Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
File: MK7HNts6BEOzui_FtKQkWG-0zhU.mft (raw, json)
Hash identifier: Mj6cf7YKmMsFbNa6apvl+CpbtKPyesvArP4zrlhu+8Y=
Subject key identifier: DF:83:A7:4D:64:75:F6:A1:E8:1B:4A:4A:E0:25:54:E3:BB:C4:14:00
Authority key identifier: 30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15
Certificate issuer: /CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15
Certificate serial: 019D26CD20C32EBA064C5B2CA5844CA9E19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
Manifest number: 01A1
Signing time: Wed 25 Mar 2026 21:01:10 +0000
Manifest this update: Wed 25 Mar 2026 21:01:10 +0000
Manifest next update: Thu 26 Mar 2026 21:01:10 +0000
Files and hashes: 1: 3tQLmVymoZqw7VQrq9obl-zIU9Y.roa (hash: UW5r9uI28BmP8sjp5a0mYV+U1btRYcKpVFrYo4A53mM=)
2: MK7HNts6BEOzui_FtKQkWG-0zhU.crl (hash: Sl8tnMORc++nOj14hlQqfv8MIBe7biEwmUffdl6SrII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:20:c3:2e:ba:06:4c:5b:2c:a5:84:4c:a9:e1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15
Validity
Not Before: Mar 25 21:01:10 2026 GMT
Not After : Mar 26 21:01:10 2026 GMT
Subject: CN=df83a74d6475f6a1e81b4a4ae02554e3bbc41400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:e3:03:ba:44:c4:37:fb:97:91:c3:f2:b5:
24:d8:2f:f5:df:68:85:ea:69:be:62:e9:5e:81:8a:
8f:cd:59:41:02:51:e1:37:6b:f2:0a:9c:a9:69:8c:
bb:74:11:e1:7f:49:cb:f5:3e:4f:d8:2a:ee:96:ea:
88:3b:bd:68:f4:e1:79:a8:72:f9:c7:8c:f6:4d:71:
b5:25:ff:79:f3:4c:8f:e7:f3:be:e1:72:8a:c6:70:
3c:43:3d:0c:68:d9:32:a5:83:5b:ac:31:2c:53:e9:
7e:df:ad:e1:b4:b4:83:6d:95:6d:bd:aa:5e:7b:25:
fd:77:8b:7b:0a:14:a0:f0:ff:2b:ec:84:47:da:5a:
86:f1:27:61:ae:63:bb:69:c9:86:23:2c:31:d6:e5:
78:8c:d3:91:78:9d:64:60:de:a4:79:5f:50:ba:e9:
51:9d:22:24:49:02:59:ac:80:1d:e9:0c:29:f9:40:
99:58:a5:4f:7c:1e:75:5f:07:23:d7:59:05:27:f9:
e3:30:e0:b3:f8:f6:6a:92:2c:d4:63:bb:79:81:01:
76:ff:65:f4:9b:61:40:12:bf:c9:9c:a2:ac:6b:8b:
a2:8b:89:3f:cf:65:e6:dc:b1:66:0a:b9:f0:e3:6a:
a1:f8:e8:cc:e4:b9:11:8d:e6:ac:92:f2:ca:ea:33:
41:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:83:A7:4D:64:75:F6:A1:E8:1B:4A:4A:E0:25:54:E3:BB:C4:14:00
X509v3 Authority Key Identifier:
keyid:30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5b:44:ff:b3:ab:b0:29:d0:04:2b:02:a5:cc:62:47:27:31:
cc:a9:ab:bf:67:c8:50:17:08:5a:18:88:0d:c1:b3:80:13:34:
06:ad:2f:cc:13:e2:3e:36:81:b2:a6:f6:a2:b7:da:72:a2:94:
c3:a1:52:de:df:a7:9b:94:d9:a9:bc:2b:64:ef:38:6f:07:c9:
02:e3:f9:14:5c:1b:6e:5b:de:3d:db:9b:39:92:74:37:81:c3:
5b:5c:ef:b1:5a:b2:00:79:bf:af:9a:47:35:1c:1b:18:17:e3:
35:5e:5a:9d:74:10:6b:c7:dd:61:f3:a7:83:02:a6:1d:52:85:
a2:48:21:2a:54:61:93:5b:be:09:c6:0c:fa:a1:aa:bf:16:e2:
6a:75:43:d7:97:6a:5a:e8:32:fc:63:55:e6:e3:b2:01:cc:f3:
5a:e5:73:1f:19:aa:46:72:4b:01:fd:5f:48:de:1d:1b:49:dc:
49:15:37:84:dd:be:3c:7b:17:c2:bc:42:07:19:6d:f5:49:17:
e3:61:84:fc:f2:9e:72:10:cf:cb:80:79:7a:3c:7d:86:47:92:
57:dc:d8:c7:73:16:b4:37:4d:51:90:10:b2:12:92:63:67:bb:
39:d8:49:5e:24:f2:4b:24:0e:aa:99:60:56:d8:a0:4c:4c:83:
c0:16:98:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:54 2026 by rpki-client