:3e:c1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:10 2026 by rpki-client