Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: 5wAPWKRdyUTw8R6xEvpmFUdZacrYe7Iq8o6xhxVW1vo=
Subject key identifier: 1D:A1:07:38:42:26:8D:B4:AD:31:14:36:82:3D:23:F0:F5:1D:01:75
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 019D9A751AF8FADC7A1452AD9C96C67FDABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:00:59 +0000
Manifest this update: Fri 17 Apr 2026 08:00:59 +0000
Manifest next update: Sat 18 Apr 2026 08:00:59 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: ipfxB9b0U/kUu8GiQ39wUX7zE3+yX3ZEffFOv5FxXrc=)
2: cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa (hash: /VirzHss1ndnL0VauqeSmTCntzhbwvddkhihXgztiNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:1a:f8:fa:dc:7a:14:52:ad:9c:96:c6:7f:da:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Apr 17 08:00:59 2026 GMT
Not After : Apr 18 08:00:59 2026 GMT
Subject: CN=1da1073842268db4ad311436823d23f0f51d0175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:ef:54:0f:f6:02:9d:66:c5:f3:ce:b0:3a:
15:cb:a7:9d:83:2a:7d:f7:5e:0a:0a:3d:5b:17:99:
b1:1d:dd:ce:5c:25:57:46:45:ec:e3:ce:38:20:ac:
6c:cb:51:52:d2:16:be:ac:5c:d5:8e:5d:fb:8b:f1:
b7:0c:f9:7a:9a:e1:ad:e6:04:f9:43:28:22:3c:30:
c7:c0:3b:91:45:5f:41:b7:67:40:0f:f5:56:f8:54:
de:27:48:1f:1e:9b:b4:1b:37:c6:c6:d0:cb:25:34:
9b:34:07:fa:2d:5a:af:e4:56:bb:7b:75:37:7d:df:
b0:70:0f:1a:2e:22:df:69:63:ff:02:71:f9:cf:ff:
23:4e:c2:16:75:31:9a:d6:5e:a2:dd:82:91:07:18:
ae:40:fe:39:f4:20:c6:fe:1f:26:7b:d2:ca:c7:c5:
99:d8:e6:1c:4a:91:8f:15:59:26:d2:61:8c:ee:7a:
5c:69:df:1b:9f:b7:88:e4:a1:ec:a5:b1:e3:ab:e5:
99:11:cc:4c:c8:b5:4b:2c:a3:a7:0a:1d:4f:84:56:
c2:11:6b:8c:d4:68:68:ff:28:5c:5e:b2:19:85:f0:
89:d0:a6:7b:d4:51:68:6a:17:98:56:cf:fa:f4:76:
9a:b9:28:61:c4:1c:15:ce:15:f0:4c:b3:5e:9e:d5:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A1:07:38:42:26:8D:B4:AD:31:14:36:82:3D:23:F0:F5:1D:01:75
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b3:8f:0b:67:d4:b5:42:d1:f7:1b:21:6b:d4:c3:d1:5e:c7:
9a:8c:ac:b5:54:9b:fa:ee:60:64:c7:55:84:4c:66:f2:86:82:
aa:c6:76:94:7b:45:c7:98:58:fc:1d:58:7f:7c:f6:db:22:58:
db:cf:3b:11:69:1e:0b:c8:b0:da:5a:03:7c:f3:a7:89:ae:31:
ad:59:10:f3:41:9a:74:a2:86:bb:ad:97:be:b7:09:11:a8:95:
23:d3:5d:2e:65:92:d2:bc:9a:7a:d6:db:3b:c5:b2:1a:02:66:
0f:67:03:cd:c3:ad:a1:41:78:2e:d4:a9:36:02:c5:4b:df:83:
b9:a3:22:19:00:26:1e:f8:9f:d6:3c:1f:fb:2d:a4:d2:a7:6a:
76:87:bb:0d:1d:f4:87:8f:1b:73:58:28:1c:b6:0e:1a:c1:f0:
b2:ee:a9:e0:ec:84:d8:da:eb:56:b4:2b:56:3d:68:9d:52:dd:
37:3e:5c:99:cf:23:3b:f0:33:cf:54:f6:e5:98:e2:e4:d8:9a:
8a:18:14:18:63:cc:3f:ad:1b:46:c0:8b:4a:0e:d5:59:c7:4c:
33:0f:fe:d8:d2:1d:45:d0:a6:5b:48:d4:38:21:49:de:5c:35:
8f:92:49:df:ef:8f:b4:05:59:28:5e:51:65:94:8a:e0:55:4b:
c1:99:4a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:27 2026 by rpki-client