
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
File: MC0R6FJhV0AHazKBuK_w-sXKLzM.mft (raw, json)
Hash identifier: 3843szE0oUd6QYh88GGhNJI2aiaUCYSW/cdN2DeBi3I=
Subject key identifier: 89:8B:31:0F:C9:16:B2:88:DB:9C:74:99:1B:3C:8D:D9:02:57:A5:2A
Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
Certificate issuer: /CN=302d11e852615740076b3281b8aff0fac5ca2f33
Certificate serial: 019D2884B049D9D24763FCFEB01C87E319BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
Manifest number: 139C
Signing time: Thu 26 Mar 2026 05:01:17 +0000
Manifest this update: Thu 26 Mar 2026 05:01:17 +0000
Manifest next update: Fri 27 Mar 2026 05:01:17 +0000
Files and hashes: 1: GC08QJ8vqcZbchKkqPwP8cf0XKU.roa (hash: rBtLHlVuYDvBMD0iO8jL2FzT2BZgIkepGzjg4WAsTWI=)
2: MC0R6FJhV0AHazKBuK_w-sXKLzM.crl (hash: lwH7JhD2/OINT0UcchlRoOIx5tOJFcCGVzwlqGc+wp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b0:49:d9:d2:47:63:fc:fe:b0:1c:87:e3:19:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33
Validity
Not Before: Mar 26 05:01:17 2026 GMT
Not After : Mar 27 05:01:17 2026 GMT
Subject: CN=898b310fc916b288db9c74991b3c8dd90257a52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:71:0b:4f:18:81:0e:58:94:a9:8c:7d:8a:bf:
66:81:7a:d4:33:c5:77:cf:d5:24:5f:45:b0:bb:f2:
8c:f6:e0:d8:09:df:51:08:c6:9a:ab:ef:86:c3:14:
1a:82:88:5a:ea:a0:d5:6c:75:f7:f8:e8:9a:30:42:
bd:b3:be:47:7d:f2:cb:c2:b4:b2:72:67:51:5e:b8:
16:15:fd:77:35:5f:10:3b:9d:0c:e7:91:e0:8b:c2:
fa:98:24:ef:82:52:6a:45:90:25:35:2d:16:bf:48:
24:fb:85:33:c7:4d:44:73:52:67:4c:57:c6:40:d2:
23:5c:62:fa:79:0d:fd:34:a1:7a:24:ce:47:f6:e0:
b9:7f:02:e6:ce:02:5d:d0:db:6f:d7:3f:6c:11:77:
b8:e6:84:64:3e:3b:7c:e0:67:c4:49:a4:bc:7b:ff:
15:55:a1:16:38:f9:94:77:ed:6c:0c:73:6e:f1:1d:
a1:02:64:f4:24:e2:fa:1a:60:88:30:65:4e:4c:89:
e1:a0:ff:d2:bd:49:f0:ad:31:0e:d1:16:44:e0:f7:
ec:cb:f9:2b:3a:47:19:c8:dd:d9:0e:31:fc:1b:06:
96:f4:26:61:60:d6:ac:90:fa:5c:4d:ad:92:55:54:
0d:55:76:e7:c9:f0:00:d5:b5:fd:66:05:a6:84:2a:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8B:31:0F:C9:16:B2:88:DB:9C:74:99:1B:3C:8D:D9:02:57:A5:2A
X509v3 Authority Key Identifier:
keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b5:fa:dd:79:64:96:4f:d5:32:8d:25:db:c9:4a:45:f1:44:
9d:a7:de:fd:2c:47:ff:84:3d:3f:f0:9f:43:7d:36:4d:62:50:
8f:b6:4e:3c:ab:c5:07:67:e7:9d:b5:e8:11:3a:36:bb:af:f5:
eb:ac:a2:9b:fa:1d:e3:68:10:7c:f5:ac:4a:d8:e9:5e:9d:1e:
c8:94:6d:62:a9:23:9f:1e:ff:15:81:a5:87:25:18:24:e9:7f:
12:a8:4a:1a:ca:41:81:16:7e:1b:51:2f:3e:fd:7a:6d:19:cf:
c4:bc:57:a9:02:8f:9e:f0:99:9b:a9:ad:bd:95:e3:96:39:f9:
1c:25:2f:2c:56:82:57:2e:71:c2:11:7d:12:f9:9a:8f:55:89:
ec:35:66:e7:54:cd:c3:a7:1d:c5:ea:32:69:f7:2c:27:3b:9e:
38:7e:c6:d7:30:50:9f:e5:ce:9c:0e:1c:74:76:d5:85:91:b0:
1f:40:d0:03:1d:15:54:8e:43:aa:da:9d:1b:fd:e8:a5:3e:65:
3b:47:20:ef:ab:4f:e8:d7:c1:36:5d:30:a6:b5:b8:57:f2:57:
b6:03:5f:f9:e0:e9:4c:1c:95:32:53:37:43:8a:f4:73:9c:c7:
a6:6f:c8:ed:3c:60:e9:21:e3:8a:79:e0:82:d3:8e:90:4d:b3:
8f:95:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:20 2026 by rpki-client