Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: zvXRF7Gn3TjexMpc8VIQdseBsBV9g309R/+71GdpRbQ=
Subject key identifier: 71:F4:16:C8:3D:12:DE:4F:69:4D:34:8F:71:F6:16:8A:74:3D:93:37
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 019CACEBB5928F7064E8797D399F06DFE95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 05:00:54 +0000
Manifest this update: Mon 02 Mar 2026 05:00:54 +0000
Manifest next update: Tue 03 Mar 2026 05:00:54 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: 3EkV3PFMf8SytxnLi71skPucltbQk5nctgwlW6pMh64=)
2: cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa (hash: /VirzHss1ndnL0VauqeSmTCntzhbwvddkhihXgztiNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b5:92:8f:70:64:e8:79:7d:39:9f:06:df:e9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Mar 2 05:00:54 2026 GMT
Not After : Mar 3 05:00:54 2026 GMT
Subject: CN=71f416c83d12de4f694d348f71f6168a743d9337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:c9:c8:8f:0b:85:a0:dd:ba:65:4e:de:35:
d9:40:19:08:f7:1b:7e:83:46:74:1c:8c:61:92:22:
ab:cc:89:ff:ac:6d:64:58:12:55:d1:e7:b5:50:a4:
1a:56:5e:7c:09:14:72:9e:2d:00:d8:04:0b:d6:66:
e4:e5:17:d3:7a:2f:0d:3f:e4:c2:9b:d9:4c:85:de:
8a:13:24:cc:ce:18:be:d4:84:92:57:bf:74:0c:b5:
4f:27:3c:c6:fd:75:03:0b:b7:88:aa:2c:96:b9:6e:
4f:6a:ab:d2:db:f4:be:87:13:2c:30:a3:96:24:d6:
70:14:f9:08:07:7e:d7:28:ce:54:9d:0e:16:41:1a:
ec:e0:85:21:79:ce:d4:3a:b4:5d:2d:27:06:92:ef:
b1:5b:00:f4:02:a5:64:5a:d5:00:2d:e7:80:48:cf:
63:6b:46:19:fe:ab:de:47:aa:50:32:d6:f1:ca:82:
87:17:cc:f4:dd:ba:32:24:df:f1:c4:31:71:a1:3c:
ff:ba:5d:f0:3d:2c:32:ea:34:7d:f4:03:55:0e:fe:
9d:4b:3e:af:1e:78:eb:a9:bd:da:cf:ff:16:40:f2:
0b:9b:af:fc:56:82:c7:73:b9:01:d2:72:1b:99:66:
05:23:56:78:87:a8:2a:29:91:8c:7f:1f:e7:74:77:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F4:16:C8:3D:12:DE:4F:69:4D:34:8F:71:F6:16:8A:74:3D:93:37
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2e:fc:0b:e4:5f:68:69:1e:ff:43:54:16:4d:85:30:16:69:
34:c7:97:0d:f1:81:73:f6:22:e6:31:7d:69:a7:a3:b1:ef:fb:
05:9b:cf:c3:25:20:62:29:c5:b9:a3:4b:f0:28:3e:5f:be:ee:
57:d1:65:87:63:ac:e7:47:a9:8c:cd:8c:69:5a:35:2f:70:5c:
68:e6:2b:e5:41:25:f3:e2:ab:c0:39:09:07:9c:56:8e:05:01:
59:ee:f4:c5:82:a1:11:0c:bf:95:25:9c:1d:76:44:a9:19:c1:
00:ba:74:7c:f4:a7:ad:fa:9d:7b:88:c2:8e:c1:2e:c1:53:ba:
e3:52:a3:ed:4c:ea:f7:71:52:f8:e2:50:5e:c2:b8:d0:1d:7b:
e9:39:49:35:e6:d0:21:be:b0:ee:b0:6a:b5:db:89:87:b3:8e:
45:a5:3c:e3:3b:7a:f5:a5:8d:7e:9c:d5:13:39:97:ba:2f:bb:
b6:00:9c:30:2a:fd:63:31:0e:ba:83:d1:ec:4c:82:3a:b4:39:
a4:a5:85:94:c4:41:59:d9:29:78:0f:1a:2c:b1:61:f9:df:9c:
2b:1d:78:d9:0d:af:78:f2:97:a8:2c:dd:e6:f1:38:b0:b3:8a:
7b:3a:77:f5:b6:55:41:ae:77:85:88:c6:36:43:55:b1:9b:ad:
01:b0:8e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:54 2026 by rpki-client